1drv.ms/w/s!AigGPTWtWsMRhGJOnFa03KXftIK_?e=YrJG7r
301 Moved Permanently 0 B URL User Request GET HTTP/2 1drv.ms/w/s!AigGPTWtWsMRhGJOnFa03KXftIK_?e=YrJG7r
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectstorage.live.com
Fingerprint57:B0:C5:25:28:D0:75:FB:97:40:B6:55:BC:3F:15:BB:49:64:36:85
ValidityThu, 04 Jan 2024 21:21:38 GMT - Sun, 29 Dec 2024 21:21:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w/s!AigGPTWtWsMRhGJOnFa03KXftIK_?e=YrJG7r HTTP/1.1
Host: 1drv.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://onedrive.live.com/redir?resid=11C35AAD353D0628!610&authkey=!AE6cVrTcpd-0gr8&ithint=file%2cdocx&e=YrJG7r
x-msnserver: AMS0PF7FD714D6C
strict-transport-security: max-age=31536000; includeSubDomains
ms-cv: FDioY119bES7EckH1IZG8A.0
x-asmversion: UNKNOWN; 19.1381.322.2019
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BDEC2BBC5C4743A5AE553DF201E76117 Ref B: OSL30EDGE0221 Ref C: 2024-04-25T21:27:00Z
date: Thu, 25 Apr 2024 21:27:00 GMT
content-length: 0
X-Firefox-Spdy: h2
onedrive.live.com/redir?resid=11C35AAD353D0628!610&authkey=!AE6cVrTcpd-0gr8&ithint=file%2cdocx&e=YrJG7r
264 B URL onedrive.live.com/redir?resid=11C35AAD353D0628!610&authkey=!AE6cVrTcpd-0gr8&ithint=file%2cdocx&e=YrJG7r
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with CRLF line terminators
Hash fed090c777170ee0d8a2529f2b2b2420
bcee42d97e02b4f5b43b28cea5027c046f478e95
1ab0d3d771426f2b96aee71bb8886b024782067a38c89e1b1056e3133e1d803f
GET /redir?resid=11C35AAD353D0628!610&authkey=!AE6cVrTcpd-0gr8&ithint=file%2cdocx&e=YrJG7r HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
content-length: 264
content-type: text/html; charset=utf-8
expires: -1
location: /edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
set-cookie: E=P:U1/FcW5l3Ig=:fqL5aci9K9Bt3WgOpX5b9FSS+gKWGqceS8h+ZLPxXBw=:F; domain=.live.com; path=/
xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; domain=.live.com; path=/
xidseq=1; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 25-Apr-2024 19:47:00 GMT; path=/
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 9fd8c46f5-lqjmt
x-odwebserver: eurwesteur910235-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F0E66EEAC0924113A057E010599A805D Ref B: SVG20EDGE0217 Ref C: 2024-04-25T21:27:00Z
date: Thu, 25 Apr 2024 21:27:00 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
200 OK 7.9 kB URL GET HTTP/2 res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash 760f69985c44556f90d31cdb278286be
98632d39e3ca24fdd974ac98bf187963a065ce8a
4fbd8cc4075e1795215327af5e43e8ca3339677802700d19aefc57ba1713a12d
GET /officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
last-modified: Tue, 11 Apr 2023 08:46:21 GMT
x-ms-request-id: da521681-601e-0082-4500-4a83bc000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:01 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129192786,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080421.7b35352&TotalRTCDNTime=2&CompressionType=&FileSize=7886"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=2, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
209 kB URL onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Size 209 kB (209167 bytes)
Hash 4f90eb9c9dd6c6d18b18807b7a927226
6acdf14d0829772203b3443f40ada2b508ae86ff
2280c9757849d523ef606a6c0459e51f60170e35fb79a540b5d9649035e3434f
GET /edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628 HTTP/1.1
Host: onedrive.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: E=P:U1/FcW5l3Ig=:fqL5aci9K9Bt3WgOpX5b9FSS+gKWGqceS8h+ZLPxXBw=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
set-cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; domain=.live.com; path=/
xidseq=2; domain=.live.com; path=/
LD=; domain=.live.com; expires=Thu, 25-Apr-2024 19:47:01 GMT; path=/
wla42=; domain=live.com; expires=Thu, 02-May-2024 21:27:01 GMT; path=/
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-msnserver: 9fd8c46f5-lqjmt
x-odwebserver: eurwesteur910235-odwebpl
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 01E8DE956D9D43C3A9B47360188CD548 Ref B: SVG20EDGE0217 Ref C: 2024-04-25T21:27:00Z
date: Thu, 25 Apr 2024 21:27:01 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
353 B URL res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (351)
Hash 31c05f8e27abe3f85548a4c9735da1c4
306e842778d688f377166b13ad0b695b035d42eb
c31b75d03121f2238e3f54b375534e141b2844ccd01c2e9d22412b154ff9ac50
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 353
last-modified: Sat, 20 Apr 2024 06:22:04 GMT
x-ms-request-id: f183d6b8-101e-005d-55dc-94f513000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 7A4B57CC16D96BA3C1F929248F196219900A9883F9728999400DC133C90567ED00
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 21:27:01 GMT
akamai-request-bc: [a=95.101.10.204,b=129192795,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080421.7b3535b&TotalRTCDNTime=4&CompressionType=br&FileSize=353"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=4, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
200 OK 39 kB URL GET HTTP/2 res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65476)
Hash 7e8696b25a28fb4e7ea773a68aa8dfe5
2f29d7054388390d0040a5bfd2e6bc02d0a759a6
2abca138c3c22fb15ec89db558736331b6afc0ff557a55b4d2fadab6116cc877
GET /files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 38697
last-modified: Sat, 20 Apr 2024 06:22:14 GMT
x-ms-request-id: 49d7e669-e01e-0059-61dc-947814000000
x-ms-meta-sourcebuild: odsp-web-prod_2024-04-19.004
x-ms-meta-sourceid: 23FB0AD6A406C190F5D7D5100518A7C92596D259DABDA4709E47DF5E3FB508D200
content-encoding: br
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
akamai-request-bc: [a=95.101.10.204,b=129193492,c=g,n=NO__OSLO,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35614&TotalRTCDNTime=6&CompressionType=br&FileSize=38697"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=6, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.js
2.7 kB URL wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (5825)
Hash 3f689e0da18a51bc2349f619506c8388
3a3b51bb0e8d5c085b9f30d1f1da0a88c094e3fb
1b614eeb1c42803ca31c6c52bdc272318ab6a410a25772016d73d37213c25abc
GET /wise-m/owl/5mttl/production/50/manifest.js HTTP/1.1
Host: wise-m.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 2681
last-modified: Tue, 23 Apr 2024 22:49:38 GMT
x-ms-request-id: 67670809-e01e-0059-38d0-957814000000
content-encoding: br
cache-control: max-age=300
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.73.3.77,b=481264759,c=g,n=SE_AB_STOCKHOLM,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=STOCKHOLM&ASN=20940&Country=SE&Region=AB&RequestIdentifier=0.4d034917.1714080422.1caf8477&TotalRTCDNTime=22&CompressionType=br&FileSize=2681"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=22, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
48 kB URL wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
IP
ASN #20940 Akamai International B.V.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 5d885ac5e9957fa7fc2e12b8d8bfe27f
7869dc6df5c92ecec4825ba355a334d0065e3dbd
0f67723c2a54546380dd9cd6d77265902e973cb35455fb9d08f3ceb3fc62d1bd
GET /wise/owl/owl.slim.43b32de0474de28993ac.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 47462
last-modified: Tue, 23 Apr 2024 05:28:05 GMT
x-ms-request-id: 2742c44a-a01e-0048-7e40-95e2a0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
akamai-request-bc: [a=23.73.3.77,b=481264922,c=g,n=SE_AB_STOCKHOLM,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=STOCKHOLM&ASN=20940&Country=SE&Region=AB&RequestIdentifier=0.4d034917.1714080422.1caf851a&TotalRTCDNTime=22&CompressionType=br&FileSize=47462"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=22, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
wise.public.cdn.office.net/wise/owl/word.boot.8175f805271a355d5852.js
200 OK 38 kB URL GET HTTP/2 wise.public.cdn.office.net/wise/owl/word.boot.8175f805271a355d5852.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 1a16d565c3bcb13a857ce5768e8d6b73
6d31d01cc4e07d07645b588b23e81efab283555b
90b07d4d9e72cb234400a3b8b84c30a0be7c930df8a33d4e532e5511a6a7a5e8
GET /wise/owl/word.boot.8175f805271a355d5852.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 37695
last-modified: Tue, 23 Apr 2024 05:28:04 GMT
x-ms-request-id: 0b45d369-701e-005b-6d40-95c6ac000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
akamai-request-bc: [a=23.73.3.77,b=481265031,c=g,n=SE_AB_STOCKHOLM,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=STOCKHOLM&ASN=20940&Country=SE&Region=AB&RequestIdentifier=0.4d034917.1714080422.1caf8587&TotalRTCDNTime=22&CompressionType=br&FileSize=37695"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=22, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
0 B URL common.online.office.com/suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 707
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=31f198ecf7ba206ad93e765415573037273bcbb6a0de7d0199f0838f5ddaa1bd;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: 32110b5d-5e92-4307-8f45-1e08493bb4a1
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75F
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4E5
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control
x-msedge-ref: Ref A: BEDE4920C558460BAB922FFBD235ED55 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:02Z
date: Thu, 25 Apr 2024 21:27:02 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4481
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 005327e8-efc3-4942-ba73-2fc07962dc58
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7C6
x-officeversion: 16.0.17622.41001
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2B92BF16243B48F888B38868840FF27C Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:02Z
date: Thu, 25 Apr 2024 21:27:02 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db
0 B URL word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 109
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 16d0a041-b2d5-42d2-a985-e3425d2e0a81
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF000089E9
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: A34079A6446E432D99304FA4316988D8 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:02Z
date: Thu, 25 Apr 2024 21:27:02 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
8.6 kB URL res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (1141)
Hash bcc8fcba76c1a94f5ebe1d9b803dec6f
03b30d8e3852b7872351c9e427e54100153d082e
53ce432c2b641e87f8bf0c9eb069fda8b8e858cf5b3e4cdb701d26dc4cd47df1
GET /officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8641
content-type: text/css
last-modified: Tue, 02 Apr 2024 06:34:15 GMT
x-ms-request-id: 278ab5b9-201e-000b-16f7-8404fc000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194732,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35aec&TotalRTCDNTime=1&CompressionType=br&FileSize=8641"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/WordEditor_version4.min.css
48 kB URL res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/WordEditor_version4.min.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 22a31ef6ea33c613f32ae63cbbf266fe
3b7bce9a1cf9035d52e8d4b39a31d53fb2f244e5
44ff8165a748f6742c4f130ef169f2d6d5744436b7d19786431418035522e3a8
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/WordEditor_version4.min.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47867
content-type: text/css
last-modified: Sat, 06 Apr 2024 01:34:42 GMT
x-ms-request-id: 6039a450-701e-0016-6cc1-890940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194748,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35afc&TotalRTCDNTime=1&CompressionType=br&FileSize=47867"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wp5/wacBoot.min.js
200 OK 44 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wp5/wacBoot.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 1feaeeb7b1ae29e6413f41765e1d7897
24936ed745c26dbb6b24ce4af6c59ba62e080744
6c9b58b5a3e38aa740c836015b4c63cc8086aa207ea1b6eec5a9167b15e9608c
GET /officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wp5/wacBoot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43748
last-modified: Thu, 18 Apr 2024 12:43:11 GMT
x-ms-request-id: 855e2d7a-601e-0068-06e0-929907000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194751,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35aff&TotalRTCDNTime=1&CompressionType=br&FileSize=43748"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA68D75090F64DF1F_resources/en-US/clientManifest.exp.js
31 kB URL res-1.cdn.office.net/officeonline/we/s/hA68D75090F64DF1F_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 78dc660b001e9ce0c0c73daa4cb79d02
0051ff50abde524cb3e523dec953d6ab376d97c8
a68d75090f64df1f1e196c4ea2979d5e242f0825d60ac0b54341c0731387dac4
GET /officeonline/we/s/hA68D75090F64DF1F_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 30923
last-modified: Mon, 22 Apr 2024 11:55:36 GMT
x-ms-request-id: 976e89f6-c01e-002c-67df-941338000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194781,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35b1d&TotalRTCDNTime=1&CompressionType=br&FileSize=30923"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h1F6F2DFCF78EC558_App_Scripts/wp5/appResourceLoader.min.js
200 OK 9.0 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h1F6F2DFCF78EC558_App_Scripts/wp5/appResourceLoader.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (38401)
Hash 3816643df3c1eec22ac50ff5adae85d4
daf6fcaa1f39f8a7bc35652d2b5a406a49378ab1
1f6f2dfcf78ec5584872816d82f81440fa6e5b1e6f326192f65072baf33dee2e
GET /officeonline/we/s/h1F6F2DFCF78EC558_App_Scripts/wp5/appResourceLoader.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9035
last-modified: Fri, 19 Apr 2024 08:37:59 GMT
x-ms-request-id: 42064403-401e-0050-75b7-923dc7000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194782,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35b1e&TotalRTCDNTime=1&CompressionType=br&FileSize=9035"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 036bd0e2-801e-004f-5c65-7a8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194909,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35b9d&TotalRTCDNTime=1&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hDFFBA05C2DB88E7C_App_Scripts/1033/common-intl.min.js
39 kB URL res-1.cdn.office.net/officeonline/we/s/hDFFBA05C2DB88E7C_App_Scripts/1033/common-intl.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (54955)
Hash 0544e33be3ac42d467f920ba3d30d2c2
c48ce77a0bbe6d13777458c52aae724c4821292c
dffba05c2db88e7c57470b0c5cdd64052c5af90a0362fad5b6dc4e98012cec80
GET /officeonline/we/s/hDFFBA05C2DB88E7C_App_Scripts/1033/common-intl.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39027
last-modified: Mon, 22 Apr 2024 11:55:42 GMT
x-ms-request-id: a2175803-b01e-0009-34df-94ba44000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194910,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35b9e&TotalRTCDNTime=1&CompressionType=br&FileSize=39027"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
1.4 kB URL res-1.cdn.office.net/officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5962)
Hash de83a7b3bc0a43a5f4e6bf8e71f5413c
bc3274e5c413edfa65fb6333e63d7fbefe1a12a8
a5e36060f6eab9c2b23dc2724f3758edc2d38a7336a619bdb463c3b3a81077cf
GET /officeonline/we/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1445
last-modified: Mon, 11 Sep 2023 19:11:48 GMT
x-ms-request-id: 156aadf9-301e-0028-1762-709e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194930,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35bb2&TotalRTCDNTime=1&CompressionType=br&FileSize=1445"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hE327D524CF238028_App_Scripts/1033/box4-strings.min.js
200 OK 16 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hE327D524CF238028_App_Scripts/1033/box4-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Hash b26b8344465a4e5d0d95123f80462063
93944b462acec4ff8c0de6c599c617f95c04d437
e327d524cf238028d97093f0246b41c24e6a6c14c7f66965b132ef377fa6548b
GET /officeonline/we/s/hE327D524CF238028_App_Scripts/1033/box4-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 15507
last-modified: Thu, 18 Apr 2024 23:20:35 GMT
x-ms-request-id: 31ea3364-301e-0038-13f7-915b57000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:02 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129194931,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080422.7b35bb3&TotalRTCDNTime=1&CompressionType=br&FileSize=15507"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h3F1B277888DB9EE6_App_Scripts/1033/wac-wonca-strings.min.js
200 OK 5.4 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h3F1B277888DB9EE6_App_Scripts/1033/wac-wonca-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (24333)
Hash bfb49c4480ecec32ce0d074310fed8ee
19eeb70dc9c1af130370fb66b6bbe6bf732fe415
3f1b277888db9ee63d985c8bcb1824e4cd3899164eb2ff3fff19c6439b8b2e33
GET /officeonline/we/s/h3F1B277888DB9EE6_App_Scripts/1033/wac-wonca-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5436
last-modified: Wed, 03 Apr 2024 22:44:42 GMT
x-ms-request-id: e381e188-b01e-006b-3f2b-867863000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195001,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35bf9&TotalRTCDNTime=1&CompressionType=br&FileSize=5436"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h3EDC7FBAB3270D84_App_Scripts/1033/wac-wordeditor-strings.min.js
200 OK 18 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h3EDC7FBAB3270D84_App_Scripts/1033/wac-wordeditor-strings.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65516), with no line terminators
Hash 334afa79b13e3a1bb153de92810d4a20
fa5028a04248e2f9a50fb60ae81e8117e4ae2798
3edc7fbab3270d84b50e873f201cb0dcdd86835afdd8578a806c9defd3d2b2dc
GET /officeonline/we/s/h3EDC7FBAB3270D84_App_Scripts/1033/wac-wordeditor-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18058
last-modified: Mon, 22 Apr 2024 11:55:16 GMT
x-ms-request-id: f0776e7d-b01e-0026-68df-94b78f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195002,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35bfa&TotalRTCDNTime=1&CompressionType=br&FileSize=18058"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
200 OK 4.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (14666), with no line terminators
Hash 8880e957219b056b26b67d88cb7ffff5
be024abfe99c2dc447191e2c59dd96fd9352e2c4
4bbb0dbb03a136e993bb2fb363455e7dcabf84cbb17de37ad6168b9326e56909
GET /officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4474
last-modified: Wed, 23 Aug 2023 01:02:53 GMT
x-ms-request-id: 01ae70c8-701e-0029-35f6-74c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195005,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35bfd&TotalRTCDNTime=1&CompressionType=br&FileSize=4474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h30D208A6B4BBB15B_App_Scripts/WordEditorDS.core.js
404 kB URL res-1.cdn.office.net/officeonline/we/s/h30D208A6B4BBB15B_App_Scripts/WordEditorDS.core.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3005)
Size 404 kB (403688 bytes)
Hash 4bd0c2f9dfb8de5b6006471aa93100fb
093e4ef89053fa8f53fb24b51d3f605820b4dd49
30d208a6b4bbb15b4cfa643979c1a0a161ff0397257c6c855f9a61bdb7e362a5
GET /officeonline/we/s/h30D208A6B4BBB15B_App_Scripts/WordEditorDS.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 403688
last-modified: Mon, 22 Apr 2024 11:46:24 GMT
x-ms-request-id: 72b207c3-301e-0028-7ddf-949e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195003,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35bfb&TotalRTCDNTime=1&CompressionType=br&FileSize=403688"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h5BA87D3687682F8B_App_Scripts/WordEditorDS.js
1.0 MB URL res-1.cdn.office.net/officeonline/we/s/h5BA87D3687682F8B_App_Scripts/WordEditorDS.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (715)
Size 1.0 MB (1019938 bytes)
Hash 6e51a280e64028f2200924147d8929b3
fc26c0f8d6533a75a2fbd31eb20c0fcfe96dfb0e
5ba87d3687682f8b74294e74bbfc1728730ef7a7c9fa43bf372927e8ed1af6a5
GET /officeonline/we/s/h5BA87D3687682F8B_App_Scripts/WordEditorDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1019938
last-modified: Mon, 22 Apr 2024 11:46:38 GMT
x-ms-request-id: c07100e0-001e-0041-55df-94a773000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195004,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35bfc&TotalRTCDNTime=1&CompressionType=br&FileSize=1019938"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
200 OK 2.9 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 2944, version 4.30147
Hash 569a610df4fd269faa528a2197dfaa9a
cfc7596b939a341c5ddffc53cfd607745af18e8f
09a1411bf361d3d649f4ff5098e0197510232477bf099872f58f5d1ec483e9af
GET /officeonline/we/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2944
last-modified: Tue, 11 Apr 2023 08:47:45 GMT
x-ms-request-id: 1ba53f5a-d01e-0042-1bfa-6e4617000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195807,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35f1f&TotalRTCDNTime=1&CompressionType=&FileSize=2944"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 06 Apr 2024 01:34:17 GMT
x-ms-request-id: ff891282-801e-004f-17f4-898ec3000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195808,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35f20&TotalRTCDNTime=1&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 06 Apr 2024 01:34:17 GMT
x-ms-request-id: ff891282-801e-004f-17f4-898ec3000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:03 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129195806,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080423.7b35f1e&TotalRTCDNTime=1&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1
200 OK 27 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 56b8403d8ff577b472fe60d752f2c4a9
803c7842d94a6318d1e2e4714c458f68ae71a77d
fbe7d47e1436bfbcf6e4685e5d2ac3f12e9ca99bdadd1bd56dc9de241e98af7b
POST /we/OneNote.ashx?perfTag=GetCells_1&GetCellsBootstrapper=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
Content-Type: application/json; charset=utf-8
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-UserType: WOPI
X-WacCluster: PSE1
X-FEMachineId: GVX0EPF00008A4B
X-SessionStartDimensions: {"Application":"Word","Browser":"Firefox","BrowserMajorVersion":"96","BrowserVersion":"96.0","Host":"OneDriveWOPI","IsSynthetic":"False","Os":"Linux","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"OTHER","UiHost":"onedrivecom","UserSessionApplicationMode":"Unified","WACDatacenter":"PSE1"}
X-Requested-With: XMLHttpRequest
Content-Length: 2868
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
pragma: no-cache
content-length: 26774
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 9d67fb6f-23f2-4b9e-bbee-acbd25627da1
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefe: GVX0EPF00008A4B
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
x-officefd: GVX0EPF00008A21
x-wacfrontend: GVX0EPF00008A4B
x-officertcproxy: GVX0EPF00008A21
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 6F0E85A64CC6421AA98FE134CAA5A9FE Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:03Z
date: Thu, 25 Apr 2024 21:27:03 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 71e0e8ec-7339-4056-a97a-c3ba00b0c2ab
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":0,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 1b63230c-9d23-4cb9-8f89-ea7fd1b628ec
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PSE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: de69805b-cc06-471d-92ff-b58034b9d7c1
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 9078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 2bde35a8-72de-4ef5-99a2-ce15fe9b1e99
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A0B
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: DB6C14FFECEC474B9EA3B53AF7CD84F7 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:04Z
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":3,"Value":"{'k':[{'e' : 4, 'n' : 'BBODI'}]}","Type":"Kpi"},{"Index":2,"MsSinceStart":3,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSH', 'd' : '3'}]}","Type":"KPI"},{"Index":3,"MsSinceStart":95,"Value":"{'k':[{'e': 4,'n':'BBISS'}]}","Type":"Kpi"},{"Index":4,"MsSinceStart":95,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSI', 'd' : '95'}]}","Type":"KPI"},{"Index":5,"MsSinceStart":200,"Value":"WordEditorInstantApp.StartWacBoot","Type":"BootLogs"},{"Index":6,"MsSinceStart":202,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":7,"MsSinceStart":203,"Value":"{'k':[{'e': 4,'n':'BBIGC'}]}","Type":"Kpi"},{"Index":8,"MsSinceStart":1579,"Value":"https://res-1.cdn.office.net:443/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js","Type":"ResourceDownloadSuccess"},{"Index":9,"MsSinceStart":1584,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":10,"MsSinceStart":1591,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 2dee77f7-086f-4bfd-8349-23687f84cf00
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PSE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h2EC7CB2CF16007FA_App_Scripts/1033/word-app-intl-mlr.min.js
110 kB URL res-1.cdn.office.net/officeonline/we/s/h2EC7CB2CF16007FA_App_Scripts/1033/word-app-intl-mlr.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size 110 kB (109517 bytes)
Hash 3c07ab8070af42075a14ff0955a164ec
f2468102fd0d047a41937e1d78d8ff063bac8512
2ec7cb2cf16007fae55c6750c836484bf9ff05941fad01f05f9f76db49ca6991
GET /officeonline/we/s/h2EC7CB2CF16007FA_App_Scripts/1033/word-app-intl-mlr.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 109517
last-modified: Mon, 22 Apr 2024 11:54:50 GMT
x-ms-request-id: d5b402dd-c01e-003c-4914-95d650000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129197298,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080424.7b364f2&TotalRTCDNTime=1&CompressionType=br&FileSize=109517"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hA6F9EA5340EC2D21_App_Scripts/wp5/appChrome.min.js
200 OK 76 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hA6F9EA5340EC2D21_App_Scripts/wp5/appChrome.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 5ef21df26236164dd26a730341626752
ee8db2adbcb9ba56205f6af3df3ffde332c7c2f0
a6f9ea5340ec2d21161ced5c8338d99170f43045eb75bf92124844fa92f2bac6
GET /officeonline/we/s/hA6F9EA5340EC2D21_App_Scripts/wp5/appChrome.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76139
last-modified: Fri, 19 Apr 2024 08:41:01 GMT
x-ms-request-id: d1211d80-c01e-0013-42e5-92db9b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129197315,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080424.7b36503&TotalRTCDNTime=1&CompressionType=br&FileSize=76139"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hD08FB50578502802_App_Scripts/wp5/common.min.js
200 OK 392 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hD08FB50578502802_App_Scripts/wp5/common.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65468)
Size 392 kB (392227 bytes)
Hash c59ed5003d62493d290583a86d578db3
5d523959af0402dbef063a99d833c87cbe3b48be
d08fb505785028029c3d49561bc3702729d107bba67a877abf6db159605b50a2
GET /officeonline/we/s/hD08FB50578502802_App_Scripts/wp5/common.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 392227
last-modified: Fri, 19 Apr 2024 08:41:02 GMT
x-ms-request-id: 87813014-a01e-0067-22e5-92ef6b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129197310,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080424.7b364fe&TotalRTCDNTime=1&CompressionType=br&FileSize=392227"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
6.7 kB URL res-1.cdn.office.net/officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (46689), with no line terminators
Hash 9baaaf4d89e3b888bc9e400611d61b68
e4bdf6feedba53db1365f3e37f70fb6073b868af
095762fee3e77525953b8c3091a4f83f80f50fe5ab31499c403b3ed442806974
GET /officeonline/we/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6686
last-modified: Wed, 10 Jan 2024 09:21:00 GMT
x-ms-request-id: 7c3d7855-901e-000e-40a8-7ad627000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129197327,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080424.7b3650f&TotalRTCDNTime=1&CompressionType=br&FileSize=6686"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 21:27:04 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 21:27:04 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
200 OK 23 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 06 Apr 2024 01:34:38 GMT
x-ms-request-id: 02a34241-701e-0064-67cf-890e0f000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:04 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129197874,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080424.7b36732&TotalRTCDNTime=1&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash dc1e5a8ed2021382850db4d7d318c0e4
e1c886d7ea52a488ffd1014272e505384957e1e8
908db203834d78e92e959eaa036797d4759e518a64402759f265fe3a1134fb6d
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714080424192
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1875
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=37696774929c497ab14b7de5b2ba9d63&HASH=3769&LV=202404&V=4&LU=1714080424833; Domain=.microsoft.com; Expires=Fri, 25 Apr 2025 21:27:04 GMT; Path=/;Secure; SameSite=None
MS0=586972f2d1084d4ba6bc066dc7a7a26d; Domain=.microsoft.com; Expires=Thu, 25 Apr 2024 21:57:04 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 641
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:04 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 8805c92a-1280-4617-b3ad-544712640143
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2526
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 7b0c2947-2006-4a93-b40d-4df722897740
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A15
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: D227BEC35E2D4F2686763A345F841B85 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:04Z
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 2125
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: bc81d932-60bc-4213-a1d0-8d6f542378ba
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A0D
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 297C336E10E544C1B50C6DE89CA3076A Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:04Z
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-BrowserUlsBeacon: [{"Index":10,"MsSinceStart":1617,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":11,"MsSinceStart":1695,"Value":"DocumentCacheRemover.evictSpecifiedCacheItem result: false","Type":"RemoveInvalidDocumentCacheItem"},{"Index":12,"MsSinceStart":1715,"Value":"{'k':[{'e' : 3, 'n' : 'BBCSO', 'd' : '1715'}]}","Type":"KPI"},{"Index":13,"MsSinceStart":1743,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 5c126b07-8090-4982-b797-fe600328d724
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PSE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=HotStoreStatus_1
200 OK 226 B URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=HotStoreStatus_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 8ff4648af12864a9f57503602dd109b8
d3f3171432d52b846cab9e0e3cb71c172d9d0884
d4b3d08c892aa413a21ed644ce19a03cc42739d738434dc8b99198db72d48b1a
POST /we/OneNote.ashx?perfTag=HotStoreStatus_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1472
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 226
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: fea320c0-cf76-4f4d-85db-16b4fab58248
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAD
x-wacfrontend: DB5PEPF00011AAD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1BBCBA1FDD394994B9B44E13C17F54BE Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:04Z
date: Thu, 25 Apr 2024 21:27:04 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
200 OK 153 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash 08558b4ca5d601d0377123cd95ff68ec
2d77465a0a69d30b8ce40b262e40e1f90aecd9d2
94894b4a54c6a6b617a86473034e65da25a9e3fb32aef7ec7c7c789bcd58a43b
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714080424186
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 6120
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; Domain=.microsoft.com; Expires=Fri, 25 Apr 2025 21:27:04 GMT; Path=/;Secure; SameSite=None
MS0=9f92af4dbc424de19ba0ec330ebf52b6; Domain=.microsoft.com; Expires=Thu, 25 Apr 2024 21:57:04 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 678
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:04 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js
2.5 kB URL res-1.cdn.office.net/officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (10543), with no line terminators
Hash d4e64835d59be3b4abf3ee7ad4d7d1dc
bba289bfe7c4d1e82fdc3ab1093ed579b2219b6e
24bada8ee5ddc747d0f1297a13f3ec53ecea5aa03e48749329c0f9b0e28e9d09
GET /officeonline/we/s/h24BADA8EE5DDC747_App_Scripts/1033/comment-pane-strings.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2489
last-modified: Wed, 17 Jan 2024 21:34:51 GMT
x-ms-request-id: fe2d4125-a01e-00a2-1e58-4cf81b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129198382,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b3692e&TotalRTCDNTime=1&CompressionType=br&FileSize=2489"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
8.2 kB URL res-1.cdn.office.net/officeonline/we/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (35371)
Hash be73523c970f0bfa1c8f0a8c51f80bfc
b3bc3fd464e0a5766f27f84ca8d0c30993a26275
494ae42932343d70f747f5937271e4bc7b020d53a1a2973876b15af26db7b1dc
GET /officeonline/we/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8188
last-modified: Tue, 26 Mar 2024 16:11:38 GMT
x-ms-request-id: c53a9b4a-601e-0035-69cc-809383000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129198385,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b36931&TotalRTCDNTime=1&CompressionType=br&FileSize=8188"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h067445A5CE97297D_App_Scripts/wp5/common50.min.js
200 OK 426 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h067445A5CE97297D_App_Scripts/wp5/common50.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65466)
Size 426 kB (426465 bytes)
Hash f65125d9947a8f09f6fbc6ef0e345704
52a116856226aec1b651e33149665a62bb28a8e7
067445a5ce97297d6f025bb9abf7784df95f1eb2a827f08742c27661dccf215d
GET /officeonline/we/s/h067445A5CE97297D_App_Scripts/wp5/common50.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 426465
last-modified: Fri, 19 Apr 2024 08:32:58 GMT
x-ms-request-id: 4dea005a-f01e-0055-7de5-92ef1c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129198383,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b3692f&TotalRTCDNTime=1&CompressionType=br&FileSize=426465"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hE980E3D39AD8214C_App_Scripts/wp5/floatingContainerManager.min.js
15 kB URL res-1.cdn.office.net/officeonline/we/s/hE980E3D39AD8214C_App_Scripts/wp5/floatingContainerManager.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 6c388f104f9d88ad5ae32ffaaf78dae8
c4e2a5be9cbaa987e94bbbfc08233f7839a0aead
e980e3d39ad8214c4851d6288cb3a46605d9dd1c05a0609659c1aafdb6fa5220
GET /officeonline/we/s/hE980E3D39AD8214C_App_Scripts/wp5/floatingContainerManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 14992
last-modified: Fri, 19 Apr 2024 08:41:10 GMT
x-ms-request-id: 1cf8e2e9-001e-0033-2ae5-92a03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129198384,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b36930&TotalRTCDNTime=1&CompressionType=br&FileSize=14992"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
200 OK 19 kB URL GET HTTP/2 wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
IP
ASN #20940 Akamai International B.V.
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 58710a3e1b60016505fd9c4f99bf1993
ad4e757c2a15289c6ed0b3d256be8f1cce83897d
ceefd9162f27f345af51330885265102751eb5ec65f72dcf762cb9a86a0572be
GET /wise/owl/owl.handlers.27d51fd227a601990590.js HTTP/1.1
Host: wise.public.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 19048
last-modified: Tue, 23 Apr 2024 05:28:02 GMT
x-ms-request-id: 352cdde9-a01e-002a-7945-952087000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
akamai-request-bc: [a=23.73.3.77,b=481267785,c=g,n=SE_AB_STOCKHOLM,o=20940]
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=STOCKHOLM&ASN=20940&Country=SE&Region=AB&RequestIdentifier=0.4d034917.1714080425.1caf9049&TotalRTCDNTime=21&CompressionType=br&FileSize=19048"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=21, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: a623453d-3cb8-4d6c-a155-cee639f4018a
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:05 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db
0 B URL word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 71c707ee-3260-4d61-9304-cf1c2dae4aee
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00014B6B
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 0B5C7B37910C408FAB92C768B91ACCF6 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:05Z
date: Thu, 25 Apr 2024 21:27:05 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2827
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: ae977b3e-aaec-4795-b641-070db82614e4
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A07
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 434CE38D7B5B4EEFB82C6D2DD9A25A8D Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:05Z
date: Thu, 25 Apr 2024 21:27:05 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 4998
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: df53da92-7c31-4630-91db-ba2688678d82
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AB6
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 1746647C5C8E4682B55934C8A1B67C22 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:05Z
date: Thu, 25 Apr 2024 21:27:05 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 21925
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 80787449-8735-471b-b271-dc59f8a60c78
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:05 GMT
content-length: 0
X-Firefox-Spdy: h2
officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
0 B URL officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2 HTTP/1.1
Host: officeclient.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-office-application,x-office-platform,x-office-version
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
vary: Origin
server: Microsoft-IIS/10.0
x-correlationid: fa1569a3-7fd2-4f45-916d-2dfcd6e6e802
x-officefe: ConfigFE_IN_278
x-officeversion: 16.0.17619.30529
x-officecluster: ukw-000.config.officeapps.live.com
x-content-type-options: nosniff
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client
access-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: GET, OPTIONS
access-control-max-age: 600
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 25 Apr 2024 21:27:04 GMT
X-Firefox-Spdy: h2
officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
273 B URL officeclient.microsoft.com/config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash e781a10d0efa72a38ae3e3e44bb7d57b
d215c3649a3ad7c529538100974ba54dd5917dc8
6924d7db54fff1f3aeacf49be6a8ac2faa1959f14f4ceb55d411d138bfbb3bbf
GET /config16?flights=Client.ResourceService4HiddenV2&services=ResourceServiceEndpoint2 HTTP/1.1
Host: officeclient.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/xml
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Office-Platform: Web
X-Office-Application: 132
X-Office-Version: 16.0.17622.41001
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=172800
content-type: application/xml
vary: Origin
server: Microsoft-IIS/10.0
x-correlationid: 387aef66-577f-4cc3-b89a-09975283da27
x-officefe: ConfigFE_IN_278
x-officeversion: 16.0.17619.30529
x-officecluster: ukw-000.config.officeapps.live.com
x-content-type-options: nosniff
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: Accept,Authorization,Content-Type,X-IDCRL_ACCEPTED,X-Ms-Diagnostics,odata-version,X-Office-AudienceGroup,X-Office-Application,X-Office-Platform,X-Office-UserType,X-Office-Version,Origin,X-CorrelationId,X-WOPI-SessionContext,X-Office-IncrementalSync,SOAPAction,SubstrateBearer,X-UserTenantID,Enlightened-Hrd-Client
access-control-expose-headers: X-CorrelationId,X-Ms-Diagnostics,X-OfficeCluster,Retry-After
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: GET, OPTIONS
x-aspnet-version: 4.0.30319
x-office-cachecleardate: 2009-01-01T00:00:00
x-office-cacheduration: 2880
x-powered-by: ASP.NET
date: Thu, 25 Apr 2024 21:27:04 GMT
content-length: 273
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h052FAFCC37FACE4C_App_Scripts/wp5/appChromeLazy.min.js
157 kB URL res-1.cdn.office.net/officeonline/we/s/h052FAFCC37FACE4C_App_Scripts/wp5/appChromeLazy.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 157 kB (156646 bytes)
Hash 545a930106b8caf197754278626a1927
c00245d2d61301af0243f066a7f39f3986155403
052fafcc37face4c7424292f086478feb61aa5844ed38e568c0219b722f5248c
GET /officeonline/we/s/h052FAFCC37FACE4C_App_Scripts/wp5/appChromeLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 156646
last-modified: Fri, 19 Apr 2024 08:33:31 GMT
x-ms-request-id: 1cf8e331-001e-0033-67e5-92a03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129199732,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b36e74&TotalRTCDNTime=1&CompressionType=br&FileSize=156646"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h48DBFEF3E206E2E2_App_Scripts/1033/word-app-intl-mlr-lazy.min.js
147 kB URL res-1.cdn.office.net/officeonline/we/s/h48DBFEF3E206E2E2_App_Scripts/1033/word-app-intl-mlr-lazy.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 147 kB (147038 bytes)
Hash 1ec7beb3456cec06712e2fe425ac9d82
615efd4617be1acb78a506a24afdacd97bed3904
48dbfef3e206e2e22f33b17d7814c6705aff879620d74cd80ddc9f8dda663c4e
GET /officeonline/we/s/h48DBFEF3E206E2E2_App_Scripts/1033/word-app-intl-mlr-lazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 147038
last-modified: Thu, 18 Apr 2024 07:35:01 GMT
x-ms-request-id: 0ac608da-b01e-0019-299f-937f2c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129199727,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b36e6f&TotalRTCDNTime=1&CompressionType=br&FileSize=147038"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
36 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:37 GMT
x-ms-request-id: 22e636f1-b01e-0007-09a9-47ae61000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129199767,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b36e97&TotalRTCDNTime=1&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 21:27:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129199768,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080425.7b36e98&TotalRTCDNTime=1&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h73936BFBE059D199_App_Scripts/wp5/sharedComments.min.js
200 OK 47 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h73936BFBE059D199_App_Scripts/wp5/sharedComments.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (58646), with NEL line terminators
Hash 76eb1061972d2b1f56ad1aca7bc3c203
8bada4f3a999af13be655298d0c9cf17cf977d7a
73936bfbe059d199846dc12e0aa8cd338b41a9606caabd34cd01b9565db355f0
GET /officeonline/we/s/h73936BFBE059D199_App_Scripts/wp5/sharedComments.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 46966
last-modified: Fri, 19 Apr 2024 08:40:53 GMT
x-ms-request-id: eaee3973-801e-005f-05e5-924bab000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129200351,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b370df&TotalRTCDNTime=1&CompressionType=br&FileSize=46966"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png
200 OK 6.3 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Hash 5d71229f6ca9ebff5f7972f01b547c7c
4d71b33506e6f0eba1c783de37e36480f2e392be
abc0fa95b72f082cf4fbb18267cdbd282f2909b65b1b479d7f339db41769946e
GET /officeonline/we/s/hABC0FA95B72F082C_resources/1033/box42.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6336
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:56:57 GMT
x-ms-request-id: b2e39cb6-501e-0089-4e2f-4778d7000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129200355,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b370e3&TotalRTCDNTime=1&CompressionType=&FileSize=6336"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png
1.9 kB URL res-1.cdn.office.net/officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Hash d212459353e8fd1d2514c77703d44f1f
a0cabb548a218e87fbcb4d4addea47068a4288d3
7ad89a907bfe47019d905b92d0c203082aa75852d39b480e6fbe1718a8ea3647
GET /officeonline/we/s/h7AD89A907BFE4701_resources/1033/box43.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1922
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:55:35 GMT
x-ms-request-id: a853a6b9-a01e-008d-4066-46f5d0000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129200356,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b370e4&TotalRTCDNTime=1&CompressionType=&FileSize=1922"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hC266CE121906B351_App_Scripts/WordEditorDS.common.js
200 OK 220 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hC266CE121906B351_App_Scripts/WordEditorDS.common.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (765)
Size 220 kB (219908 bytes)
Hash 7c98d16f219e667e148676ce1eae497d
479daa8d275f88ad91cba076dc84b8bd72bbabad
c266ce121906b351ee3cc1834b725c89f52ddc909f3cced454073aecc97ad956
GET /officeonline/we/s/hC266CE121906B351_App_Scripts/WordEditorDS.common.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 219908
last-modified: Mon, 22 Apr 2024 11:46:21 GMT
x-ms-request-id: ed68fe94-e01e-003b-1de2-94ba33000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129200352,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b370e0&TotalRTCDNTime=1&CompressionType=br&FileSize=219908"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 4789
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: afbfbec7-4572-49da-819c-d3913107324c
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF000089F1
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 45B5AB6429E04535BC1C1DB4313D93C5 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:06Z
date: Thu, 25 Apr 2024 21:27:06 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 87cdeda0-9588-4bff-8f05-6abe0914114b
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h03D0B8DAF8890052_App_Scripts/WordEditorDS.box4.dll1.js
600 kB URL res-1.cdn.office.net/officeonline/we/s/h03D0B8DAF8890052_App_Scripts/WordEditorDS.box4.dll1.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2821)
Size 600 kB (599644 bytes)
Hash a4817d34ddce068a36ae368c50b24384
2bd62499eafe1636d6d5501b8a92201f60b883dd
03d0b8daf88900526a0af2e10fadd35909321cd8ac6b8f6e0e6fe46df732697a
GET /officeonline/we/s/h03D0B8DAF8890052_App_Scripts/WordEditorDS.box4.dll1.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 599644
last-modified: Mon, 22 Apr 2024 11:46:42 GMT
x-ms-request-id: a0af2ccc-701e-0029-43e7-94c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129200353,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b370e1&TotalRTCDNTime=1&CompressionType=br&FileSize=599644"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LatentStyles_1
58 kB URL word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LatentStyles_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash fd463c193abedbcd04d390dcbef8dcd0
c6feed9f65f396a8a158177013d679a7b27a8a0a
099458ce0b7d694dd7670a7875305f4bb5037fe583c43edc9e5477ab7c144fd1
POST /we/OneNote.ashx?perfTag=LatentStyles_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 398
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 57457
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 59d63ced-f694-4499-a274-d595800c1657, 59d63ced-f694-4499-a274-d595800c1657
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AA1
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: B334B389A5FE49DD9553E0FEE1C6559B Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:06Z
date: Thu, 25 Apr 2024 21:27:06 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-BrowserUlsBeacon: [{"Index":13,"MsSinceStart":2110,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":14,"MsSinceStart":2173,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":15,"MsSinceStart":2173,"Value":"{'k':[{'e' : 3, 'n' : 'BBCST', 'd' : '2173'}]}","Type":"KPI"},{"Index":16,"MsSinceStart":2173,"Value":"{'k':[{'e' : 3, 'n' : 'BBODI', 'd' : '2173'}]}","Type":"Kpi"},{"Index":17,"MsSinceStart":2992,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 6816dc6e-0752-4619-8246-dcbeab671530
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PSE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:06 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js
28 kB URL res-1.cdn.office.net/officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65346)
Hash b49801c769b0800be021633e623ecaf5
59c0f562e0927b2522daa3bd18faa9cf03d9efdc
ba1a3d84e1a8d86a082b38b14a17d8a5b853f344f95585c98de41de2e1d8ca96
GET /officeonline/we/s/hBA1A3D84E1A8D86A_App_Scripts/jquery.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 28108
last-modified: Mon, 08 Jan 2024 13:12:32 GMT
x-ms-request-id: 5410c833-601e-001a-1a20-6c9e48000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129201637,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b375e5&TotalRTCDNTime=1&CompressionType=br&FileSize=28108"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/listAll_hier.json
200 OK 80 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/listAll_hier.json
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash 570a3464700c535899f161a98aace39a
34e8a553b79a4b503e713d84a7dc1e361729a335
9814d7e977b0d71a645e400515c4ccfa058d8af6dd941eb0f8ef66e320b2b11a
GET /fs/4.39/listAll_hier.json HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 19:59:59 GMT
Accept-Ranges: bytes
ETag: "0x23C04CEA074159BC5D58077E0DC242BED221AD8977E4F05F5E543636393509A5"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-neu-z1
Content-Disposition: attachment; filename=listAll_hier.json; filename*=UTF-8''listAll_hier.json
X-MSEdge-Ref: Ref A: 54157EB4F3B34C68AF884C526A01710E Ref B: LTSEDGE2119 Ref C: 2024-03-26T17:25:55Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79450
Cache-Control: public, max-age=219414
Date: Thu, 25 Apr 2024 21:27:06 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/we/s/h81C763B7FBBCFE1E_App_Scripts/WordEditorDS.customerfeedback.js
200 OK 42 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h81C763B7FBBCFE1E_App_Scripts/WordEditorDS.customerfeedback.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (593)
Hash 027df9f819f0a81292a633e476b94348
c796048cdbb8fc94c647c3a4b30bb1b5fa410dc9
81c763b7fbbcfe1e96f70fb7306c183248e3dec9170fb7cd6aa20dc979c91231
GET /officeonline/we/s/h81C763B7FBBCFE1E_App_Scripts/WordEditorDS.customerfeedback.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41652
last-modified: Mon, 22 Apr 2024 11:46:26 GMT
x-ms-request-id: a22c85e7-901e-001e-21e7-94134f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:06 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129201640,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080426.7b375e8&TotalRTCDNTime=1&CompressionType=br&FileSize=41652"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
200 OK 31 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 2f1d74149f052d3354358e9856375219
8019f7a2ea824930f91c3ec375d926b650fb1cff
66c70312de6ca4e1d7ef1e858307764c241a80e7411cee686ea2fc2d74152749
GET /officeonline/we/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31172
last-modified: Mon, 28 Aug 2023 16:59:51 GMT
x-ms-request-id: 9e24c479-b01e-0009-1214-7cba44000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129201770,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b3766a&TotalRTCDNTime=1&CompressionType=br&FileSize=31172"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/rawguids/30376788346
200 OK 111 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/30376788346
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 38 names, Macintosh, � 2024 Microsoft Corporation. All Rights Reserved. The "kern" table of this font was developed i
Size 111 kB (111028 bytes)
Hash 1db309567f58bf107c34f4a052e1228b
894d4a92d491ffb813ccf2133ad5f6858696b939
0844cda3ac866651417a8261e075b81626d94faa1ea039720d96b2f12980f5e4
GET /fs/4.39/rawguids/30376788346 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:33:48 GMT
Accept-Ranges: bytes
ETag: "0x5DB9DD57F51D9847CD203902FE2103E757DF873287CAE1E25BCBF517D413449A"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=30376788346; filename*=UTF-8''30376788346
X-MSEdge-Ref: Ref A: F98B2831D0B74E349A1D2520764A8489 Ref B: LON04EDGE1217 Ref C: 2024-03-27T06:41:04Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 111028
Cache-Control: public, max-age=47883
Date: Thu, 25 Apr 2024 21:27:07 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
res-1.cdn.office.net/officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js
12 kB URL res-1.cdn.office.net/officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (62133), with no line terminators
Hash 39e15ee4c61a0822733358976e1e1655
fd4177b58d009a2abb059175f2b1c32d1ebad47b
e4a0e7a7ef39f13f511322e90fb4deb5640348da25e2984c2cda9d8b3b7d030d
GET /officeonline/we/s/hE4A0E7A7EF39F13F_App_Scripts/jquery.signalR2.1.1.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12402
last-modified: Tue, 11 Apr 2023 08:47:53 GMT
x-ms-request-id: d995ab1a-b01e-0009-49d3-6fba44000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202084,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b377a4&TotalRTCDNTime=1&CompressionType=br&FileSize=12402"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
18 kB URL res-1.cdn.office.net/officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4de42314d6edda70df9779762acc12b8
2af63137abc68c0910107f8598b7de48fd5bbd9c
7e86df2ac06e3524cb7bc6f0b8eb07565ba6d103eaf3cf1a30ac4c78f11a4eaa
GET /officeonline/we/s/h7E86DF2AC06E3524_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18308
last-modified: Fri, 13 Oct 2023 06:20:52 GMT
x-ms-request-id: a1cece7c-101e-002f-48a1-7bf25c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202089,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b377a9&TotalRTCDNTime=1&CompressionType=br&FileSize=18308"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
200 OK 23 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 22720, version 1.0
Hash 572a0c9f469874e27765fcbcf6de617b
d5213da4e48ed40b0218db52c921216abbe4e950
3d785eb0a0168e5c79e66aa0085a932d5fe2ad04f3577547e2267fa589df677d
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 22720
last-modified: Sat, 06 Apr 2024 01:34:38 GMT
x-ms-request-id: 02a34241-701e-0064-67cf-890e0f000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202273,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b37861&TotalRTCDNTime=1&CompressionType=&FileSize=22720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
36 kB URL res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 36344, version 0.0
Hash 865f1db6545fc94a2f4444dd60e7bbc6
b00d806dd42101881ab94e1c96f8235b74f6ab7f
94ef87ee295c67526205d67124f404e246226105e939e14c435a20c29a956f49
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 36344
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:37 GMT
x-ms-request-id: 22e636f1-b01e-0007-09a9-47ae61000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202286,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b3786e&TotalRTCDNTime=1&CompressionType=&FileSize=36344"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
200 OK 26 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25997, version 1.0
Hash 22b4d6f0afe44339cbbffc64ab0d385d
eeb383ef99f353ef64c70e84e44e6e633629ec3e
e018e8b8973a4a204f322e3afe6439ac1055c5a52b9b8dcf63635e42fe89003c
GET /officeonline/we/s/h44FF8165A748F674_resources/1033/segoeui-semilight-final.woff HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://res-1.cdn.office.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25997
last-modified: Sat, 06 Apr 2024 01:34:17 GMT
x-ms-request-id: ff891282-801e-004f-17f4-898ec3000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202292,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b37874&TotalRTCDNTime=1&CompressionType=&FileSize=25997"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/font-woff
x-cdn-provider: Akamai
res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
200 OK 32 kB URL GET HTTP/3 res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 31824, version 0.0
Hash 66d11e55b7a413ddf6a84e858697e7b6
fe2693ad426bd3dc173c870ca856478c7e20d43a
22e7ac6e00b3f7463f2c89c577877ed717686d6f219614c890317d86560c413d
GET /files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2 HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31824
content-type: font/woff2
last-modified: Tue, 15 Aug 2023 21:20:28 GMT
x-ms-request-id: 253012c9-c01e-0003-597d-d01ef3000000
cache-control: public, max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202300,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b3787c&TotalRTCDNTime=1&CompressionType=&FileSize=31824"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h39B652B2B71C3F1D_App_Scripts/WordEditorDS.collab.js
200 OK 63 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h39B652B2B71C3F1D_App_Scripts/WordEditorDS.collab.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1024)
Hash 5711d8d7e660a250ccdf01d732494768
0a9175e3dc1d9e747d9eff60c011d4fd136320b1
39b652b2b71c3f1d9b589b3f8964fd10c4399487426eda1d673426831b91621a
GET /officeonline/we/s/h39B652B2B71C3F1D_App_Scripts/WordEditorDS.collab.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 62720
last-modified: Mon, 22 Apr 2024 11:46:38 GMT
x-ms-request-id: 72ce6f2c-301e-0028-4ce2-949e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202376,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b378c8&TotalRTCDNTime=1&CompressionType=br&FileSize=62720"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
200 OK 124 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65443)
Size 124 kB (124317 bytes)
Hash b080f97954965444052cd61325d21dc8
41ffbbe96b017b712500685978f64c60f3e913c5
ce3684421dc976318d15c8ffb8cd744b6412c18942451921508b749260291e93
GET /officeonline/we/s/hCE3684421DC97631_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 124317
last-modified: Thu, 11 Apr 2024 01:39:06 GMT
x-ms-request-id: f1a5f610-e01e-0049-6d76-8dbd7c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202393,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b378d9&TotalRTCDNTime=1&CompressionType=br&FileSize=124317"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
200 OK 0 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1
200 OK 950 B URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 1dd7a02a7ef07e99b385d1ac6231ce68
3d0d267cc3c5b9c031dd5ba3872c2942a472ecab
7b90c91ad57c5b117e6a33e00532629a0c68ec1274093c6826dfa261e5313d36
POST /we/OneNote.ashx?perfTag=LockRefresh_1%3BWhoAmI_1%3BEditorsTable_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: false
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 2613
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 950
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: dcce66f8-1731-4c11-ab7e-fd758c13ee8c, dcce66f8-1731-4c11-ab7e-fd758c13ee8c
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAC
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 6865AABDBFDA414CADF23B3DAAF27269 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:06Z
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h718334E4E6D73E03_App_Scripts/wp5/editorSettingsManager.min.js
200 OK 69 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h718334E4E6D73E03_App_Scripts/wp5/editorSettingsManager.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65387), with no line terminators
Hash af09339000f51544eee649ab1f1dbee5
3bbc85022d5cf26a5268fbf06fb5b158497475a8
718334e4e6d73e03f0686495303f33197ff4074e8a384ca8ef255d6f60681dc7
GET /officeonline/we/s/h718334E4E6D73E03_App_Scripts/wp5/editorSettingsManager.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 68815
last-modified: Fri, 19 Apr 2024 08:40:55 GMT
x-ms-request-id: a97efc3f-c01e-003c-66e5-92d650000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202649,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b379d9&TotalRTCDNTime=1&CompressionType=br&FileSize=68815"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h4D94C4D2328E8736_App_Scripts/WordEditorDS.augloop.js
200 OK 69 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h4D94C4D2328E8736_App_Scripts/WordEditorDS.augloop.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (588)
Hash 29d353ebc2de9955fc5a5acd60efb3a1
73a676e5f5e987707473a101a042172ee48e26c3
4d94c4d2328e8736d2d8d1c866e0a2bf7898df70092f471927e1257092e62c00
GET /officeonline/we/s/h4D94C4D2328E8736_App_Scripts/WordEditorDS.augloop.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 68885
last-modified: Mon, 22 Apr 2024 11:46:21 GMT
x-ms-request-id: 95d0ebda-f01e-0018-2ee7-9420f0000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129202656,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b379e0&TotalRTCDNTime=1&CompressionType=br&FileSize=68885"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/App_Scripts/Acl/Acl1033.js
200 OK 6.0 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/App_Scripts/Acl/Acl1033.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type Unicode text, UTF-8 text, with very long lines (17397), with no line terminators
Hash c496dbe38ef25e1c070f107c2da8fd07
aa8355e7afb71ed4380d4fcf756d754e34f94dc7
aecf94478b161285a97a0a39b411a578c477fb2ab39ed2738b570b9c737ebb1f
GET /we/App_Scripts/Acl/Acl1033.js HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: false
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=31536000
content-length: 5965
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 19 Apr 2024 13:39:56 GMT
accept-ranges: bytes
etag: "05eaa105f92da1:0"
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d62bba72-c38e-471e-af49-199efe4d7687
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ACD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-officefd: DB5PEPF00011ACD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 662880D84D2F416282722EAE60C23989 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:07Z
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 14deee8f-df06-4ba9-a1aa-c852e3477fe6
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:07 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
200 OK 24 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714080427348
time-delta-to-apply-millis: 641
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2630
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 251
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: false
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57683
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: b8a9fe47-3e4d-4ba7-9ecd-1997be545f25
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:07 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
200 OK 25 B URL OPTIONS HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash 794ff25b04d92b5b795a95e8a67df8de
bd881429d1dfe3dfe054d3490525079d4699e7e6
f1d96bf2c42f11222c6f048289d183554a4865914aafefe92cf73bb46bb85a59
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D37696774929c497ab14b7de5b2ba9d63%26HASH%3D3769%26LV%3D202404%26V%3D4%26LU%3D1714080424833&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714080427214
time-delta-to-apply-millis: 678
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 60574
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 228
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/current/version.json
78 B URL uci.cdn.office.net/mirrored/smartlookup/current/version.json
IP
Hash fed6ca4077e22d276c81561cf49fef1f
175de3d2cba388fc02b67b4010f8d1a006556da1
1e3d04dff87926797ca5564dea2c8d316268f01e483ae052d9971e411bf077e8
GET /mirrored/smartlookup/current/version.json HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 78
Content-Type: application/json
Content-MD5: /tbKQHfiLSdsgVYc9J/vHw==
Last-Modified: Tue, 16 Apr 2024 17:46:16 GMT
ETag: 0x8DC5E3D1D81484F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0931613a-c01e-0013-1226-90fe28000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Cache-Control: max-age=100
Expires: Thu, 25 Apr 2024 21:28:47 GMT
Date: Thu, 25 Apr 2024 21:27:07 GMT
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg
200 OK 92 kB URL GET HTTP/2 fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 101x101, segment length 16, baseline, precision 8, 1572x1572, components 3
Hash 67bdb7326254341391bd03f9d82dfbba
05aa1521932ce3963df5eebf712e8a0884c324d0
516e73307371ea36709c7c733e5c0a9fbb09bc4a6be352fbc45164e3cbf6cdd6
GET /f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2211.22006/en-us_web/assets/fallbackv3.jpg HTTP/1.1
Host: fa000000096.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 00:45:07 GMT
etag: "0xB1FF082B44D7FE3FEA021B93FB418F6D44754EAA795392F997D6B8724D141098"
content-length: 91945
content-type: application/octet-stream
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0co6FYwAAAADdg1CRKDOZRoPt14QKMhkbTE9OMjFFREdFMTgxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
cache-control: public, max-age=71621
date: Thu, 25 Apr 2024 21:27:07 GMT
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 92feb8dc0e51816b5423cce3e1327de1
d426a4199f1a006f99e77d2df88a15d4a8c520b1
f4ce35331abe9a6735c904a3f76fbcbfb547702a7a73ccb2fc135b5abef90b8f
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714080427385
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 22128
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 452
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:07 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h031014AD060DB85B_App_Scripts/wp5/uiSlice20.min.js
200 OK 331 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h031014AD060DB85B_App_Scripts/wp5/uiSlice20.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65462)
Size 331 kB (330985 bytes)
Hash 7292785720305429bd0d77e99b80ff34
f7d562f1ff5884dc5931fd450b83035963abea51
031014ad060db85b9b779f9b52ba85affc0cef5162c25ca2e81c6603b583acbb
GET /officeonline/we/s/h031014AD060DB85B_App_Scripts/wp5/uiSlice20.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 330985
last-modified: Mon, 22 Apr 2024 11:46:33 GMT
x-ms-request-id: 72ce56bd-301e-0028-4ce2-949e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:07 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129203408,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080427.7b37cd0&TotalRTCDNTime=1&CompressionType=br&FileSize=330985"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
fs.microsoft.com/fs/4.39/rawguids/30305004928
200 OK 112 kB URL GET HTTP/1.1 fs.microsoft.com/fs/4.39/rawguids/30305004928
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectfs.microsoft.com
FingerprintE3:ED:1B:4B:0C:0E:FE:64:B8:A5:AF:9A:A4:B3:3F:45:1E:CC:66:2D
ValidityThu, 24 Aug 2023 19:43:18 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 40 names, Macintosh, � 2024 Microsoft Corporation. All Rights Reserved. The "kern" table of this font was developed i
Size 112 kB (111948 bytes)
Hash 1f2f5cba4b26121b39e77d99b74055ef
b176bc4b997d924068d312d0dc68f6882d05ff32
49c1c79ffcaab3d13c4e8026a9e5e98a9fedf8396efaf4edd1128d10c0a0cebb
GET /fs/4.39/rawguids/30305004928 HTTP/1.1
Host: fs.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Thu, 29 Feb 2024 21:33:48 GMT
Accept-Ranges: bytes
ETag: "0x3A20D2E0B44E0406F8E6BAF2C694BB2BC38AA3CD74E5A3D18CFD8C39B181648D"
X-Ms-ApiVersion: Distribute 1.2
X-Ms-Region: prod-weu-z1
Content-Disposition: attachment; filename=30305004928; filename*=UTF-8''30305004928
X-MSEdge-Ref: Ref A: E0CF2E9AE72D43C6A7071D6BA0750D1F Ref B: LON04EDGE0822 Ref C: 2024-03-27T06:50:06Z
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 111948
Cache-Control: public, max-age=34388
Date: Thu, 25 Apr 2024 21:27:08 GMT
Connection: keep-alive
X-CID: 2
Access-Control-Allow-Origin: *
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 5403
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: c3316b31-00f6-4b12-8347-9c550973c516
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A22
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: F0CB577E9625423BB8BDF2074D67FF91 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:08Z
date: Thu, 25 Apr 2024 21:27:08 GMT
content-length: 0
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:08 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL POST HTTP/2 browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 541f81cf685f4bccb9e5395b0add4d41-2c1afbab-72ae-471a-a985-efea62ea9e83-7130
upload-time: 1714080427407
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 812
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 1082
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:08 GMT
X-Firefox-Spdy: h2
uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://word-edit.officeapps.live.com
200 OK 112 kB URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://word-edit.officeapps.live.com
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (56433), with CRLF, LF line terminators
Size 112 kB (111966 bytes)
Hash 5a1b0c89d61e27a27c87acfd631d0ad7
cfeceabd7e9fea7be4e166270e08359d8f77ec20
944246ab119f79e62cf4ecb9a92b9037634110f1cc628b1afca67bd08a47d712
GET /mirrored/smartlookup/2024.4.27596637/main_ssr_wac.html?appName=wordwac&culture=EN-US&targetOrigin=https://word-edit.officeapps.live.com HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-MD5: WhsMidYeJ6J8h6z9Yx0K1w==
Last-Modified: Mon, 15 Apr 2024 16:15:35 GMT
ETag: 0x8DC5D6748253ECF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7e9e522b-301e-0007-487d-8fb647000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30672696
Expires: Tue, 15 Apr 2025 21:38:44 GMT
Date: Thu, 25 Apr 2024 21:27:08 GMT
Content-Length: 111966
Connection: keep-alive
Cross-Origin-Resource-Policy: cross-origin
res-1.cdn.office.net/officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js
200 OK 435 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (919)
Hash 7ab5d254e2da17aeca94fde594c24c2b
9abe817d8c937f97b18fada2e49a5ee3490b6ecd
ee4dd6a857fc823c030e07a12e981931c06750872cda3a0a5269aa58511a18a3
GET /officeonline/we/s/hEE4DD6A857FC823C_App_Scripts/workerboot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 435
last-modified: Tue, 19 Dec 2023 09:22:33 GMT
x-ms-request-id: a811fbe8-201e-0093-7ed0-5b1908000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129204766,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080428.7b3821e&TotalRTCDNTime=1&CompressionType=br&FileSize=435"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.host.runtime.js
200 OK 80 kB URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.host.runtime.js
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 94a1b38601fd67a4ba82fab464d81cf6
0455f8367b50d0ca8ed994f4fd2c9484b8412108
b9de3de4e59a33d0effba7a3b2c8161c2382503ff0f17ad30397244a7384f692
GET /mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.host.runtime.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: lKGzhgH9Z6S6gvq0ZNgc9g==
Last-Modified: Mon, 15 Apr 2024 16:15:45 GMT
ETag: 0x8DC5D674E47B172
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6f6fddf2-201e-0056-267c-8f2bcb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30672563
Expires: Tue, 15 Apr 2025 21:36:31 GMT
Date: Thu, 25 Apr 2024 21:27:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.ssr.js
200 OK 715 kB URL GET HTTP/1.1 uci.cdn.office.net/mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.ssr.js
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectcdn.uci.officeapps.live.com
FingerprintA6:B8:A8:EE:2B:4F:50:B3:51:1C:9A:17:65:3F:31:63:DD:3C:DE:07
ValidityFri, 18 Aug 2023 02:17:43 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (16593)
Size 715 kB (715225 bytes)
Hash ae33ac3dcf82ce0423552b4548b70eee
e28e6a50143f99d2ec4149c1d1e0d37f9b4c4911
ade6d24c9709dbe33eb0ceb63136b17981c83a4b6191fc208585629b70ed4909
GET /mirrored/smartlookup/2024.4.27596637/scripts/microsoft.office.smartlookup.ssr.js HTTP/1.1
Host: uci.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-MD5: rjOsPc+CzgQjVStFSLcO7g==
Last-Modified: Mon, 15 Apr 2024 16:15:46 GMT
ETag: 0x8DC5D674EF38F9A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: de0e2217-701e-005b-497c-8fe31f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=30672549
Expires: Tue, 15 Apr 2025 21:36:17 GMT
Date: Thu, 25 Apr 2024 21:27:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cross-Origin-Resource-Policy: cross-origin
augloop.office.com/
0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AHzAeHpwGIS+Dz/qM1w2JA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:27:08 GMT
server: Kestrel
strict-transport-security: max-age=15768000; includeSubDomains; preload
x-origin: F37EA52C6BE381A7DD47A57B2E43EE8FFF886AFA4F32A8BC9D99B762BFAC41F4
x-rp-instance: _D2Worker_170
x-rp-routeid: v2Route
x-rp-clusterid: BackendMastermindMain
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ProofingSettingsCritiqueTypes
403 Forbidden 29 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ProofingSettingsCritiqueTypes
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 02a2ddf85b78e545fefbdb95d74dae52
4b8017785772db1154ec2d3d62dc669ea112c026
40a36c405a89be2e0ac7a29645070de852448022ca14b0bd4b6b662cd81ab901
GET /we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ProofingSettingsCritiqueTypes HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: false
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: ffc709c9-1eca-4690-8168-d74ece165c3a
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ABF
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-officefd: DB5PEPF00011ABF
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 615F8C942AE74B99AF6AB1EB5E64C70D Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:08Z
date: Thu, 25 Apr 2024 21:27:08 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h2617864B4FAF5C59_App_Scripts/WordEditorDS.worker.js
565 kB URL res-1.cdn.office.net/officeonline/we/s/h2617864B4FAF5C59_App_Scripts/WordEditorDS.worker.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (779)
Size 565 kB (565256 bytes)
Hash 7f0a0a46dabe2f5129dad1a0bc144bec
4ad413ec8c7291874c9ac440af8c26871703cfb1
2617864b4faf5c5909a1307616130c5ef9ffb43601767d71b92be0c6973d2433
GET /officeonline/we/s/h2617864B4FAF5C59_App_Scripts/WordEditorDS.worker.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 565256
last-modified: Mon, 22 Apr 2024 11:46:21 GMT
x-ms-request-id: b99ad8f7-701e-0006-100f-95cc28000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:08 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129205274,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080428.7b3841a&TotalRTCDNTime=1&CompressionType=br&FileSize=565256"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png
200 OK 25 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 296 x 302, 8-bit/color RGBA, non-interlaced
Hash fd59a454c80d16a1cb998096478f7068
eb74904b48f598ec609be7b6e0089ae5f06db825
83987e0f63d43f20ff756121f3d91b50787c1e4e57d3bca110c06d0d6423c8cc
GET /officeonline/we/s/h83987E0F63D43F20_resources/1033/we_version2.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 24960
content-type: image/png
last-modified: Tue, 11 Apr 2023 08:55:42 GMT
x-ms-request-id: 0d39bcc9-301e-009f-790f-4e8e00000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206008,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b386f8&TotalRTCDNTime=1&CompressionType=&FileSize=24960"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css
2.9 kB URL res-1.cdn.office.net/officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (20551), with no line terminators
Hash 3d6ca9b0358bef8348220f958f049b61
8b85c3925fbc3d51e57658845a80c67f2101cc26
8d7b8c265df55db9c4be132ca6fe1ceebb0cfe89aa47992738cab92285c3afad
GET /officeonline/we/s/h8D7B8C265DF55DB9_App_Scripts/Feedback/latest/officebrowserfeedback.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2880
content-type: text/css
last-modified: Mon, 24 Jul 2023 22:26:48 GMT
x-ms-request-id: add96b68-e01e-002b-4147-6a7f5b000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206009,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b386f9&TotalRTCDNTime=1&CompressionType=br&FileSize=2880"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h72C98BA23491679B_App_Scripts/wp5/canvasContextual.min.js
200 OK 98 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h72C98BA23491679B_App_Scripts/wp5/canvasContextual.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 95d0182c8cb3ff8ebfaaab3b62f8afbc
65d6d0b2d3f4697e8fb2770733de0467d4ab5676
72c98ba23491679b669926eac67af6953fe3be9b57e95f86c95957e04c7833ff
GET /officeonline/we/s/h72C98BA23491679B_App_Scripts/wp5/canvasContextual.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 98503
last-modified: Fri, 19 Apr 2024 08:40:54 GMT
x-ms-request-id: 1cf8e69c-001e-0033-41e5-92a03c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206026,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b3870a&TotalRTCDNTime=1&CompressionType=br&FileSize=98503"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
786 B URL res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (2224), with no line terminators
Hash 96ec242ea2e25558f7ec13fa88d9d793
b0bb7f6bd5206cc1ffb572cbd4a6ad2f88d42433
850c54ce960e710757379c19601c65c00cf7d485063115f34aa30ae193ccea43
GET /officeonline/we/s/161762241001_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 786
last-modified: Mon, 22 Apr 2024 11:57:32 GMT
x-ms-request-id: 258e65c8-d01e-001f-21e7-944c93000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206027,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b3870b&TotalRTCDNTime=1&CompressionType=br&FileSize=786"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h2F662E2EDB3B28A7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js
3.6 kB URL res-1.cdn.office.net/officeonline/we/s/h2F662E2EDB3B28A7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (14645), with no line terminators
Hash 194022eefcd02f7a290404142be40ff8
0cb7dffed103105ef3467eb9042d6b52b1804b1c
2f662e2edb3b28a763e9600e528e608fa51efeed668091ecba064a097bcdd8b2
GET /officeonline/we/s/h2F662E2EDB3B28A7_App_Scripts/wp5/localization/en-US/canvas-contextual.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3595
last-modified: Fri, 29 Dec 2023 18:34:04 GMT
x-ms-request-id: 547310a8-901e-004d-7dea-5c0dee000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206028,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b3870c&TotalRTCDNTime=1&CompressionType=br&FileSize=3595"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 1871
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 6b65994b-c8b5-44af-b49d-0235537c8e9c
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A12
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 217E4811580A4C62B021925611CAF8D6 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:09Z
date: Thu, 25 Apr 2024 21:27:09 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
200 OK 6.0 kB URL GET HTTP/3 res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash 714b4c36df425688f7773ba227e99cd1
e920e6cb40f83004b6c3f9711a1da2b609fd2928
abc7f583392ee4c677a24c19366461fa51eccd6dc513520d3bd34db4a6bf908c
GET /shellux/api/ShellBootInfo/consumer/OneShell/en-us HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
pragma: no-cache
x-content-type-options: nosniff
strict-transport-security: max-age=2592000
x-o365suiteuxshell-correlationid: 4d1390bc-1cd1-446d-b688-a78c036985da
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
content-length: 6033
akamai-request-bc: [a=95.101.10.204,b=129206030,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b3870e&TotalRTCDNTime=1&CompressionType=&FileSize=30746"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=34, origin; dur=0 , cdntime; dur=34
akamai-cache-status: Miss from child, Hit from parent
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js
200 OK 47 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (48867)
Hash 3738e9b47e1dde6812bd34b2ed239e74
60f3d074ea13d66ee119f05a355c81b4a6ecd3d1
e726b46d4fb102ce1ce6390e1868c1fefb9f67aba2ab89473f986a7329133763
GET /officeonline/we/s/161762241001_App_Scripts/1033/WordEditorSimplified.Wac.NBCommandModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47400
last-modified: Mon, 22 Apr 2024 11:52:01 GMT
x-ms-request-id: 0fb60dae-201e-0069-65e0-94c6db000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206031,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b3870f&TotalRTCDNTime=1&CompressionType=br&FileSize=47400"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js
200 OK 73 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (59507)
Hash a311f770c3973e57c94c2b422478c8d2
ee3fa09f670d0da585ffcb82b247ab819930493f
87dd4d145ac732a457802a9c3c200e8083761de49a6a520ae67969db3392096c
GET /officeonline/we/s/h87DD4D145AC732A4_App_Scripts/WordEditorSimplified.Wac.TellMeSuggestionModel.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 73212
last-modified: Tue, 14 Nov 2023 14:26:32 GMT
x-ms-request-id: 1f22b74b-901e-0021-714d-7bdbec000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206032,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b38710&TotalRTCDNTime=1&CompressionType=br&FileSize=73212"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 45a1610b-8710-4bbb-b9d2-573bfb6d3849
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:09 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h7A67E0E11B66944B_App_Scripts/osfruntime_wo.js
121 kB URL res-1.cdn.office.net/officeonline/we/s/h7A67E0E11B66944B_App_Scripts/osfruntime_wo.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (64817)
Size 121 kB (120847 bytes)
Hash df93f308f5e0b410bdb4874dbc3d77ba
01b764ce6509d2f2eb3e3f9796af7ad94d8cea9a
7a67e0e11b66944b71bf46910b7d21891772fed603fa7f361699ac36887383e6
GET /officeonline/we/s/h7A67E0E11B66944B_App_Scripts/osfruntime_wo.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 120847
last-modified: Mon, 08 Apr 2024 12:27:03 GMT
x-ms-request-id: 18062b32-d01e-0042-76b2-8a4617000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206033,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b38711&TotalRTCDNTime=1&CompressionType=br&FileSize=120847"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js
17 kB URL res-1.cdn.office.net/officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 9cfefb2d46d6102dac2a24c606f47fea
076b63f4f46ce28648201e2507bbc67fb4f990c5
43c5939cb732d8aa2d20fce97f359f46b7c3b937e60ed576b752ae0a2e73314f
GET /officeonline/we/s/h43C5939CB732D8AA_App_Scripts/OfficeExtension.WacRuntime.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16640
last-modified: Tue, 11 Apr 2023 08:47:11 GMT
x-ms-request-id: a22274c5-001e-000c-804c-7b689f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206034,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b38712&TotalRTCDNTime=1&CompressionType=br&FileSize=16640"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
augmentation.osi.office.net/officeaugmentation/searchendpointv4/
34 B URL augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-correlationid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: text/plain; charset=utf-8
content-encoding: gzip
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_0
x-officeversion: 16.0.17623.42625
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: 894ae669-62b0-444d-8239-42ec0367535c
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: POST
access-control-allow-headers: content-type,x-correlationid
access-control-max-age: 86400
access-control-expose-headers: *
x-officeprocessid: 3556
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Thu, 25 Apr 2024 21:27:09 GMT
content-length: 34
X-Firefox-Spdy: h2
ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17622.41001&language=en-US
2.6 kB URL ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17622.41001&language=en-US
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 80882570bf51ffedfd9dd3bf21ab6f9c
8da917e12767ff5c2affabbf4903ee702d879ca4
3696309e168d1676029b135da893190984a4c660a092be63f1bc8029554c6a78
GET /config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=Word&version=16.0.17622.41001&language=en-US HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 2592
content-type: application/json
content-encoding: br
expires: Thu, 25 Apr 2024 22:27:09 GMT
etag: "b61+X9sEfZrHE0yQxcgSsu/wUwJo5fisAZBjeEj59JQ="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=CHILL&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://word-edit.officeapps.live.com
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8813C658453F4A6F89404CCBAE4B486F Ref B: OSL30EDGE0413 Ref C: 2024-04-25T21:27:09Z
date: Thu, 25 Apr 2024 21:27:09 GMT
X-Firefox-Spdy: h2
augmentation.osi.office.net/officeaugmentation/searchendpointv4/
58 B URL augmentation.osi.office.net/officeaugmentation/searchendpointv4/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 8ba6db3c74a8722bad76ce3bf0ad7ca9
f3f42b729703f2b384aa24edc983dab5cb90688c
504bdd02dbdda1a38e0cf742c53f482f0543576138acdde3c8cee833f6fb4eae
POST /officeaugmentation/searchendpointv4/ HTTP/1.1
Host: augmentation.osi.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-correlationid: cdff88ad-6f7f-485f-a51f-8252fe0c4fc2
Content-Length: 39
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-encoding: gzip
etag: W/"18-8/QrcpcD8rOEqiTtyYPatcuQaIw"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-officefe: AugmentationSvcFrontEnd_IN_0
x-officeversion: 16.0.17623.42625
x-officecluster: weu-azsc-010.augmentation.osi.office.net
x-correlationid: cdff88ad-6f7f-485f-a51f-8252fe0c4fc2
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With
access-control-max-age: 600
access-control-expose-headers: *
x-officeprocessid: 3556
x-powered-by: Express, ASP.NET
x-content-type-options: nosniff
date: Thu, 25 Apr 2024 21:27:09 GMT
content-length: 58
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 47210
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 65e3badc-f97d-42c4-86fa-7ef13dd15e13
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:10 GMT
content-length: 0
X-Firefox-Spdy: h2
admin.microsoft.com/admin/api/uxversion?bldVer=v1
200 OK 0 B URL GET HTTP/2 admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-ms-mac-hostingapp,x-ms-mac-locale
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=857e4774-de5f-474d-ad6e-a381b295d761; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=857e4774-de5f-474d-ad6e-a381b295d761; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: EEE44457EB9B405A9D2A0E71DDEE321D Ref B: SVG20EDGE0312 Ref C: 2024-04-25T21:27:10Z
date: Thu, 25 Apr 2024 21:27:09 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/strings/en/shellstrings.json
200 OK 4.4 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/strings/en/shellstrings.json
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash 52af792134b43bb66ac6fb020ec0b324
7b8a12118ee106daa8fcece7625d1de871835a21
e08ca1be8adf907921f594f700e9267582333ba0a4337c820e8c937989301574
GET /officeonline/we/s/161762241001_App_Scripts/suiteux-shell/strings/en/shellstrings.json HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4407
last-modified: Mon, 22 Apr 2024 11:57:10 GMT
x-ms-request-id: 22bdf3ea-601e-0068-5fe7-949907000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129207190,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080430.7b38b96&TotalRTCDNTime=1&CompressionType=br&FileSize=4407"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json
x-cdn-provider: Akamai
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&ClientId=%7Bf356868f-5b59-4329-ba52-433e4a7425db%7D&usid=f356868f-5b59-4329-ba52-433e4a7425db&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
200 OK 0 B URL GET HTTP/2 collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&ClientId=%7Bf356868f-5b59-4329-ba52-433e4a7425db%7D&usid=f356868f-5b59-4329-ba52-433e4a7425db&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&ClientId=%7Bf356868f-5b59-4329-ba52-433e4a7425db%7D&usid=f356868f-5b59-4329-ba52-433e4a7425db&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025C3D
x-userhostaddress: 91.90.42.0
x-correlationid: a9fc0996-ef5b-4e75-9271-1f58877d0154
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
x-officefe: AM1PEPF00025C3D
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
access-control-allow-headers: haep,rtc-iswacjsbootfsrequest,rtc-tokenproofkey,x-accesstoken,x-accesstokenttl,x-correlationid,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-wacfrontend,x-xhr
access-control-allow-methods: GET, POST, OPTIONS
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: EB90BFCDF9C0475A99042DD786A06847 Ref B: SVG20EDGE0118 Ref C: 2024-04-25T21:27:10Z
date: Thu, 25 Apr 2024 21:27:10 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h0E12BF24C49F3A5A_App_Scripts/wp5/sharedCommentsLazy.min.js
195 kB URL res-1.cdn.office.net/officeonline/we/s/h0E12BF24C49F3A5A_App_Scripts/wp5/sharedCommentsLazy.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (603)
Size 195 kB (195420 bytes)
Hash a5ba4eb1fb11394486a803f7672b8a3f
a4aa9a5d8f3a683e8ed4b7bf1f6ed121cf32a076
d3b5390a705107889af46fe2b69c3d587d6ab2678b8b0fb5a83c1a6c7d5a9ec8
GET /officeonline/we/s/h0E12BF24C49F3A5A_App_Scripts/wp5/sharedCommentsLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 101872
last-modified: Fri, 19 Apr 2024 08:37:29 GMT
x-ms-request-id: eaee4225-801e-005f-6ee5-924bab000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:09 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129206029,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080429.7b3870d&TotalRTCDNTime=1&CompressionType=br&FileSize=101872"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
admin.microsoft.com/admin/api/uxversion?bldVer=v1
200 OK 2.3 kB URL GET HTTP/2 admin.microsoft.com/admin/api/uxversion?bldVer=v1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash fa25a88145828e4f344426503714be3a
f3dcc3d9e57a34101faf0d033890a72793ded5e9
fb2dc73bcf46a340b1305eb2e6ed550f2f0f0c61e7f66327d1eb06b068934aaa
GET /admin/api/uxversion?bldVer=v1 HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ms-mac-locale: en
x-ms-mac-hostingapp: wac-2155-floodgate-sdk
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2257
content-type: application/json; charset=utf-8
expires: -1
set-cookie: s.SessID=49ad5aa9-5929-4141-8591-fb109f4cf4dd; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=49ad5aa9-5929-4141-8591-fb109f4cf4dd; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.DCLoc=weuprod; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: ac0c5332-213d-401e-a54d-fbdd1281cde3
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 356DF023948E44D3831B4EF1E3ED844D Ref B: SVG20EDGE0312 Ref C: 2024-04-25T21:27:10Z
date: Thu, 25 Apr 2024 21:27:09 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=FullFileAugLoopSeed_1
172 B URL word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=FullFileAugLoopSeed_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 3c72b7cd9103b896d7286884b7e7716d
d29d70f6f6d30c3f31ad538386ba0d307ebf0042
7b27a79779714f627b0d150f9b06d6594b9490de298fa089d34f0a39e45e58e0
POST /we/OneNote.ashx?perfTag=FullFileAugLoopSeed_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1934
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 172
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 57cbcb00-1b27-45af-b24f-864292d0f955, 57cbcb00-1b27-45af-b24f-864292d0f955
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAE
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: BEE7D064057840CFA1780F7A4E4F8082 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:09Z
date: Thu, 25 Apr 2024 21:27:10 GMT
X-Firefox-Spdy: h2
collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&ClientId=%7Bf356868f-5b59-4329-ba52-433e4a7425db%7D&usid=f356868f-5b59-4329-ba52-433e4a7425db&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
200 OK 78 kB URL GET HTTP/2 collabrtc.officeapps.live.com/rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&ClientId=%7Bf356868f-5b59-4329-ba52-433e4a7425db%7D&usid=f356868f-5b59-4329-ba52-433e4a7425db&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 86d9d8680f95b497bf31d4f12bc88e0a
a81ae3f865b9d1df1dc16331648a32e4d236c2b1
2266d8c215506b9448c51b4b0a115dba1c2e158b53b66a898eec2530eefa87ae
GET /rtc2/findsession?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&ClientId=%7Bf356868f-5b59-4329-ba52-433e4a7425db%7D&usid=f356868f-5b59-4329-ba52-433e4a7425db&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&clientProtocol=1.0&WacUserType=WOPI&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ HTTP/1.1
Host: collabrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-CorrelationId: 1b164513-0e45-4c3b-81c8-903b43f620d1
RTC-TokenProofkey: True
RTC-IsWacJsBootFsRequest: True
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, max-age=31535999
pragma: no-cache
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025BE7
x-userhostaddress: 91.90.42.0
x-correlationid: 1b164513-0e45-4c3b-81c8-903b43f620d1
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
x-officefe: AM1PEPF00025BE7
x-officeversion: 16.0.17609.41019
x-officecluster: PEU2
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025BE7
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F85ABB783FA84980BBEA484B4004BFEE Ref B: SVG20EDGE0118 Ref C: 2024-04-25T21:27:10Z
date: Thu, 25 Apr 2024 21:27:10 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
3.4 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (11364), with no line terminators
Hash d39049fe6408eb9e7755dcbdaf4a7fd8
ec4e643ccd31cd401a37e4421775ce6db14f17e4
37d31aff816c37f4e8c8b916f4028ca4ee2ba999c9f6018dacac39b3c5681b11
GET /officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3410
last-modified: Mon, 22 Apr 2024 11:56:16 GMT
x-ms-request-id: a18a70b3-701e-0029-680f-95c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129207466,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080430.7b38caa&TotalRTCDNTime=1&CompressionType=br&FileSize=3410"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
294 B URL ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 7ee85a640d36f4116428041b80e24cd6
6d28416a12c811626428b187135f84d80ba1cff5
c0beb7d1a16cd7ac9856c578e6faba6e19502cc30297263d52aeb5a0391d3e74
GET /config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null HTTP/1.1
Host: ecs.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 294
content-type: application/json
content-encoding: br
expires: Thu, 25 Apr 2024 22:27:10 GMT
etag: "8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"NelEcsUpload1","max_age":604800,"endpoints":[{"url":"https://ecs.nel.measure.office.net?TenantId=OneShell&DestinationEndpoint=Edge-Prod-OSL30r4A&FrontEnd=AFD"}],"include_subdomains":true}
nel: {"report_to":"NelEcsUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
access-control-allow-origin: https://word-edit.officeapps.live.com
timing-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: ETag, Date
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0F425C5F4CA24BDFB52BCC26EEACAC0E Ref B: OSL30EDGE0413 Ref C: 2024-04-25T21:27:10Z
date: Thu, 25 Apr 2024 21:27:09 GMT
X-Firefox-Spdy: h2
res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
200 OK 259 kB URL GET HTTP/3 res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12695)
Size 259 kB (258890 bytes)
Hash 574fd73194781626aca55c81f59d43f6
c83c3630eb878ca247e0c6235d674277271fec69
a7c7314646ad30c6042053cc2d4ddcf0daad63d0f4826a68c6237ef260d48c93
GET /admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js HTTP/1.1
Host: res.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 258890
last-modified: Mon, 22 Apr 2024 19:13:12 GMT
x-ms-request-id: 57dc8c94-301e-0017-601e-95569c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=23.73.3.77,b=481274952,c=g,n=SE_AB_STOCKHOLM,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=STOCKHOLM&ASN=20940&Country=SE&Region=AB&RequestIdentifier=0.4d034917.1714080430.1cafac48&TotalRTCDNTime=22&CompressionType=br&FileSize=258890"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=22, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/hF831220F69A536AD_App_Scripts/WordEditorDS.box4.dll3.js
407 kB URL res-1.cdn.office.net/officeonline/we/s/hF831220F69A536AD_App_Scripts/WordEditorDS.box4.dll3.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1031)
Size 407 kB (407052 bytes)
Hash 20e506ead18ac5b58db380a99a4c8393
bead13a7744d5ee081e2798e14accfab0410d646
f831220f69a536ad2114ef3451f48ab0ad16cc319f2621485881d6ad2f2f6659
GET /officeonline/we/s/hF831220F69A536AD_App_Scripts/WordEditorDS.box4.dll3.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 407052
last-modified: Mon, 22 Apr 2024 11:46:33 GMT
x-ms-request-id: 7976cc4f-c01e-005e-5be7-941477000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:10 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129207926,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080430.7b38e76&TotalRTCDNTime=1&CompressionType=br&FileSize=407052"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:09 GMT
X-Firefox-Spdy: h2
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=2
0 B URL peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtc2/signalr/connect?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&tid=2 HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UDtbm5ZcPoOmk87CCqqQYw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Server: Microsoft-IIS/10.0
X-EndPoint: PEU2
X-FrontEnd: RtcNetCoreLB1
X-MachineName: AM1PEPF00025C1B
X-UserHostAddress: 91.90.42.0
X-CorrelationId: 72b071c2-25d0-46f9-8393-bb0f6e6bd279
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeFE: AM1PEPF00025C1B
X-OfficeVersion: 16.0.17623.41006
X-OfficeCluster: PEU2
P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
X-Partitioning-Enabled: true
Access-Control-Allow-Origin: https://word-edit.officeapps.live.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
X-OfficeRtcTarget: AM1PEPF00025C1B
RtcSessionId: b2929b69-d60a-4efe-be4b-35b8c35511ba
Sec-WebSocket-Accept: aVQdA6zemKYCGSBwVprlb83yuUY=
Connection: Upgrade
Date: Thu, 25 Apr 2024 21:27:10 GMT
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 1726022baac7c76fb0a041a2384e6171
2cdaba52c83502b6188866022457ef959314ec64
d2ba9a155caea1fdd384effe29553a83493620e6e5b0aa4bbdfdb325a4659f6e
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830,250a372c4a854d8fb120ef0366f9410c-dd39bcd8-3b38-4c6c-9f8d-3821e5c28b47-7487,31d9dd3e4c7046a696537586281d7ed1-06d11dd6-a946-4281-8ac3-a7c2ab4776f5-7063,d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360
upload-time: 1714080430454
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 23605
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 399
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:10 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
47 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (42919)
Hash d8153fbc27e90b6b135f4e052387c0a3
5fd83ab87c1bbc01e5eb9d3f2756f4514e98df89
2cabf7f8ac4b1f1a8309a72b060939fd95fee987a3304c1cf505d62cd1deb87a
Analyzer Verdict Alert YARAhub by abuse.ch malware Detect files is `SliverFox` malware
GET /officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 47298
last-modified: Mon, 22 Apr 2024 11:55:59 GMT
x-ms-request-id: a71643d4-301e-004a-28e2-945c18000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129208470,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080431.7b39096&TotalRTCDNTime=1&CompressionType=br&FileSize=47298"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17622.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPSE1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bfloodgateflight9a%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bfloodgateflight9a%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
0 B URL messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17622.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPSE1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bfloodgateflight9a%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bfloodgateflight9a%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /campaignmetadataaggregator?country=US&locale=en-US&app=2155&platform=Web&version=16.0.17622.41001&campaignParams=pageWidth%3D1280%26pageHeight%3D1024%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPSE1%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%3Bfloodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bfloodgateflight9a%3Bwordfloodgateflight75%3Bwordfloodgateflight78%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight28cf%3Bfloodgateflight37a%3Bfloodgateflight42cf%3Bfloodgateflight43cf%3Bfloodgateflight9a%3Bwordfloodgateflight75%3Bwordfloodgateflight78%3B&ageGroup=0&sessionUserType=2 HTTP/1.1
Host: messaging.engagement.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-clientsessionid,x-correlationid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 25 Apr 2024 21:27:11 GMT
server: Microsoft-HTTPAPI/2.0
access-control-allow-headers: x-clientsessionid,x-correlationid
access-control-allow-methods: GET
access-control-allow-origin: *
x-activitytraceid: 96a9b91778611ac76a9f0e039b18e178
x-servicecorrelationid: 96a9b917-7861-1ac7-6a9f-0e039b18e178
x-machine: OMEXNODE2000000__omexexternal-prod-jpe-2-001_0
x-buildversion: 24.4.10408.10201
x-servicefabricrequestid: 4d3b1ff0-1d2c-45c5-8f18-e90ee08d8268
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 60247
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 4ac71b58-6e58-4e6d-afa1-2abedd245176
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF000089E9
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 256DB09521C240A68911F5A0E91713B7 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:11 GMT
content-length: 0
X-Firefox-Spdy: h2
admin.microsoft.com/api/instrument/logclient
204 No Content 0 B URL POST HTTP/2 admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-ms-mac-appid,x-ms-mac-hostingapp,x-ms-mac-version
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=7e0d4ea4-a604-48c2-abfa-d93e20f15abf; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=7e0d4ea4-a604-48c2-abfa-d93e20f15abf; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
access-control-max-age: 600
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 50B9FFDE959F4FEFA3C7C2519FCA64C3 Ref B: SVG20EDGE0312 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:10 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&sl=1&u=1
200 OK 215 B URL POST HTTP/2 word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&sl=1&u=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 177e7f5714bf6d613d0f803dc61eeb25
c54050e74c7a1d8e1430bae979d3ecba64765a3f
a262dfeeb5cb1701f1bb4d994e439725e99088bf76e08c3d78856b3551d1a2e9
POST /we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&sl=1&u=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 0
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 215
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 0d7c4db3-8ac2-4d5f-bd4b-56cf3378f09f
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AEB
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AEB
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_excelslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 87F831C303C5414A99FE64D0E7D108B3 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 3.0 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d9f7b4418163d2b82e888f9843f1e77b
13961c17857af85507fb45feb5462137d1017cec
e7aa945b4c0fb7cf79febb8eb7d42487b2369946f78017d991c96ac4556ffdd9
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1077
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 3032
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: babd9939-df9a-49a8-81ed-daccad790dc2, babd9939-df9a-49a8-81ed-daccad790dc2
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011ADA
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest
x-msedge-ref: Ref A: 6FCB6E80EDF342908E3BC0BEC9A43CC3 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=EditorsTable_1
200 OK 912 B URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=EditorsTable_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash aedbaf292a5df0eb7ffe7ec8cb8be1f5
d31e82a00a4f989efbbeb712416f82e77ad0f251
34e156935e6f835fdb1ab331f08774c134b86212dde90b3be130808bb0abe649
POST /we/OneNote.ashx?perfTag=EditorsTable_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 982
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 912
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 7b72b1ff-3da7-4ec7-8b17-13a89b1f2ad6, 7b72b1ff-3da7-4ec7-8b17-13a89b1f2ad6
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AA7
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: A1879F2272634CC5A8B579D541E92948 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
33 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 89a218ddab054ddc4c43d08ecc0a2d25
2bb4f01c5cd8dae82afccc5a9f5ce35c0f94927f
bd8c3e57a02276353eba9fed640873f0fdb73ab6d582c4b732a53c5f44cc26cf
GET /officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 32790
last-modified: Mon, 22 Apr 2024 11:56:41 GMT
x-ms-request-id: 1e267bb5-c01e-004e-7be7-94d11f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129208994,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080431.7b392a2&TotalRTCDNTime=1&CompressionType=br&FileSize=32790"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
39 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (30298)
Hash 0e90fdee574d409a29afaaec5dd66ef5
74555bb3aafaef1197f11f667fb5e1695ecb64a1
b622386f9e168e4a2792860704dfee9f91792d1bd6b5cc73308f0e2499a7fbc3
GET /officeonline/we/s/161762241001_App_Scripts/suiteux-shell/js/suiteux.shell.mast.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39359
last-modified: Mon, 22 Apr 2024 11:56:28 GMT
x-ms-request-id: 93734b47-701e-0016-64e7-940940000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129208995,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080431.7b392a3&TotalRTCDNTime=1&CompressionType=br&FileSize=39359"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
admin.microsoft.com/api/instrument/logclient
204 No Content 0 B URL POST HTTP/2 admin.microsoft.com/api/instrument/logclient
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectportal.office.com
FingerprintF7:7F:0A:DD:B1:DF:2C:00:BF:54:BD:82:A4:CE:FF:04:8F:BA:92:FD
ValidityFri, 16 Feb 2024 19:53:46 GMT - Mon, 10 Feb 2025 19:53:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/instrument/logclient HTTP/1.1
Host: admin.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-ms-mac-hostingapp: wac-2155-floodgate-sdk
x-ms-mac-appid: 7210e4c3-1580-4710-9f64-e0011af50e44
x-ms-mac-version: @ms/centro-hvc-loader_3.2.2
Content-Length: 7488
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: s.SessID=a7ac1364-2cb1-4871-833d-0c020e95c131; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
s.SessID=a7ac1364-2cb1-4871-833d-0c020e95c131; path=/; secure; HttpOnly; SameSite=None
s.cachemap=20; path=/; secure; HttpOnly; SameSite=Lax
x-portal-routekey=weu; path=/; secure; HttpOnly
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-ms-correlation-id: d364b092-2b1d-4bd6-8324-3f3fd7622c9f
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: *
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E43D18A23B354FBD8EAFBA321B40A447 Ref B: SVG20EDGE0312 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:10 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hCFE924223C96BAE5_App_Scripts/WordEditorDS.box4.dll4.js
109 kB URL res-1.cdn.office.net/officeonline/we/s/hCFE924223C96BAE5_App_Scripts/WordEditorDS.box4.dll4.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (571)
Size 109 kB (108977 bytes)
Hash 433dffd697932558da6e576597b179ed
03062d4fb9016bbe90d887119c1890d1a064e220
cfe924223c96bae58b1a44bcaa7d0e4993ada3038f87443a1584b5ce2e25b3a0
GET /officeonline/we/s/hCFE924223C96BAE5_App_Scripts/WordEditorDS.box4.dll4.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 108977
last-modified: Mon, 22 Apr 2024 11:46:34 GMT
x-ms-request-id: 07325937-a01e-002a-23e7-942087000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129209145,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080431.7b39339&TotalRTCDNTime=1&CompressionType=br&FileSize=108977"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 206 B URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b04775c49791abde43b154eb77d92813
2537f22cb6372dd57238ffb803d62417d1ff3378
8720ba382c4f0da1d2a39a8755facc743e6c67f26ca0d631d5cc787e2f262c0c
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 206
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: c0ab1b84-a706-4034-b0bc-e8f7c8b490c7, c0ab1b84-a706-4034-b0bc-e8f7c8b490c7
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AA1
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control
x-msedge-ref: Ref A: E72F76B624DE40CA8A04DA25453EBFAA Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714080427184
30 kB URL peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714080427184
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 66fa70caeb3d417b105fb4aba378f1f6
80c51bfab8a43ee289d952f199be195ca82babba
f70d0252fc57d07a8cbd825913d6c6a8afa40ece4eb505c837db91dc3c8da519
GET /rtc2/signalr/start?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D&_=1714080427184 HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025C1B
x-userhostaddress: 91.90.42.0
x-correlationid: 72b071c2-25d0-46f9-8393-bb0f6e6bd279
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
x-officefe: AM1PEPF00025C1B
x-officeversion: 16.0.17623.41006
x-officecluster: PEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025C1B
rtcsessionid: b2929b69-d60a-4efe-be4b-35b8c35511ba
x-officertcproxy: AM1PEPF00025BD4
date: Thu, 25 Apr 2024 21:27:10 GMT
X-Firefox-Spdy: h2
storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714080431438
302 Found 0 B URL GET HTTP/1.1 storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714080431438
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectstorage.live.com
FingerprintF6:41:8A:2C:C9:47:1D:83:AD:7E:7D:F0:4D:BE:49:48:DE:5B:65:B0
ValidityFri, 12 Jan 2024 05:00:03 GMT - Mon, 06 Jan 2025 05:00:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1&sc=1714080431438 HTTP/1.1
Host: storage.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714080431&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-MSNSERVER: AM3PPFA74B49EA6
Strict-Transport-Security: max-age=31536000; includeSubDomains
MS-CV: IpSr9A5wdUOD7WJBUfgucA.0
X-QosStats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
X-ThrowSite: 4212.9205
X-ClientErrorCode: PassportAuthFail
X-ErrorCodeChain: Unauthenticated
X-AsmVersion: UNKNOWN; 19.1381.322.2019
Date: Thu, 25 Apr 2024 21:27:11 GMT
Connection: close
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/1033/osfruntime_strings.js
2.2 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/1033/osfruntime_strings.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (11667), with no line terminators
Hash a1d892f1368c7f3b1dfb75057b936b66
91ec4980bfa5b301199b574e6240a618247679f9
2db70125e37f651d09a6d03d593a65e09668e6267cca1257251328517f7eaefc
GET /officeonline/we/s/161762241001_App_Scripts/1033/osfruntime_strings.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2223
last-modified: Mon, 22 Apr 2024 11:53:25 GMT
x-ms-request-id: 1e2676b1-c01e-004e-55e7-94d11f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129210232,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080432.7b39778&TotalRTCDNTime=1&CompressionType=br&FileSize=2223"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/sdxprefetcher.htm
200 OK 408 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762241001_App_Scripts/sdxprefetcher.htm
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash d4bb84acc0c5f6e586f65ea7eb54b10e
30eafa7073618745e9e35b4d40e9239413c34892
523f7470b591600b5ae24f2b17dc50a55f151dade725fe0da1dc89003eeafff2
GET /officeonline/we/s/161762241001_App_Scripts/sdxprefetcher.htm HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html
last-modified: Mon, 22 Apr 2024 11:46:15 GMT
x-ms-request-id: a24fb6f0-b01e-0009-3de7-94ba44000000
content-encoding: gzip
content-length: 408
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:12 GMT
alt-svc: h3=":443"; ma=93600
vary: Accept-Encoding
akamai-request-bc: [a=95.101.10.204,b=129210255,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080432.7b3978f&TotalRTCDNTime=1&CompressionType=gzip&FileSize=408"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901
403 Forbidden 1.2 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/AddinServiceHandler.ashx?action=laststoreupdate&app=3&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 4c632447-13ef-4fd7-bff1-8cc300599dc1, 4c632447-13ef-4fd7-bff1-8cc300599dc1
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-officefd: DB5PEPF00011AAC
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest
x-msedge-ref: Ref A: B3B0FF1264654E67B8DF58C6FB90D8D4 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:12Z
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
js.live.net/v5.0/wl.ms.js
200 OK 16 kB URL GET HTTP/1.1 js.live.net/v5.0/wl.ms.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectonedrive.com
FingerprintE9:FF:31:7F:0C:79:4E:6C:11:09:23:F9:09:E5:77:ED:06:E0:4D:ED
ValiditySun, 11 Feb 2024 21:04:50 GMT - Wed, 05 Feb 2025 21:04:50 GMT
File type JavaScript source, ASCII text, with very long lines (43338), with no line terminators
Hash c6ba4d44d3740688e6bdf01dace5b7eb
389a1825b6aad7cd758e2488ae1fcb3de2205dbb
d4c9bd86a5465d8414b7a10438d28110836126b387990d492fe545a5e701904a
GET /v5.0/wl.ms.js HTTP/1.1
Host: js.live.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=86400
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Fri, 10 Jul 2020 18:30:22 GMT
Accept-Ranges: bytes
ETag: "0b3b92be856d61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-MSNServer: 7fd5ff5fbf-kxqj4
X-ODWebServer: eurwesteur001307-odwebp
Access-Control-Allow-Origin: *
Date: Thu, 25 Apr 2024 21:27:11 GMT
Content-Length: 16221
word-edit.officeapps.live.com/we/skydriveuploadhandler.ashx?cpfsi=1
200 OK 9.9 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/skydriveuploadhandler.ashx?cpfsi=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 4b757899ca636748141a953b8092558e
1471c6b3fdb7f3580af6717a568912f523c50ebb
b16164b713dbc68fb879e68bf8456209a3c38e269fcb8ee4854c383e312af593
GET /we/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 6f0c31a8-02d5-4e1d-af9b-9ac8dbcb7a8d
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAD
x-wacfrontend: DB5PEPF00011AAD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 1BD22FC47AE346468BEEA55AB0CCDCBF Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:11Z
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 39b57faa-8138-465c-8e31-a04c4487a330
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: d156feea-422f-49db-978a-7627929bd368
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53129
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: a6f0a17b-aad7-4fd9-b359-256f95a7172f
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 6167
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 14361928-d772-4922-b9e9-6c4f2f6e5cc7
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/moeerrorux.css
1.5 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/moeerrorux.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 4df9b0011f8ae623e26116bc635cfb36
0d68bbcb58d190f6e2803043a1823a3826325f33
47d6dbdb766bd7ea675f68a5ce5a22654554001efc7007a0b8c484069d9e2638
GET /officeonline/we/s/161762241001_resources/1033/moeerrorux.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1475
content-type: text/css
last-modified: Mon, 22 Apr 2024 11:46:26 GMT
x-ms-request-id: f1a682f2-101e-005d-24e0-94f513000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129211530,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080432.7b39c8a&TotalRTCDNTime=1&CompressionType=br&FileSize=1475"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/progress.gif
695 B URL res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/progress.gif
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type GIF image data, version 89a, 24 x 24
Hash 648ad2f7eea95a9b5491dcd2203b2f54
5ffa99938410aebab10b32308f242437b9432b53
a3596c17dad9a003d0bfbe0b7ba6765f51391b5c3943660316f01c8e77b323db
GET /officeonline/we/s/161762241001_resources/1033/progress.gif HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 695
content-type: image/gif
last-modified: Mon, 22 Apr 2024 11:47:31 GMT
x-ms-request-id: 93734e24-701e-0016-68e7-940940000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129211536,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080432.7b39c90&TotalRTCDNTime=1&CompressionType=&FileSize=695"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/moe_status_icons.png
6.1 kB URL res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/moe_status_icons.png
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Hash 2443f04dfd8ce58264835f7cd477799c
e798ef676a42aa8f723246c95fa6a918010223b2
77dd1463fe34be51528c6535c5aaf5590ee90bbd3b76ae8e362657c45e9f90fd
GET /officeonline/we/s/161762241001_resources/1033/moe_status_icons.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6140
content-type: image/png
last-modified: Mon, 22 Apr 2024 11:47:52 GMT
x-ms-request-id: b89eae24-701e-0006-21e7-94cc28000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129211537,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080432.7b39c91&TotalRTCDNTime=1&CompressionType=&FileSize=6140"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/agavedefaulticon96x96.png
200 OK 1.1 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/161762241001_resources/1033/agavedefaulticon96x96.png
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Hash 084e7612635dfcf69a16255b41e70caa
0d9721aa70b01487d3340b864c0bd49fb1d95206
7b389747818635bca6fe76f5e3226eda36af53d8f27526796bc975ebd440a395
GET /officeonline/we/s/161762241001_resources/1033/agavedefaulticon96x96.png HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1115
content-type: image/png
last-modified: Mon, 22 Apr 2024 11:46:31 GMT
x-ms-request-id: 4d8c5541-501e-0063-09e7-94626c000000
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:12 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129211539,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080432.7b39c93&TotalRTCDNTime=1&CompressionType=&FileSize=1115"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 0ccba987-f739-42f3-8e49-1926e1bcbd22
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 25 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 6b7b8aed7b10961aff78b51998fb53d9
165f7ee90b71eb78873975f618f65e73454ff443
96de196759182729159b02436db60cd5a7309170d1056e844c042a32f94a8690
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714080431786
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 176046
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 25
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 895
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:11 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 2999
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: cbbcaaac-f736-4c63-af42-e4de729499f8
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
200 OK 0 B URL OPTIONS HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,dmsactivityid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-allow-headers: content-type,dmsactivityid
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 0
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714080431&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
11 kB URL login.live.com/login.srf?wa=wsignin1.0&rpsnv=150&ct=1714080431&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (24157)
Hash 07fbc6f729da8340460351dd9789a53b
1d7effe429c62d30767975ee3f6e37ca9fbd97f8
0b8bc4b07edcc9aa989e86cf41b47abdb42552fb946b4d1dc9053e0c75df7c2f
GET /login.srf?wa=wsignin1.0&rpsnv=150&ct=1714080431&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fstorage.live.com%2Fstorageservice%2Fpassport%2Fauth.aspx%3Fsru%3Dhttps:%252f%252fstorage.live.com%252fmydata%252fmyprofile%252fexpressionprofile%252fprofilephoto:UserTileStatic%252cUserTileSmall%252fMeControlMediumUserTile&lc=1033&id=63539 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Thu, 25 Apr 2024 21:26:12 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C532_BL2
x-ms-request-id: 98425553-58f7-4a1f-973f-b98d30fedbe6
PPServer: PPV: 30 H: BL02EPF0001D8AA V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=7ab4ffaf03d0419b8f8b4f47df6150b1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=63539<=1714080432&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSCC=91.90.42.154-NO; expires=Tue, 20-May-2025 21:27:12 GMT; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPOK=$uuid-9aef05e7-a16c-43e9-a768-9cc540399ff1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.Di5ltCk4IOXYedIox9rITjZswh0DbKiUCehWSv6bQh!8AGgr0fiW4pfUmrHETwMteOaEWipMMFjl7uY24jAAtnjj0iN13gKDFba5Oh*u1eRV*eD8wrwkWSdctxZlzMJc8A5OvtoNcRAhrZpXNsF0H9gwaWOQywRSuGgyeKxXwyPQAvKlRANocmUYAOgoFVoRCsFAo7M9B1j!*l8FmVpUg6zIDmSu!tLfxRsNlm6Yl6gt2EENxGpZQTu9tBFwFLNeL6hryrsPmafS9oILoobzKGOc3eodybksOSYhw5e6DnQ*B3nl7QAZAzkBdqOgLsfqkf34*8h2oVuu9vTP6joB13UkGM*f7xaoO5hiNFDG3AKZytTm9C3KRSKV9jXsQCb46IRJcMejX5AdQdF13!P2XxOrgRqldyFrNfdOs*AKiELI; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Thu, 25 Apr 2024 21:27:12 GMT
Content-Length: 10812
mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
200 OK 7.9 kB URL OPTIONS HTTP/2 mrodevicemgr.officeapps.live.com/mrodevicemgrsvc/api/v1/SDXReleaseDataPackages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectmrodevicemgr.officeapps.live.com
FingerprintF4:BD:27:31:CB:7C:DD:4D:BB:3C:2D:95:4F:06:95:8D:DE:E1:94:46
ValidityTue, 27 Feb 2024 21:32:17 GMT - Fri, 21 Feb 2025 21:32:17 GMT
Hash 0c115c007080af1077da0dab25160074
c311fa65ec289edbe386e9b49d6537b47b1255f4
e4ed2b0a0d20e05f9f994983dbb3716714cdb30e04764ce828c8f6c9f6570fff
POST /mrodevicemgrsvc/api/v1/SDXReleaseDataPackages HTTP/1.1
Host: mrodevicemgr.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: application/json
DMSActivityId: bdfb7271-f812-746e-ca61-9fd4bff2b46e
Content-Length: 1391
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 25 Apr 2024 21:27:12 GMT
content-length: 7946
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=5e4c7271-f812-67ab-64d4-9ac4735e8a79&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901
403 Forbidden 1.2 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=5e4c7271-f812-67ab-64d4-9ac4735e8a79&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 11ca4578cb026a23713aea6781b8ece3
a05ae51b4a3e2e0076222cbcbe9c58833cdef108
c55f527e536de44c7980fecece7428ae5a765647495e47008a8a54fa1e434736
GET /we/AddinServiceHandler.ashx?action=getUserId&app=word&corr=5e4c7271-f812-67ab-64d4-9ac4735e8a79&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-length: 1233
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: e3eeb396-8a05-4766-9890-7386affb96ea, e3eeb396-8a05-4766-9890-7386affb96ea
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-officefd: DB5PEPF00011A9F
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_powerpointslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control
x-msedge-ref: Ref A: 096C3F52A5194E8688C29D7365743592 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:13Z
date: Thu, 25 Apr 2024 21:27:13 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:12 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 4f726e32207e4b1cb0f5e86e832752e0
e09ef3ca44be849d0c45bc9e49024d83c6e37eec
38f42c93657c639b924c608a593979673b1eb87c9ab8bb2dd8b5e3a56896d2a8
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830,ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,9783945ebc2b468fbb8a2890cdab903b-787355a5-74c8-4a89-b06a-9c82635d75fa-7162,79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
upload-time: 1714080433357
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 15645
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 169
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:12 GMT
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?26e60ca_d6ccdcbc_1714080433653
0 B URL store.office.com/gatedserviceextension.aspx?26e60ca_d6ccdcbc_1714080433653
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?26e60ca_d6ccdcbc_1714080433653 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-YILWcyTu2RxMsjrmbPo1SB2O6zxuilet5mguil5tExY=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: fc6688ab6f4cd4df8be0b56ea3f84b26
x-correlationid: fc6688ab-6f4c-d4df-8be0-b56ea3f84b26
x-machine: OMEXNODES000006__omexexternal-prod-weu-001_6
x-buildversion: 24.4.10415.11006
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: 95d13a5a-20ba-494e-85a0-afdb9b0be322
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:13 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
403 Forbidden 1.3 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 880ba00a8a5a8af780a8ea61454bc237
e2b2fe406764328efebcbb7f04dd6ba4beb831ea
370453fe73eed92aab72d53b5c02093e8dda0a218ae0ad2e478fae504d1e7532
GET /we/RoamingServiceHandler.ashx?action=getAutoCorrectOptionsSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ReplaceTextAsYouType;CapitalizeFirstLetterOfSentences;ReplaceOrdianalsWithSuperscript;ReplaceHyphensWithDash;ReplaceFractionsWithFractionCharacter;ReplaceQuoteWithSmartQuote HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: d065ca75-41e8-4aad-b746-cb4670c7803f
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ACD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-officefd: DB5PEPF00011ACD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_excelslice,afd_onenoteslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 8E5CB92555584872AE74F47A05EFC798 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:13Z
date: Thu, 25 Apr 2024 21:27:13 GMT
X-Firefox-Spdy: h2
fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
722 B URL fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
IP
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash bcb0c4305749b10c7e9f428f8199caf5
b0afc5be5abe6f91286c5f15784ec25fb318badf
996a3022bdb1c69a264b5e164e4596169d81a91dc6114f7b971fbcd2a218e69c
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000096.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA75EDBF8D6FD6E64EC15A55BED859C6D856ED5E78B4556F6A89F2A5D9E7FAAD4"
last-modified: Wed, 24 Apr 2024 07:45:09 GMT
server: ECAcc (lpl/EF58)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 722
content-type: text/xml
cache-control: public, max-age=124206
date: Thu, 25 Apr 2024 21:27:14 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000006.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml
200 OK 1.5 kB URL GET HTTP/2 fa000000006.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash e90570b9ba60d5c852fbe5ef17ac3538
5c1204b41de749cbd2da56abc2afd52d1e036ded
41c2b87ba4a89e79b898c09a2f7d520e9c98aab5c11fe937e640a46e72b26552
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2305.26005/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000006.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 May 2023 22:57:41 GMT
etag: "0xE64D3D4DD5FB52AEF649F58F41B03E9A18AB236F359146E390AEAC833295DAEC"
accept-ranges: bytes
apiversion: Distribute 1.1
x-msedge-ref: Ref A: 74C7C982AFF34B2EA19D19C96AF94111 Ref B: LTSEDGE1907 Ref C: 2023-05-31T17:40:58Z
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=114865
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 1460
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000002.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml
10 kB URL fa000000002.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
Hash 7696f8b035292f5d72f138d21671396b
0ae52f8d9004f77c6399f3db2a3053c8221c49d5
48afc1d5b0515029bc04d4c0365ecf286367f051f5f93356ade5d639ea866597
GET /033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2403.4003/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000002.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xDE14F5441BD16FFD147B920AF1CB96A4E54190F739E2F90574B425A1076135CB"
last-modified: Tue, 05 Mar 2024 01:34:06 GMT
server: ECAcc (lpl/EF3E)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 9973
content-type: text/xml
cache-control: public, max-age=121305
date: Thu, 25 Apr 2024 21:27:14 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000074.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml
774 B URL fa000000074.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 506f01f02fe03f2844bf75380f6400b0
ae21f96c93c367afb5a11a0a9ea0f823bf318dbe
86b2af7758ef1bf4c43eb037b43064e130d9528e2890142ab1bda58e8cdcabd9
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2201.11006/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000074.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Jan 2022 19:01:29 GMT
etag: "0x87722E389E5EEA4293E0C3FE0FD8D026B0B4D441923822E996090B9F64097695"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0QoKoYgAAAAD/v2EF/ClzT7JeJDKP8PkcTE9OMjFFREdFMTUxOABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=180510
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 774
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
892 B URL fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash c588e014a7a269c048b7f28d72220900
acc610bb4338b9207bfe8293df35c07bcab82648
03c6dd0c23b808ac239aaea3f3e8e7943128633d6048cede869cb2fe67a842e5
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000012.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x051054F2987E90D00D4AB37078BA6E1906843E6BF3516912E489171471812B0E"
last-modified: Tue, 26 Dec 2023 19:12:24 GMT
server: ECAcc (lpl/EF7C)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 892
content-type: text/xml
cache-control: public, max-age=144965
date: Thu, 25 Apr 2024 21:27:14 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
200 OK 503 B URL GET HTTP/2 fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 5e6edc73470ff3e746bc8bdac6fb38b2
7dfa441d001fe0b50a5f6ed6102479662d2497df
71344c4aacbc26401dd2cfdcdb7c16625b423b4e710a0030a65d90b7e16f602d
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000110.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x4B895E43C1663E489850FC20D3E97389C5A0EEE9DBD7D5214B29C0484C6D0125"
last-modified: Mon, 04 Mar 2024 06:27:54 GMT
server: ECAcc (lpl/EF4C)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 503
content-type: text/xml
cache-control: public, max-age=114755
date: Thu, 25 Apr 2024 21:27:14 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000085.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml
607 B URL fa000000085.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash b105f6e9c6aa1cc3743b0afed2f68208
cb7ce1946647cf98eacf382b4a40efcbf6552cdb
c1d5cec2f2e208b33edf95459780a50b055a4302b45789dcbae466bc10dc8655
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2105.30008/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000085.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Jun 2021 13:14:45 GMT
etag: "0x9A6E8947EAA5FEB8D55945344E0F9E15183088588574AF4A348E58DEA11018A0"
accept-ranges: bytes
apiversion: Distribute 1.1
x-ccc: GB
x-azure-ref-originshield: Ref A: 45A9F89529244642ACACEF9D406D593A Ref B: AMS231020616037 Ref C: 2023-08-03T21:14:58Z
x-msedge-ref: Ref A: B35E237ABF6B4998953F4C1F6328F90A Ref B: LTSEDGE0816 Ref C: 2023-08-03T21:14:58Z
x-azure-ref: 0wYSoYgAAAABdyw65xcJ8QLPqAkZM0TlRTE9OMjFFREdFMDIxNABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-encoding: gzip
content-length: 607
content-type: text/xml
cache-control: public, max-age=151264
date: Thu, 25 Apr 2024 21:27:14 GMT
vary: Accept-Encoding
x-cid: 7, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000029.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml
726 B URL fa000000029.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 5afe7e5f67d7a7f2f730668a1560c2c0
00c7f4c49f72cacd2364039f052c31557af1deec
a878d169b063437be613a6f42c49283f299bfea063b3a124480545dbb3b0ba5f
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.1906.25001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000029.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 26 Jun 2019 10:02:20 GMT
etag: "0xB37202CB6635558936052D0FB47DA652F0126AB5C799C5CEDA7CEFD689CFAB49"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0wXinYgAAAAA2XVKsfc2TT7Vf80S3JjtITE9OMjFFREdFMDIxNwBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=210182
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 726
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000051.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2402.12001/en-us_web/manifest_web.xml
934 B URL fa000000051.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2402.12001/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 419e6c242dba4e71cefd42c01f0e91a6
82ef7dc0bf5c262ca2bea08573924a52d68624e3
43b556c798959900cb9ba58fd42b7cbc8551d833e8326f5d89dffe2885bcfbab
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.1.2402.12001/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000051.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA46977E05377EB06E8FF658339A1B8225CEA7FC8731C0C4393C5F7D08105265F"
last-modified: Wed, 14 Feb 2024 05:37:20 GMT
server: ECAcc (lpl/EF36)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 934
content-type: text/xml
cache-control: public, max-age=57384
date: Thu, 25 Apr 2024 21:27:14 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000116.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml
9.9 kB URL fa000000116.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
Hash 4fee61f6dab5542b0bca78a0d52955be
5fec5fcd246d81e15b4c222785e1837fd66e5e27
0d57369177aada824d3e5d5488f7cf06da4e590c67adfc06260940340162a676
GET /033f92d3-bc6d-439a-858a-a17acf70360a/2.0.2402.28009/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000116.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x46C088B08547C754497DA95DE7E2DEBA67E8B34C2B283CDD7BCFF207EF9BB6B9"
last-modified: Thu, 29 Feb 2024 17:57:56 GMT
server: ECAcc (lpl/EF1F)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=97884
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 9863
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
wa104381125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml
862 B URL wa104381125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 8cd6310c1f018cb9f32550ddae7b0770
7e0c7c73bb47bfcda53ca84f1def2b14e139123a
15e26c7d0c4f4deb349cf6aaba4908fcb74e59206d1fa595860b581e912201d3
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2106.28005/en-us_web/manifest_web.xml HTTP/1.1
Host: wa104381125.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 20:46:25 GMT
etag: "0x5B1FFB271A8FCC31E82D5365960926E0543BCFBCD84D2CB94E40003EB71E6894"
accept-ranges: bytes
apiversion: Distribute 1.1
x-azure-ref: 0oHSpYgAAAABOtWO+JFd/QLAOIaRKHaurTE9OMjFFREdFMDIxMABjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=179717
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 862
x-cid: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000145.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.7005/en-us_web/manifest_web.xml
902 B URL fa000000145.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.7005/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 79e92837ba6f620305b9f7932061ff51
4cf425459109a38af6876717bb8430b3c975803f
ef2e648ebaff3e9fd9d8046d64be4dd1707d267c7ea5fff4d3db3c420a5cb456
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.7005/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000145.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0x94AA9C579F4CFA19366F2242C3124AF660E7A37E9F57CCA4826B2FE0CCE0B8DF"
last-modified: Tue, 16 Apr 2024 04:41:46 GMT
server: ECAcc (lpl/EF43)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-neu-z1
content-encoding: gzip
content-length: 902
content-type: text/xml
cache-control: public, max-age=35390
date: Thu, 25 Apr 2024 21:27:15 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000059.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml
200 OK 647 B URL GET HTTP/2 fa000000059.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml
IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectresources.office.net
Fingerprint77:B2:73:EF:F6:2B:90:EB:0E:B2:A4:4D:41:F9:3B:59:F7:03:84:CA
ValidityFri, 28 Jul 2023 09:10:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash a14c3949c1836fa3e4d41fae6e193533
2c5ac12c29ccdb630bc31473aa37625853ce177f
6768de051f32e94233d5fb12580b92586c5d516d1867b790bb77f4a3c53c3aad
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2310.3014/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000059.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
apiversion: Distribute 1.1
etag: "0x04055EFA84D467751869A7732800EA33B320AEC7FF50A0270FD68CA76C1E376B"
last-modified: Mon, 06 Nov 2023 23:32:28 GMT
server: Kestrel
content-encoding: gzip
content-length: 647
content-type: text/xml
cache-control: public, max-age=26305
date: Thu, 25 Apr 2024 21:27:15 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
510 B URL fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text, with CRLF line terminators
Hash 605c6bd48b2ab0262c0113445494ff4c
00cc6621252eb4930486f4837638a0524e5c77e9
405497ac72ada72a30277e2493a9b00b999df6ce1b425167b8c405af45ef0338
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000111.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xA469F9CB0BD572336E79DA17C4D92777808887EC57EBF3B424F2A62F178652C6"
last-modified: Mon, 04 Mar 2024 06:23:27 GMT
server: ECAcc (lpl/EF53)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-type: text/xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=114810
date: Thu, 25 Apr 2024 21:27:15 GMT
content-length: 510
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
fa000000125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.15005/en-us_web/manifest_web.xml
1.0 kB URL fa000000125.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.15005/en-us_web/manifest_web.xml
IP
File type XML 1.0 document, ASCII text
Hash 6361125f88da5ad79615b988e02b0c73
fcdd14882b759ed4ee34ac1ac8ab338a853e62a4
74bea8988e533520807cacdecc1aff38c705d80641602a582c98749e70476325
GET /033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.15005/en-us_web/manifest_web.xml HTTP/1.1
Host: fa000000125.resources.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "0xC91D5AA1C6A5986612C2DEA66D60BA78C172038FB5F98AEC8FBA0BF3D6431148"
last-modified: Wed, 24 Apr 2024 09:18:02 GMT
server: ECAcc (lpl/EF6A)
x-ms-apiversion: Distribute 1.2
x-ms-region: prod-weu-z1
content-encoding: gzip
content-length: 1001
content-type: text/xml
cache-control: public, max-age=129935
date: Thu, 25 Apr 2024 21:27:15 GMT
vary: Accept-Encoding
x-cid: 11, 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:14 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 9b0f4fe929a017c6f4959e655115375a
3b183124d6780838cd323c78d3dfe744a13fd626
f8a95719f97006bd286f678a38eb1d7871ba84a84bef75c7107a78f2e17b0583
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045,7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714080435410
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 8363
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 69
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:14 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:15 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714080436409
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1824
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 148
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:15 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 23bb3d8c-023f-46b3-9174-9055c93d7a45
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:17 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: bfa3c93a-25ff-4328-be9c-9bbfac65008a
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:17 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 57089
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: d6e7fc77-8fa1-46be-8dc8-7954803cfeae
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:17 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-BrowserUlsBeacon: [{"Index":17,"MsSinceStart":14326,"Value":"DocumentCacheRemover.evictInvalidCacheEntries result: 0","Type":"RemoveInvalidDocumentCacheItem"},{"Index":18,"MsSinceStart":14326,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 07255999-5be9-42d0-8620-4b263e544c46
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PSE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:17 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js
11 kB URL res-1.cdn.office.net/officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (49368)
Hash 668059a0ad862537a322d4651f639346
4db9ac8003b9172029d953fe41e789835e1f7bdd
b91087f2852920bbff9c4e029c154a5e90f5bde0f9f7044ace7d11d4b0f2344c
GET /officeonline/we/s/hB91087F2852920BB_App_Scripts/midgardbootstrapper.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10673
last-modified: Tue, 11 Apr 2023 08:47:02 GMT
x-ms-request-id: 42da5b2d-b01e-0019-5431-7a7f2c000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129219035,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080437.7b3b9db&TotalRTCDNTime=1&CompressionType=br&FileSize=10673"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js
14 kB URL res-1.cdn.office.net/midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (54497)
Hash 1e492e40049c2ff65b02b398b094f839
741ae0d5de13a5f31b1c2542795677e8fc8c708f
51814c1e404f7cac92c602596b8bf0c09dc468c0f5e2d69928939077635e0b1e
GET /midgard/versionless/vendors_loggingdependencies_6a5f2f5299e33b172cec.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13551
last-modified: Thu, 27 Oct 2022 16:58:37 GMT
x-ms-request-id: bcd1c63b-301e-0007-599c-5b93f4000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129219088,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080437.7b3ba10&TotalRTCDNTime=1&CompressionType=br&FileSize=13551"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/midgard/versionless/loggingdependencies_93278b946fd4334766a5.js
200 OK 4.7 kB URL GET HTTP/3 res-1.cdn.office.net/midgard/versionless/loggingdependencies_93278b946fd4334766a5.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (14582)
Hash 8db72649caf05d1afb098a140f959321
8b744af169a965e23a4c1530e227f5d7b3647086
9ef8104de1a651ace27cd748d0a80ce668e3353f98a57cffd99a86ad9c7fae4c
GET /midgard/versionless/loggingdependencies_93278b946fd4334766a5.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4680
last-modified: Mon, 21 Nov 2022 14:21:52 GMT
x-ms-request-id: eeeca2a6-d01e-0042-7094-644617000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129219093,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080437.7b3ba15&TotalRTCDNTime=1&CompressionType=br&FileSize=4680"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h6C0D6E70D9C26A1D_App_Scripts/WordEditorDS.uploadFromPC.js
200 OK 235 B URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h6C0D6E70D9C26A1D_App_Scripts/WordEditorDS.uploadFromPC.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 1b933902caff04c33f475e5bef7a54b8
1db6a724095f0a8f5e3897f489ea73d06367e318
6c0d6e70d9c26a1d68a797847bfd6a351ab2c1d6b0b88231b10f2dfb903017e9
GET /officeonline/we/s/h6C0D6E70D9C26A1D_App_Scripts/WordEditorDS.uploadFromPC.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 235
last-modified: Mon, 22 Apr 2024 11:46:14 GMT
x-ms-request-id: 8ac6c213-901e-0031-6be7-941e84000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:17 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129219181,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080437.7b3ba6d&TotalRTCDNTime=1&CompressionType=br&FileSize=235"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:16 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 4f726e32207e4b1cb0f5e86e832752e0
e09ef3ca44be849d0c45bc9e49024d83c6e37eec
38f42c93657c639b924c608a593979673b1eb87c9ab8bb2dd8b5e3a56896d2a8
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: 7e7959aac92e41d6892c69a87259ed58-de5c63ef-10f5-45e1-bef2-d23e9cac2fab-6830
upload-time: 1714080437415
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 76546
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 17
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:16 GMT
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714080437403&time-delta-to-apply-millis=use-collector-delta
0 B URL browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714080437403&time-delta-to-apply-millis=use-collector-delta
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=e5ad760145754ffc9704e67c800087f2-994e0432-dd0e-4a24-9a3d-bb9d8a6b83f3-7303&client-time-epoch-millis=1714080437403&time-delta-to-apply-millis=use-collector-delta HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1164
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 569
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept, Content-Type, Content-Encoding, Client-Id
access-control-expose-headers: kill-tokens, kill-duration-seconds, time-delta-millis
date: Thu, 25 Apr 2024 21:27:17 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 2.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 12aef53281576e2daec289948eb8b2e7
e2c80d1f88c71e7ff588f8aa9691ae77541b278c
d4577735a3a5667eab8ce37922fcba4e5a249523c23ddfffdb050c81f5852abc
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 2116
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: b523d62f-3f4f-4522-9ce9-f0a688da3e04, b523d62f-3f4f-4522-9ce9-f0a688da3e04
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAB
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_wordcapacity_4_control,afd_excelslicetest
x-msedge-ref: Ref A: 742F552125084FEB9F406939EC7872AF Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:19Z
date: Thu, 25 Apr 2024 21:27:19 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:19 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714080440430
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2034
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 49
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:19 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.5 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 77d624951ab70f6a7b80fada6fdb41c6
ffd436a5e64f5e977d16591f3bf532443673897b
1c58345cb967da5c3cb7e0cfcedec08a92e3415e3165a589030ad68de4094502
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1470
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: b76c1051-469e-40b7-aa98-70a87ab8c7f4, b76c1051-469e-40b7-aa98-70a87ab8c7f4
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AEB
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 03C320142F144332A0D5AA0D6CC7E2FD Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:20Z
date: Thu, 25 Apr 2024 21:27:20 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&sl=1&u=1
200 OK 209 B URL POST HTTP/2 word-edit.officeapps.live.com/we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&sl=1&u=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b7768ed41e9f44bf6c1d54909ab9fd15
e98e0c02297f9cd15a43618eef5004f00c744699
d301aeaa47769b06f3442716666426e95fe9c45ec158e34dab9fe7ff952a6a65
POST /we/renamehandler.ashx?qs=WOPIsrc%3Dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3D4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3D1714512421256&sl=1&u=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 0
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 209
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 87c77f5a-682b-4952-95e3-9bb2f763ce00
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 73C52CD0EE60414BB6326124038666DE Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:20Z
date: Thu, 25 Apr 2024 21:27:20 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 87fb2f83-bb41-4502-bc1d-1ea8eb59c8a8
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:20 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 58041
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 82a9e7a8-3343-4d38-909d-79ce7781eb4e
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:20 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:20 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714080441430
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2022
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 143
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:20 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
0 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 21:27:22 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
24 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash 9e08087cf231c2cbe33aab4f1302352c
43f6ff82122a3558ab75ad9968b6d43e08cfaebd
8529dc2ea2aebc566e99d9415e11b3de98749b5c482c4c3d6b32ec2f6402fdad
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714080442835
time-delta-to-apply-millis: 678
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 13353
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 123
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:22 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 6273
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: 06355a69-f848-4214-b8c6-8e1718daacab
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF000107D1
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: C45F228F6ECE4753A66D04364725DD44 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:23Z
date: Thu, 25 Apr 2024 21:27:23 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: b9e3a205-866c-4a36-b431-8dc2aae49cba
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:23 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 15236
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ff835ff7-5429-4aa2-aec7-35177442fa12
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:24 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:23 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714080444432
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 1567
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 16
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:23 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/afhs/AppPrefetchResources.ashx
1.3 kB URL word-edit.officeapps.live.com/afhs/AppPrefetchResources.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type New Line Delimited JSON text data
Hash a727e7e7569b92c0e315bd6d56980f71
2ffb729171a92307a5bd74dac7e38adfa595a8c9
f43c4b0f62b9dd454fa858e6629d9e9b4b29b8ed2a1621b97a36f80a376d3dda
POST /afhs/AppPrefetchResources.ashx HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
platform: Web
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 713
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558;Path=/;Domain=word-edit.officeapps.live.com; samesite=none; secure
x-correlationid: 641a4cec-f02a-4fac-b857-e3e19d8d7c3e
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF00011A9D
x-officeversion: 16.0.17614.41006
x-officecluster: PIE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-OfficeVersion, X-CorrelationId, X-OfficeFE
x-download-options: noopen
content-disposition: attachment
x-content-type-options: nosniff, nosniff
x-officefd: DB5PEPF00013F5C
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E8FCDCBBF2A2402EBEBF1C9015967274 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:24Z
date: Thu, 25 Apr 2024 21:27:24 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
8.6 kB URL res-1.cdn.office.net/officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (1141)
Hash bcc8fcba76c1a94f5ebe1d9b803dec6f
03b30d8e3852b7872351c9e427e54100153d082e
53ce432c2b641e87f8bf0c9eb069fda8b8e858cf5b3e4cdb701d26dc4cd47df1
GET /officeonline/we/s/h53CE432C2B641E87_resources/1033/EditSurface.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8641
content-type: text/css
last-modified: Tue, 02 Apr 2024 06:34:15 GMT
x-ms-request-id: 278ab5b9-201e-000b-16f7-8404fc000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:26 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129232534,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080446.7b3ee96&TotalRTCDNTime=1&CompressionType=br&FileSize=8641"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h4B08690ACD1EA97F_resources/en-US/clientManifest.exp.js
31 kB URL res-1.cdn.office.net/officeonline/we/s/h4B08690ACD1EA97F_resources/en-US/clientManifest.exp.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0f0cd7a2eb077610d82ee2bfde12fa6f
b8a4dee458634489b94db5674d808efacfd74443
4b08690acd1ea97fb593a7ae7dfcba38922561115e334958794c09b08d3b5117
GET /officeonline/we/s/h4B08690ACD1EA97F_resources/en-US/clientManifest.exp.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 31174
last-modified: Mon, 22 Apr 2024 22:28:11 GMT
x-ms-request-id: 661afcab-d01e-001f-7ae6-954c93000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:26 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129232548,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080446.7b3eea4&TotalRTCDNTime=1&CompressionType=br&FileSize=31174"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h371F7C6412FA7617_App_Scripts/WordEditorDS.js
1.0 MB URL res-1.cdn.office.net/officeonline/we/s/h371F7C6412FA7617_App_Scripts/WordEditorDS.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (714)
Size 1.0 MB (1020727 bytes)
Hash 9314ec59eff0933eb49760f27a90afe2
cf9b12b3937d44e558b5029a4f5d95047c9248ff
371f7c6412fa76172ea7bd466f9a0a8554690652a3649e7a318083748d9a54fd
GET /officeonline/we/s/h371F7C6412FA7617_App_Scripts/WordEditorDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1020727
last-modified: Mon, 22 Apr 2024 22:20:49 GMT
x-ms-request-id: 98c3c354-301e-0028-59e6-959e3f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:26 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129232531,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080446.7b3ee93&TotalRTCDNTime=1&CompressionType=br&FileSize=1020727"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.2 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 3ead99b2f9054a812b7bfc9a5b118af6
c370927253243a70616cc2a543f4533319d00c70
9e18e412501e015867c630bdfd50e2260726c632acb24eef5495504ce3b1147a
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1226
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: fa8e7203-4811-4e5b-bf27-249349b8ed37, fa8e7203-4811-4e5b-bf27-249349b8ed37
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011ABF
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 3B5E269E75D348F99BE87028DB891477 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:27Z
date: Thu, 25 Apr 2024 21:27:27 GMT
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 0 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://word-edit.officeapps.live.com
date: Thu, 25 Apr 2024 21:27:27 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h16BBA672024E33D3_App_Scripts/WordEditorDS.core.js
402 kB URL res-1.cdn.office.net/officeonline/we/s/h16BBA672024E33D3_App_Scripts/WordEditorDS.core.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3005)
Size 402 kB (402346 bytes)
Hash a5290bff1e24db96f7c46e847bba3103
a9549d3266acd75c36a49287e44e1ec362643d22
16bba672024e33d369284b1f063a8b3b7da9cc37af482213ff2192f0c23b7922
GET /officeonline/we/s/h16BBA672024E33D3_App_Scripts/WordEditorDS.core.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 402346
last-modified: Mon, 22 Apr 2024 22:20:53 GMT
x-ms-request-id: 479d855b-601e-001a-5ce6-959e48000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:28 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129235408,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080448.7b3f9d0&TotalRTCDNTime=1&CompressionType=br&FileSize=402346"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
res-1.cdn.office.net/officeonline/we/s/h2DD80E8E0F26B1BF_resources/1033/WordEditor_version2.css
74 kB URL res-1.cdn.office.net/officeonline/we/s/h2DD80E8E0F26B1BF_resources/1033/WordEditor_version2.css
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
Hash a8dfd552dc03ce82ed5786762c2df945
12526119dff1271e189e5fc012b26678e968d9a7
2dd80e8e0f26b1bf379ac1a6ebff15b63222956ef9b2d3bbf4dea44cf2344d69
GET /officeonline/we/s/h2DD80E8E0F26B1BF_resources/1033/WordEditor_version2.css HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 73700
content-type: text/css
last-modified: Sat, 06 Apr 2024 01:33:51 GMT
x-ms-request-id: b9b5d55d-001e-000c-68b9-89689f000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:28 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129235415,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080448.7b3f9d7&TotalRTCDNTime=1&CompressionType=br&FileSize=73700"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-cdn-provider: Akamai
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
200 OK 24 B URL OPTIONS HTTP/2 eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=2 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.12
apikey: ff7e2f12a4be407096fc01eeb760eda3-eeeb63cf-35d9-4734-ab45-66a873412359-7045
upload-time: 1714080448434
time-delta-to-apply-millis: 452
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 2037
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 171
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:27 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash bc752a7cc9dd9463c007a87e538c848d
155a88c6fd6ab3a75eb595350c44598cd233fcf5
ec0a0cc4e4446963a4da9687b2af027fe988dcde0f597c284bc6f54fa8062a42
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1078
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: f1eb158f-2d11-40f9-b8d3-cd3068a0a749, f1eb158f-2d11-40f9-b8d3-cd3068a0a749
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011ADA
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 15E65EFE65BF41698FA525A6C0DD6666 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:29Z
date: Thu, 25 Apr 2024 21:27:28 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.2 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 8b824d6fb807f7a2f2957e6784b37277
b5d26a75c3fc73e9cd25d399c016430d5baf4b80
cb41b77d7ce0d94639b3ede4e8c65c5d5cdfeff18b78d6b7abb34c1608195ecf
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1154
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 4df8bc0c-c93e-4e5e-970a-5b8feafedd8c, 4df8bc0c-c93e-4e5e-970a-5b8feafedd8c
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAE
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: AB9D9CEB31F74444B9CD0452AADD302C Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:29Z
date: Thu, 25 Apr 2024 21:27:29 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 4f31bba5ef89b81e08cf9424968ef0e6
bd5727c9fdfc99054a9e68a9b16fa342c4b64ab6
dd9299549572efafb144aed37b21fb6e2803568e3d86cfa89ed4f98f952dd689
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1105
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: c81813b9-fcb5-4d83-bea2-b9f59dbe47d4, c81813b9-fcb5-4d83-bea2-b9f59dbe47d4
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAB
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: AFBE4F57049449C79B51D61D2F657E19 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:30Z
date: Thu, 25 Apr 2024 21:27:30 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 559c9f7f9f795c71a4dbf127ea1c712c
ea110b02cbca325354072c85e9dead9469c6780d
68869686d68d0fd3a6ca0c9ec87a42e46a3e3c4cbcb0ebfac67d7e32d52d4d59
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1060
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 99c15ee1-dabd-466d-a9db-f4fd13936a14, 99c15ee1-dabd-466d-a9db-f4fd13936a14
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AEB
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: A761BEE03F21420F91D6611811EEC515 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:30Z
date: Thu, 25 Apr 2024 21:27:30 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
200 OK 4.5 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (14666), with no line terminators
Hash 8880e957219b056b26b67d88cb7ffff5
be024abfe99c2dc447191e2c59dd96fd9352e2c4
4bbb0dbb03a136e993bb2fb363455e7dcabf84cbb17de37ad6168b9326e56909
GET /officeonline/we/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4474
last-modified: Wed, 23 Aug 2023 01:02:53 GMT
x-ms-request-id: 01ae70c8-701e-0029-35f6-74c1e3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:30 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129238641,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080450.7b40671&TotalRTCDNTime=1&CompressionType=br&FileSize=4474"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 3f2913878529e378d611e96cc7c2d713
6591b1bee8dc5c3c180925b4abf8428e4230510c
2a7b42ac3db0b7259415b71d97b3a3fe245545e95195e8019b9035b1d4a2710d
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1124
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: eb052d18-67fa-487c-85d6-449ba789d2ea, eb052d18-67fa-487c-85d6-449ba789d2ea
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011ADA
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 38947AA7943A47938C33A0161CD44663 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:31Z
date: Thu, 25 Apr 2024 21:27:30 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.2 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash a8a27938622737254a7c90ec7ee28f4b
e16ad7dcd6e873bf5e08aef1c87ec3aa55b05824
bc712a65c24e00d02bada0aa6baa7f8353b16cf3c3d35e26f3b7e687bed20189
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1078
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1153
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 3cbfbfed-fe68-44cc-bbd7-87488b0918ae, 3cbfbfed-fe68-44cc-bbd7-87488b0918ae
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AB6
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 0B4813E892F34530AC2415E3902D281B Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:31Z
date: Thu, 25 Apr 2024 21:27:31 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.2 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash c3456f3cc9cda7944b4ac369574288e4
2e798d670a2e375c79e39cfa48e430607ef778da
de02faae05cac06f33b180d3b882374c052f9cbfff9046538dbff1f86c6efb28
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1224
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 25d614e1-242b-4160-93f0-accc9f5cf1fe, 25d614e1-242b-4160-93f0-accc9f5cf1fe
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AA7
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 2CD92F63950244D8A8F82E836F91C535 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: c2790f0d-f04e-415f-98e8-b95274d11b2f
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:31 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.1 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 2bb69f0dcb297ebedabc8fb1a440c6c7
a19bf9b770702119abb25ef8e3e4bd782cb6c5e0
2c0939c42c65019cd8061e058ae9aea11ccb68831193efa2ea27dfa4ea20d40d
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1064
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: f2e9d0e1-5f86-42a1-90d6-480695d1b9bf, f2e9d0e1-5f86-42a1-90d6-480695d1b9bf
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AA1
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: CDE996FC3AA541D9A8B28A4716B7A109 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 53504
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: ba5ff573-2d1a-48ee-a7a4-241d4c24cd52
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:31 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db
0 B URL common.online.office.com/suite/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 613
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie: PNL1-ARRAffinity=f3944423f893cd988dfbbaa63dda98baf44f7508821bd6ab7bbbaee8a6ce1313;Path=/;Domain=common.online.office.com; samesite=none; secure
x-correlationid: a9da7839-3bfe-48ab-b32b-604802b364e3
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D753
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002DDBD
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: ACA38774F9884F5082795A077EB566F5 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
0 B URL common.online.office.com/suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1559
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=31f198ecf7ba206ad93e765415573037273bcbb6a0de7d0199f0838f5ddaa1bd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5b2c53c3-53f3-4b6e-81ff-b0354d4cd6ee
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75F
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002D4E0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 0EC5106B644C483E983D686AF37FD2AC Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 206 B URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash b04775c49791abde43b154eb77d92813
2537f22cb6372dd57238ffb803d62417d1ff3378
8720ba382c4f0da1d2a39a8755facc743e6c67f26ca0d631d5cc787e2f262c0c
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 206
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 9df132f1-f803-4d00-ab5f-650321d3b7dc, 9df132f1-f803-4d00-ab5f-650321d3b7dc
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011AAC
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control
x-msedge-ref: Ref A: 94860B18F81A4404817E079D0BB0C934 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/AppSettingsHandler.ashx?app=Word&usid=f356868f-5b59-4329-ba52-433e4a7425db&build=20240421.7
2.3 kB URL word-edit.officeapps.live.com/we/AppSettingsHandler.ashx?app=Word&usid=f356868f-5b59-4329-ba52-433e4a7425db&build=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 5596b49f39d848fed0f8c928373063c2
1bff36969f6cbc330e695d21745a184d6acb6350
8363ba209574c27ef35c066c7cdb146f60a0160712e5f5322c13420a961caa0c
GET /we/AppSettingsHandler.ashx?app=Word&usid=f356868f-5b59-4329-ba52-433e4a7425db&build=20240421.7 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2255
content-type: application/json; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 87dfbac1-a848-472b-8fb7-99cf6bb5cf38
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7C6
x-officeversion: 16.0.17622.41001
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
x-content-type-options: nosniff
x-officefd: AM4PEPF0002D7C6
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_excelslice,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: F8E1B2485C784016952C60FFAEB74D4C Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 793
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
content-encoding: gzip
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: d338185c-b64b-4b18-b28f-d8b45c95decd
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: AM4PEPF0002D7B7
x-officeversion: 16.0.17622.41001
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SVG20r5a&DC=&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 804E231202DA44CEAF4AC6E4CB839B2C Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:32Z
date: Thu, 25 Apr 2024 21:27:32 GMT
content-length: 0
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
200 OK 28 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9abdf1af6ceccdc2abbf114766b1fc12
db73d1174c47c9bca61f14007dca32d0b167215f
892e3d437217bf722c9bcc7c7bdebedfb4a367815d885c88e0f581d056869f3b
GET /officeonline/we/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 27455
last-modified: Tue, 19 Mar 2024 04:19:58 GMT
x-ms-request-id: 036bd0e2-801e-004f-5c65-7a8ec3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:32 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129241077,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080452.7b40ff5&TotalRTCDNTime=1&CompressionType=br&FileSize=27455"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
200 OK 1.2 kB URL POST HTTP/2 word-edit.officeapps.live.com/we/OneNote.ashx?perfTag=GetChanges_1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash da0d8aaab0f872015659dcf4217f10c4
b8bef56967c71365b0ed6b2a634f812b4a8b6ce0
e5fe0aa6bb76c88380f976e0959930117e048c853a3f335115bce100fb3c5a30
POST /we/OneNote.ashx?perfTag=GetChanges_1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-Requested-With: XMLHttpRequest
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
Content-Type: application/json; charset=utf-8
X-ServerSideRendering: RenderingNoImages
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Length: 1079
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 1151
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-routed-to-target-server-path: WAC_WFE_AFFINITY_TARGET_URL
strict-transport-security: max-age=31536000
x-correlationid: 07206f81-1fa2-47d5-9410-5a4438a020a3, 07206f81-1fa2-47d5-9410-5a4438a020a3
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db, f356868f-5b59-4329-ba52-433e4a7425db
timing-allow-origin: *, *
x-officefe: DB5PEPF00011AAD
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011ACD
x-wacfrontend: DB5PEPF00011AAD
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: DA132E0057A940B5B965B9466A52B4D8 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:33Z
date: Thu, 25 Apr 2024 21:27:33 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ProofingSettingsCritiqueTypes
403 Forbidden 2.3 kB URL GET HTTP/2 word-edit.officeapps.live.com/we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ProofingSettingsCritiqueTypes
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash 82b78604bb029a2e22fc9774242a8141
c20676b446ea7e49e296d12cc7960c9a58331973
cb777f24c9b22bcdcdaee09293daa134d5c106aac3f835a6902d6106905a6ac5
GET /we/RoamingServiceHandler.ashx?action=getProofingGrammarSettings&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F11C35AAD353D0628%21610&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&requestedSettings=ProofingSettingsCritiqueTypes HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
cache-control: private
content-type: text/html
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 44e83d4b-2426-43e8-9279-48a9444281c9
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AA1
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-officefd: DB5PEPF00011AA1
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest
x-msedge-features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest
x-msedge-ref: Ref A: 73AF63BE3A3746608E8CB9767E79887E Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:24Z
date: Thu, 25 Apr 2024 21:27:23 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
0 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://onedrive.live.com/
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://onedrive.live.com
date: Thu, 25 Apr 2024 21:27:34 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
24 B URL POST browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://onedrive.live.com/edit?id=11C35AAD353D0628!610&resid=11C35AAD353D0628!610&ithint=file%2cdocx&authkey=!AE6cVrTcpd-0gr8&wdo=2&cid=11c35aad353d0628
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash 5562a90bba46ae4a7dba099d68f4a42a
ac7cf704563b3e32cc67770ea72a3873cc6fc146
afd588d7d1c94d797ef932006d524de973f6fc54556e62f0f340412c87f99d58
POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D0151dc2c430e47a7be0d911bb654017b%26HASH%3D0151%26LV%3D202404%26V%3D4%26LU%3D1714080424864&w=0 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.15
apikey: a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157
upload-time: 1714080454172
time-delta-to-apply-millis: 678
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 3065
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 115
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:33 GMT
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wacBoot.min.js
44 kB URL res-1.cdn.office.net/officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wacBoot.min.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 1feaeeb7b1ae29e6413f41765e1d7897
24936ed745c26dbb6b24ce4af6c59ba62e080744
6c9b58b5a3e38aa740c836015b4c63cc8086aa207ea1b6eec5a9167b15e9608c
GET /officeonline/we/s/h6C9B58B5A3E38AA7_App_Scripts/wacBoot.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 43748
last-modified: Thu, 18 Apr 2024 12:35:24 GMT
x-ms-request-id: 0400ab7f-301e-0038-27b7-925b57000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:34 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129243741,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080454.7b41a5d&TotalRTCDNTime=1&CompressionType=br&FileSize=43748"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: a9d8e703-1881-4162-baf7-4de34d646d8d
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:34 GMT
content-length: 0
X-Firefox-Spdy: h2
common.online.office.com/suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
0 B URL common.online.office.com/suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /suite/RemoteUls.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&officeserverversion=20240421.7 HTTP/1.1
Host: common.online.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 580
Origin: https://onedrive.live.com
DNT: 1
Connection: keep-alive
Referer: https://onedrive.live.com/
Cookie: PNL1-ARRAffinity=31f198ecf7ba206ad93e765415573037273bcbb6a0de7d0199f0838f5ddaa1bd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 1224bb96-b1ca-4fcb-aff4-4baeaf564dcb
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: AM4PEPF0002D75F
x-officeversion: 16.0.17614.41006
x-officecluster: PNL1
x-partitioning-enabled: true
access-control-allow-origin: https://onedrive.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: AM4PEPF0002DDC2
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 6AF7565BF99A4A168406B40AFF803509 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:35Z
date: Thu, 25 Apr 2024 21:27:35 GMT
content-length: 0
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
200 OK 0 B URL POST HTTP/2 word-edit.officeapps.live.com/we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /we/RemoteTelemetry.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PSE1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 1389
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-correlationid: b149694c-0a55-4c86-96bc-a5b362310a21
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: GVX0EPF00008A15
x-officeversion: 16.0.17622.41001
x-officecluster: PSE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: E2CA7ACFFD844BC7A443F23B595693C9 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:35Z
date: Thu, 25 Apr 2024 21:27:35 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: haep,x-accesstoken,x-accesstokenttl,x-buls-suppressionetag,x-iscoauthsession,x-key,x-officeversion,x-requested-with,x-usersessionid,x-usertype,x-waccluster,x-wacfrontend,x-xhr
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
server: Microsoft-IIS/10.0
x-correlationid: 84304dc9-4739-40cb-bf66-f445c04eb2a6
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt
access-control-max-age: 86400
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:34 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-BrowserUlsBeacon: [{"Index":18,"MsSinceStart":32500,"Value":"SessionExited","Type":"SessionBoundary"},{"Index":19,"MsSinceStart":32500,"Value":"https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush","Type":"Referrer"}]
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 848cdbb8-931a-417c-bf5c-78102f4b92b3
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PSE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:34 GMT
content-length: 0
X-Firefox-Spdy: h2
eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
24 B URL eu-office.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
Fingerprint87:0C:6D:26:2A:76:19:B8:62:47:0C:A1:38:5B:9B:83:66:60:18:35
ValiditySat, 30 Mar 2024 22:03:34 GMT - Tue, 25 Mar 2025 22:03:34 GMT
Hash 0c78dafbd058f298d4646959afe8cbe7
2aafc13612022c1dda5b77b927176a0b3abdf385
51eb16447d65a8e85488cc5b300daa11092e03134afc7e587392a1563640ca8d
POST /OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=79b56d2f6f2444f1a3d7f7c7f12bcc0c-f47f5fe6-ed89-42f6-8a43-cea0f5930b17-7407 HTTP/1.1
Host: eu-office.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13370
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 26
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: time-delta-millis
date: Thu, 25 Apr 2024 21:27:34 GMT
X-Firefox-Spdy: h2
browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=541f81cf685f4bccb9e5395b0add4d41-2c1afbab-72ae-471a-a985-efea62ea9e83-7130
44 B URL browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=541f81cf685f4bccb9e5395b0add4d41-2c1afbab-72ae-471a-a985-efea62ea9e83-7130
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.events.data.microsoft.com
FingerprintD4:6A:66:98:6E:27:A7:BF:67:5A:A2:31:67:A0:5A:62:35:AC:EF:1B
ValiditySun, 31 Mar 2024 03:05:47 GMT - Wed, 26 Mar 2025 03:05:47 GMT
Hash e083a789f5ca8d9579ef1ff1d8b7c778
65a0cfcc41b54bd7a3ec4b61ec609d2541d3eb85
2cd5bd171b2a43a08cd0e4d9fe93de996aa15f385d572a9e2000660e66579331
POST /OneCollector/1.0/?cors=true&w=2&content-type=application/x-json-stream&apikey=541f81cf685f4bccb9e5395b0add4d41-2c1afbab-72ae-471a-a985-efea62ea9e83-7130 HTTP/1.1
Host: browser.events.data.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 779
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Cookie: MC1=GUID=0151dc2c430e47a7be0d911bb654017b&HASH=0151&LV=202404&V=4&LU=1714080424864; MS0=9f92af4dbc424de19ba0ec330ebf52b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
content-length: 44
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
collector-error: All events rejected due to parsing failure.
access-control-allow-headers: Collector-Error
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: Collector-Error
date: Thu, 25 Apr 2024 21:27:34 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/OneNote.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PIE1&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&haep=1
116 B URL word-edit.officeapps.live.com/we/OneNote.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PIE1&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
Hash bf90362096d3dbc85ba2824253c2f68d
2420dcde407737cc4c8856b115afbd5e46088483
6df862c666969d5c2da7dd4bf813e3c7c24a02d583c05efbff575f96debf7291
POST /we/OneNote.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PIE1&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&access_token=4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU&access_token_ttl=1714512422901&haep=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 860
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 116
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: 5fa9142b-d914-477f-839f-879ffb24a5fa
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011ADA
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF00011ADA
x-wacfrontend: DB5PEPF00011ADA
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: F8D852A3573A4069A306FFA666A431F1 Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:35Z
date: Thu, 25 Apr 2024 21:27:35 GMT
X-Firefox-Spdy: h2
word-edit.officeapps.live.com/we/WsaUpload.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PIE1&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&haep=1
122 B URL word-edit.officeapps.live.com/we/WsaUpload.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PIE1&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintA4:F5:A6:58:2F:B8:89:91:C4:EA:C9:F0:78:26:DE:CF:42:27:07:A4
ValidityWed, 24 Jan 2024 22:24:35 GMT - Sat, 18 Jan 2025 22:24:35 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /we/WsaUpload.ashx?usid=f356868f-5b59-4329-ba52-433e4a7425db&build=16.0.17622.41001&waccluster=PIE1&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&haep=1 HTTP/1.1
Host: word-edit.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Content-Type: text/plain;charset=UTF-8
Content-Length: 12959
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714080429972_0.15089826480700574; PIE1-ARRAffinity=a3f5bcf8c0b0ff982ed6da9419f30bcbc0797256beaab33ca6941359291ad558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 122
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
set-cookie:
x-correlationid: bf5ad3b1-4b80-4fc2-9c8d-5901a90aa5e3
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-officefe: DB5PEPF00011AAE
x-officeversion: 16.0.17622.41001
x-officecluster: PIE1
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
x-officefd: DB5PEPF00011AAE
x-cache: CONFIG_NOCACHE
x-msedge-flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control
x-msedge-features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control
x-msedge-ref: Ref A: 0C14340199C94F25A5D3D2C2D9CAB35C Ref B: SVG20EDGE0119 Ref C: 2024-04-25T21:27:35Z
date: Thu, 25 Apr 2024 21:27:35 GMT
X-Firefox-Spdy: h2
peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/abort?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D
0 B URL peu2-collabhubrtc.officeapps.live.com/rtc2/signalr/abort?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rtc2/signalr/abort?transport=webSockets&clientProtocol=2.1&qs=WOPIsrc%3dhttps%253A%252F%252Fwopi%252Eonedrive%252Ecom%252Fwopi%252Ffiles%252F11C35AAD353D0628%2521610%26access_token%3d4wIwKL%252DpSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo%252DsjNmRFq01zBjm3jyPjt3YQ81YeVrr%255FoPFV8XWbYtLdyOumTklyS6WMx%255Fv5d%252DIHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb%255FTaYVHpvU%26access_token_ttl%3d1714512421256&ClientId=%7bf356868f-5b59-4329-ba52-433e4a7425db%7d&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&mid=AM1PEPF00025C1B&ts=17140803680000000&eTag=%22f501ccf2-0000-1100-0000-662aca700000%22&waccluster=PEU2&rr=UlRDLUN1cnJlbnRQcm9vZktleT1xdlVoQVdzWFZGMHBjRkFCQ0x2MXY1RCUyZlRyMFowbEhRY0JsdElXSUVuMmMlM2QmUlRDLU9sZFByb29mS2V5PSZSVEMtUHJvb2ZLZXlUaW1lc3RhbXA9MTcxNDA4MDQyMjgzMjE2NzQmY2JkcGE9VHJ1ZSZjZHA9JmZnbGM9RVVSJnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQmZnRpZD05MTg4MDQwZC02YzY3LTRjNWItYjExMi0zNmEzMDRiNjZkYWQ&environment=2&UserApp=1&UserType=1&UserVersion=16.0.17622.41001&verifySessionExists=True&corrid=72b071c2-25d0-46f9-8393-bb0f6e6bd279&connectionToken=1WT_7xY3cBHdwmqbvmtkKw&connectionData=%5B%7B%22name%22%3A%22realtimechannelhub%22%7D%5D HTTP/1.1
Host: peu2-collabhubrtc.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: Microsoft-IIS/10.0
x-endpoint: PEU2
x-frontend: RtcNetCoreLB1
x-machinename: AM1PEPF00025C1B
x-userhostaddress: 91.90.42.0
x-correlationid: 72b071c2-25d0-46f9-8393-bb0f6e6bd279
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
x-officefe: AM1PEPF00025C1B
x-officeversion: 16.0.17623.41006
x-officecluster: PEU2
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-allow-credentials: true
access-control-expose-headers: Cache-Control, Connection, Content-Disposition, Content-Length, Content-Type, Date, EndTime, Expires, P3P, Pragma, ReceivedBytes, Request-Context, RtcErrorCode, RtcErrorVerbose, RtcSessionId, Sec-WebSocket-Accept, SentBytes, Server, Set-Cookie, Strict-Transport-Security, Upgrade, Vary, X-Content-Type-Options, X-CorrelationId, X-Download-Options, X-MSEdge-Features, X-MSEdge-Flight, X-MSEdge-Ref, X-OFFICEFD, X-OfficeCluster, X-OfficeFE, X-OfficeRtcProxy, X-OfficeVersion, X-Powered-By, X-UserSessionId, X-NewEnv
x-officertctarget: AM1PEPF00025C1B
rtcsessionid: b2929b69-d60a-4efe-be4b-35b8c35511ba
x-officertcproxy: AM1PEPF00025BD4
date: Thu, 25 Apr 2024 21:27:35 GMT
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PIE1&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&haep=1
0 B URL euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PIE1&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&haep=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PIE1&usid=f356868f-5b59-4329-ba52-433e4a7425db&WacUserType=WOPI&ckey=cWkh%2BtUuICyF98AR5QKNpwlMEquK%2Bpe5vvo0ORDNEUo%3D%3BWWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ%3D%2C638496772226758646&haep=1 HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 40201
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Cookie: E=P:kgzRcW5l3Ig=:gCGYKK35RpuVm1ZyoJlLwAbh06YYKpxHFwmSu/Or79U=:F; xid=0499416f-e473-499f-957f-5fbff3dedb41&&ODSP-ODWEB-ODCF&153; xidseq=2; wla42=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: 0b97de2b-4967-4274-adac-98fb5ca83978
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
x-buls-suppressedtags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:35 GMT
content-length: 0
X-Firefox-Spdy: h2
euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
200 OK 0 B URL POST HTTP/2 euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectofficeapps.live.com
FingerprintC0:4E:97:A0:80:8B:9A:24:56:09:7E:9E:B4:1F:75:71:AC:C6:2F:4E
ValidityMon, 22 Jan 2024 18:02:18 GMT - Thu, 16 Jan 2025 18:02:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wt/RemoteUls.ashx?build=16.0.17622.41001&waccluster=PSE1&usid=f356868f-5b59-4329-ba52-433e4a7425db HTTP/1.1
Host: euc-word-telemetry.officeapps.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://word-edit.officeapps.live.com/
X-xhr: 1
X-UserSessionId: f356868f-5b59-4329-ba52-433e4a7425db
X-OfficeVersion: 16.0.17622.41001
X-WacCluster: PIE1
X-WacFrontEnd: DB5PEPF00011AAD
X-IsCoauthSession: true
X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD
X-UserType: WOPI
haep: 6
X-Key: cWkh+tUuICyF98AR5QKNpwlMEquK+pe5vvo0ORDNEUo=;WWiirBD0L7T1Lc3DayW9GI1NO11X4QyNThHd7weYvEQ=,638496772226758646
X-AccessToken: 4wIwKL-pSiNn2Yw3SvCIho9Y69zybwLHPpcekxciDBIyLrpLD4KDMpnQ5RnCqvo-sjNmRFq01zBjm3jyPjt3YQ81YeVrr_oPFV8XWbYtLdyOumTklyS6WMx_v5d-IHaTvMyM8ikdD3BSC4pvKwo2Vxh3CHgprR4GyRVb_TaYVHpvU
X-AccessTokenTtl: 1714512421256
Content-Type: application/x-www-form-urlencoded
X-Requested-With: Fetch
Content-Length: 55274
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/plain
server: Microsoft-IIS/10.0
x-correlationid: dc0ff1b5-b7a4-46ae-bc7d-f3ecc788c1d3
x-usersessionid: f356868f-5b59-4329-ba52-433e4a7425db
strict-transport-security: max-age=31536000
x-officefe: DB5PEPF000160C9
x-officeversion: 16.0.17622.41001
x-officecluster: PGTEU1
p3p: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"
x-partitioning-enabled: true
access-control-allow-origin: https://word-edit.officeapps.live.com
access-control-expose-headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags
cross-origin-resource-policy: cross-origin
x-buls-suppressionetag: BB46AA47C239D54223A049EA42FF1E429533F0DD
nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=NoAFD&DestinationEndpoint=None&DC=PIE1&FileSource="}]}
x-content-type-options: nosniff
x-download-options: noopen
content-disposition: attachment
x-officefd: DB5PEPF000160C9
set-cookie:
date: Thu, 25 Apr 2024 21:27:35 GMT
content-length: 0
X-Firefox-Spdy: h2
store.office.com/gatedserviceextension.aspx?26e60ca_d6ccdcbc_1714080433653
404 Not Found 0 B URL GET HTTP/2 store.office.com/gatedserviceextension.aspx?26e60ca_d6ccdcbc_1714080433653
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectstore.office.com
FingerprintF8:80:E4:7F:AF:AF:76:D6:E1:1C:60:13:3B:11:BC:8D:1C:08:B2:FC
ValiditySun, 31 Mar 2024 22:15:37 GMT - Wed, 26 Mar 2025 22:15:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gatedserviceextension.aspx?26e60ca_d6ccdcbc_1714080433653 HTTP/1.1
Host: store.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 21:27:14 GMT
content-length: 0
server: Microsoft-HTTPAPI/2.0
content-security-policy-report-only: object-src 'none'; default-src 'self'; report-to https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; report-uri https://csp.microsoft.com/report/OfficeStore-Marketplace-PROD; script-src 'nonce-YILWcyTu2RxMsjrmbPo1SB2O6zxuilet5mguil5tExY=' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:
x-activitytraceid: fc6688ab6f4cd4df8be0b56ea3f84b26
x-correlationid: fc6688ab-6f4c-d4df-8be0-b56ea3f84b26
x-machine: OMEXNODES000006__omexexternal-prod-weu-001_6
x-buildversion: 24.4.10415.11006
x-servicefabric: ResourceNotFound
x-servicefabricrequestid: 95d13a5a-20ba-494e-85a0-afdb9b0be322
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
res-1.cdn.office.net/officeonline/we/s/h43C59E46EC077694_App_Scripts/wp5/addInLazy.min.js
200 OK 155 kB URL GET HTTP/3 res-1.cdn.office.net/officeonline/we/s/h43C59E46EC077694_App_Scripts/wp5/addInLazy.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 155 kB (155228 bytes)
Hash 7acb124083418c285e63b5835b377cea
54498a00bb9c864a94832e4e084fe043e704c382
43c59e46ec07769408a75e941d5b82fd8f3ce5b3cd8175c457110b8fa4c53172
GET /officeonline/we/s/h43C59E46EC077694_App_Scripts/wp5/addInLazy.min.js HTTP/1.1
Host: res-1.cdn.office.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://word-edit.officeapps.live.com
DNT: 1
Connection: keep-alive
Referer: https://word-edit.officeapps.live.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 29866
last-modified: Thu, 07 Mar 2024 01:38:30 GMT
x-ms-request-id: db02aba7-c01e-0003-064e-7b1ef3000000
content-encoding: br
cache-control: max-age=630720000
date: Thu, 25 Apr 2024 21:27:11 GMT
alt-svc: h3=":443"; ma=93600
akamai-request-bc: [a=95.101.10.204,b=129209814,c=g,n=NO__OSLO,o=20940]
quic-version: 0x00000001
report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=OSLO&ASN=20940&Country=NO&Region=&RequestIdentifier=0.cc0a655f.1714080431.7b395d6&TotalRTCDNTime=1&CompressionType=br&FileSize=29866"}],"include_subdomains ":true}
nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
server-timing: clientrtt; dur=1, clienttt; dur=, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
x-content-type-options: nosniff
timing-allow-origin: *
access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/javascript
x-cdn-provider: Akamai
augloop.office.com/
0 B IP
Requested by https://word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&rs=en-US&hid=tIWTIegdzEWi1FQBjqnD5Q.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F11C35AAD353D0628!610&wdo=2&wde=docx&sc=host%3D%26qt%3DDefault&wdp=3&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=f356868f-5b59-4329-ba52-433e4a7425db&usid=f356868f-5b59-4329-ba52-433e4a7425db&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&instantedit=1&wopicomplete=1&wdredirectionreason=Unified_SingleFlush
Certificate IssuerMicrosoft Corporation
Subjectaugloop.office.com
Fingerprint5F:49:D3:26:BB:2D:34:56:E6:16:10:E6:A0:D5:3A:BB:7F:7A:AE:91
ValidityThu, 15 Feb 2024 20:14:57 GMT - Sun, 09 Feb 2025 20:14:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: augloop.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://word-edit.officeapps.live.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AHzAeHpwGIS+Dz/qM1w2JA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
13.107.42.12
52.108.56.17
20.190.181.5
23.38.201.99
52.108.240.24
52.109.32.97
52.111.232.15
0.0.0.0
0.0.0.0