GET /CrmAu/link.asp?mode=7&msg_seq=5580&mem_seq=83822&msg_id=2021122410531132&msg_mem_id=0&respStart=2021-12-24&respEnd=2021-12-31&tktype=LINK_03&link_id=2021122410531132_3&redirectURL=http://derakh.vxx8na.badfolk.org/new/YWtoaWxzaW5naC5wYXRpbEB1YnMuY29t HTTP/1.1
Host: crm.kia.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Object moved
Cache-Control: private
Content-Length: 444
Content-Type: text/html
Location: http://crm.kia.com.au/response/LinkManager.jsp?mode=7&msg_seq=5580&mem_seq=83822&msg_id=2021122410531132&msg_mem_id=0&respStart=2021-12-24&respEnd=2021-12-31&tktype=LINK_03&msgkey=84086&link_id=2021122410531132_3&redirectURL=http%3A%2F%2Fderakh%2Evxx8na%2Ebadfolk%2Eorg%2Fnew%2FYWtoaWxzaW5naC5wYXRpbEB1YnMuY29t
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSSSBCABB=IMGEHBBBBNFLGHLLECGFBKPC; path=/
X-Powered-By: ASP.NET
Date: Fri, 08 Dec 2023 08:48:26 GMT

GET /response/LinkManager.jsp?mode=7&msg_seq=5580&mem_seq=83822&msg_id=2021122410531132&msg_mem_id=0&respStart=2021-12-24&respEnd=2021-12-31&tktype=LINK_03&msgkey=84086&link_id=2021122410531132_3&redirectURL=http%3A%2F%2Fderakh%2Evxx8na%2Ebadfolk%2Eorg%2Fnew%2FYWtoaWxzaW5naC5wYXRpbEB1YnMuY29t HTTP/1.1
Host: crm.kia.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: ASPSESSIONIDSSSBCABB=IMGEHBBBBNFLGHLLECGFBKPC
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Pragma: no-cache
Content-Length: 216
Content-Type: text/html;charset=UTF-8
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Fri, 08 Dec 2023 08:48:27 GMT

GET /favicon.ico HTTP/1.1
Host: crm.kia.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://crm.kia.com.au/response/LinkManager.jsp?mode=7&msg_seq=5580&mem_seq=83822&msg_id=2021122410531132&msg_mem_id=0&respStart=2021-12-24&respEnd=2021-12-31&tktype=LINK_03&msgkey=84086&link_id=2021122410531132_3&redirectURL=http%3A%2F%2Fderakh%2Evxx8na%2Ebadfolk%2Eorg%2Fnew%2FYWtoaWxzaW5naC5wYXRpbEB1YnMuY29t
Cookie: ASPSESSIONIDSSSBCABB=IMGEHBBBBNFLGHLLECGFBKPC
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://crm.kia.com.au/crmAu/errStatus.htm
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 08 Dec 2023 08:48:27 GMT
Content-Length: 223

GET /new/YWtoaWxzaW5naC5wYXRpbEB1YnMuY29t HTTP/1.1
Host: derakh.vxx8na.badfolk.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://crm.kia.com.au/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 08:48:30 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 149
X-Powered-By: PHP/7.4.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=d6ceb4a4f848042e6b0ee72c077bf211; path=/
Upgrade: h2,h2c
Vary: Accept-Encoding
Content-Encoding: gzip

GET /aas.html HTTP/1.1
Host: pub-d89e3188311c46f49978b9555d4c9596.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://derakh.vxx8na.badfolk.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 08:48:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"8c5882e6702c337ea109a2b96793c460"
Last-Modified: Fri, 08 Dec 2023 05:33:50 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8323bfee6a745687-OSL
Content-Encoding: gzip

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 08 Dec 2023 08:48:30 GMT
age: 7224709
x-served-by: cache-lga21947-LGA, cache-bma1664-BMA
x-cache: HIT, HIT
x-cache-hits: 119, 54706
x-timer: S1702025311.958641,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

GET /estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=heHTdMfqvyzNRGKHd-4dOYgQH3vgmjtEgCoFESUonHTTs5-m5Gnqte3Vn1pPccYOXc-wiPH7HNRyI_UlsXZMK8TkIR5ICT8qIyXNwP2vOaf1MaH3WTfXR7QpKjIRUKZF&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0
vary: Accept-Encoding
set-cookie: OH.SID=2b15516e-5396-4b21-a281-d4d994638fae; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Fri, 08 Dec 2023 16:48:31 GMT; path=/; secure; samesite=none; httponly
OH.FLID=d46d8672-6079-4b88-90e4-32d27efefb8c; expires=Sun, 08 Dec 2024 08:48:31 GMT; path=/; secure; samesite=none; httponly
MUID=19CFDFF46F306766299CCC156E3E66C8; path=/; secure; expires=Wed, 01-Jan-2025 08:48:31 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0FC9511BAB334B168C33EAD65247B552 Ref B: SVG20EDGE0308 Ref C: 2023-12-08T08:48:31Z
date: Fri, 08 Dec 2023 08:48:30 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Thu, 13 Feb 2020 02:05:12 GMT
etag: 0x8D7B0292911C366
x-cache: TCP_HIT
x-ms-request-id: ed96d3ae-e01e-000d-74ab-26e868000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kedtZQAAAACupD86JF1LQampgMI1tRAVQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAACHbeGuNY/4SoyAQO1Ys95RU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:30 GMT
X-Firefox-Spdy: h2

GET /estslogout?ru=/ HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=UbQp9dISoHWqNK8njnC9NSHVVd30SHUqs1OZFJ80bbEUm7lED56LV65SB0hpv5md7geS2PZbNN8xjMVoZt12_WrSONiZkYXaWk2HrYdtWhzci6KxLgdrkSd8E60iJn5U&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0
vary: Accept-Encoding
set-cookie: OH.SID=4957e1ef-eb3f-4af3-a84c-629fdbabdce4; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Fri, 08 Dec 2023 16:48:31 GMT; path=/; secure; samesite=none; httponly
OH.FLID=14c7fcf9-e37b-4eb1-98b8-58ecef2f94a5; expires=Sun, 08 Dec 2024 08:48:31 GMT; path=/; secure; samesite=none; httponly
MUID=27D3A9DFF05D69211199BA3EF15368FC; path=/; secure; expires=Wed, 01-Jan-2025 08:48:31 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6EF08618A91E495AB50B4240311AECC8 Ref B: SVG20EDGE0308 Ref C: 2023-12-08T08:48:31Z
date: Fri, 08 Dec 2023 08:48:30 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 240
content-type: image/png
content-md5: fMCW2mqi26P4H8wcgmIVfA==
last-modified: Fri, 02 Nov 2018 20:25:10 GMT
etag: 0x8D64101494D74DC
x-cache: TCP_HIT
x-ms-request-id: 92018a62-801e-000b-1e7e-251264000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kedtZQAAAABCMc/HGzVeSJRo0ikq9R++QU1TMDRFREdFMTgxNgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAAB+zR/TYjC1S49foQW/Osg3U1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:30 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Fri, 02 Nov 2018 20:25:31 GMT
etag: 0x8D641015620C409
x-cache: TCP_HIT
x-ms-request-id: 0913678a-d01e-0016-1a09-297d5d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0NLByZQAAAAB+itJCws8PRYkJqNidBC0qQU1TMDRFREdFMTgxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAADB/6dhrW2pRapKXTtj3KOkU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:30 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 207
content-type: image/png
content-md5: CtQwhIAP2LUKJXa1FzdG/g==
last-modified: Fri, 02 Nov 2018 20:25:24 GMT
etag: 0x8D6410151EBB082
x-cache: TCP_HIT
x-ms-request-id: e6429557-501e-0022-639b-29f044000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0NLByZQAAAAAE+SaD4MsTSJ+4LiDr4R8VQU1TMDRFREdFMTkxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABbjZZjx+GLQ6P4I3lYrXEgU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:30 GMT
X-Firefox-Spdy: h2

GET /logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 4381ec4c-aedf-4acf-b9cf-8a9747764300
x-ms-ests-server: 2.1.16919.4 - FRC ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9zXLn7CSe-g15F5t2a5ehOLi3b_cRPEnALUrKZsP6MhNfQsTexOjFDQ0vobtstH_surDYqClCarA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Thu, 08-Dec-2033 08:48:31 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Thu, 08-Dec-2033 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_IR2KXa8a58lQNO_rW5gZK7guSp8qB8L0gpLfzA20LzscM-Q3vpAMGEQ6kbT2D_SO5eXK7XCzf3Q; domain=.login.microsoftonline.com; expires=Thu, 07-Mar-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9CeA30nYaRltOxgZpJ_8kqdT2Y9E5S18jYqnAxwe3_fVFy-6vkoS9626r7tRXcA5Mf17lCMk3vBg; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-f81TLAS9wgupOvbJAAsH0MS0uxFjkKc4A5Iy90j6Vze7FrTYM6_WfO8ek1xqhx3zPfBwXLGUH6swaabDYxa93OEBrwGSodlD6KAqUZ6FTGQgAA; expires=Sun, 07-Jan-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=Aq3TlcUPzv9Lgqvu24X1-Eo; expires=Sun, 07-Jan-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-IUJtScsSDPcwpMLC-zKbWfg8BVEzQxFJLCFQySGLVhN6NTXa8-f8tYxJo1HwbWj0n86ARArDZEZBaGelXGhaWDWa4l01ENbSZATzDJ3izZjXJYzlxZiM9Cv5JMRo9wZ0bsqJvjrRJRAogBTgze9dExJiOmvPH_vX0WSA9GcdgXIgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Fri, 08 Dec 2023 08:48:30 GMT
Content-Length: 11159

GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 10 Nov 2020 17:17:51 GMT
accept-ranges: bytes
etag: "162f436b85b7d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Fri, 08 Dec 2023 08:48:30 GMT
content-length: 871
X-Firefox-Spdy: h2

GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=heHTdMfqvyzNRGKHd-4dOYgQH3vgmjtEgCoFESUonHTTs5-m5Gnqte3Vn1pPccYOXc-wiPH7HNRyI_UlsXZMK8TkIR5ICT8qIyXNwP2vOaf1MaH3WTfXR7QpKjIRUKZF&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9zXLn7CSe-g15F5t2a5ehOLi3b_cRPEnALUrKZsP6MhNfQsTexOjFDQ0vobtstH_surDYqClCarA; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_IR2KXa8a58lQNO_rW5gZK7guSp8qB8L0gpLfzA20LzscM-Q3vpAMGEQ6kbT2D_SO5eXK7XCzf3Q; ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9CeA30nYaRltOxgZpJ_8kqdT2Y9E5S18jYqnAxwe3_fVFy-6vkoS9626r7tRXcA5Mf17lCMk3vBg; ESTSAUTHLIGHT=+; buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-f81TLAS9wgupOvbJAAsH0MS0uxFjkKc4A5Iy90j6Vze7FrTYM6_WfO8ek1xqhx3zPfBwXLGUH6swaabDYxa93OEBrwGSodlD6KAqUZ6FTGQgAA; fpc=Aq3TlcUPzv9Lgqvu24X1-Eo; esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-IUJtScsSDPcwpMLC-zKbWfg8BVEzQxFJLCFQySGLVhN6NTXa8-f8tYxJo1HwbWj0n86ARArDZEZBaGelXGhaWDWa4l01ENbSZATzDJ3izZjXJYzlxZiM9Cv5JMRo9wZ0bsqJvjrRJRAogBTgze9dExJiOmvPH_vX0WSA9GcdgXIgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: a7366bd0-31ec-4ec5-9f9e-d5c41b672a00
x-ms-ests-server: 2.1.16878.5 - NEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_Smw9Io5xdUZVw39Ioc2Nv81V4LEwIIdAPmCW36vCSYjzYfmocDv2Cw67h8-9Si7Rd8rOlOuzCEg; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Thu, 08-Dec-2033 08:48:31 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Thu, 08-Dec-2033 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_l0P5tXGETw0vXxRGLxEApxeV-R9oWJu8BLsvJrrm8tMXapH2CkCzJ2pWItXu_9KLMlKuwTMIGBA; domain=.login.microsoftonline.com; expires=Thu, 07-Mar-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-fckLk61ZLQPHeWQ-07PA0aDWnVOPX4JCBWtFdkRsd6SQoCXiMac7uxGVhqXFkE8pM3zu8G61ZSA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-x6bnvU4yozdXOXXb4VPOtvWHhLslfYjk61Q3RDeOEbCoD4oATyNEHOsnzlQhqM1ClPoOVpTukSC6WA4LP5dw68HiKJtwBgjDoIy44YeG2WwgAA; expires=Sun, 07-Jan-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=Aq3TlcUPzv9Lgqvu24X1-Eo; expires=Sun, 07-Jan-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Fri, 08 Dec 2023 08:48:30 GMT
Content-Length: 11304

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 20226
content-type: text/css
content-encoding: gzip
content-md5: cclsNwaya3AD0ci2cGBnrw==
last-modified: Fri, 17 Nov 2023 00:24:07 GMT
etag: 0x8DBE703830C8407
x-cache: TCP_HIT
x-ms-request-id: 2a4863a5-f01e-0050-02d8-285440000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0F5lyZQAAAAD2p1cl6S9MTaetY/glkE2NQU1TMDRFREdFMTgwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAAD2iRU9gs4CQbY4lK6UyRxjU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 40454
content-type: application/x-javascript
content-encoding: gzip
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
last-modified: Fri, 26 Feb 2021 06:12:05 GMT
etag: 0x8D8DA1D70FBDD97
x-cache: TCP_HIT
x-ms-request-id: 11c0ec53-801e-000b-2ce7-281264000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0XfFxZQAAAAB65HopnG3xRooFyS7YaZakQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAADD2qwt5qbUS54oilc9r3VUU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 44809
content-type: application/x-javascript
content-encoding: gzip
content-md5: gkCQOa5xTExKUB2dlzn2rA==
last-modified: Thu, 12 Oct 2023 21:23:59 GMT
etag: 0x8DBCB698CEF3B25
x-cache: TCP_HIT
x-ms-request-id: 7a11d444-f01e-0028-2510-24fe51000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kS5tZQAAAAA12l9WOtjLS4LIdVftErHVQU1TMDRFREdFMTgxNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABd85oWQeWGQJQxAxb6RVrhU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F48FD7E08
x-cache: TCP_HIT
x-ms-request-id: 182c2558-001e-003f-22de-249f7d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0MWVvZQAAAAAkkqpQzfpITL0Xzx7v0fWOQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAAADYGyqnxObTr+0yb1d5wLBU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=UbQp9dISoHWqNK8njnC9NSHVVd30SHUqs1OZFJ80bbEUm7lED56LV65SB0hpv5md7geS2PZbNN8xjMVoZt12_WrSONiZkYXaWk2HrYdtWhzci6KxLgdrkSd8E60iJn5U&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9zXLn7CSe-g15F5t2a5ehOLi3b_cRPEnALUrKZsP6MhNfQsTexOjFDQ0vobtstH_surDYqClCarA; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_IR2KXa8a58lQNO_rW5gZK7guSp8qB8L0gpLfzA20LzscM-Q3vpAMGEQ6kbT2D_SO5eXK7XCzf3Q; ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9CeA30nYaRltOxgZpJ_8kqdT2Y9E5S18jYqnAxwe3_fVFy-6vkoS9626r7tRXcA5Mf17lCMk3vBg; ESTSAUTHLIGHT=+; buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-f81TLAS9wgupOvbJAAsH0MS0uxFjkKc4A5Iy90j6Vze7FrTYM6_WfO8ek1xqhx3zPfBwXLGUH6swaabDYxa93OEBrwGSodlD6KAqUZ6FTGQgAA; fpc=Aq3TlcUPzv9Lgqvu24X1-Eo; esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-IUJtScsSDPcwpMLC-zKbWfg8BVEzQxFJLCFQySGLVhN6NTXa8-f8tYxJo1HwbWj0n86ARArDZEZBaGelXGhaWDWa4l01ENbSZATzDJ3izZjXJYzlxZiM9Cv5JMRo9wZ0bsqJvjrRJRAogBTgze9dExJiOmvPH_vX0WSA9GcdgXIgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: c3f3eddc-b4fb-4498-ba4f-fa8040d30a00
x-ms-ests-server: 2.1.16919.4 - WEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9OdHzQzHVhtvoudUZs2ZzySsr9clFSO-pPpf63q2m1wLVjFRAM0LLhbnBE6LEGpr3OaF_TQKpNKw; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Thu, 08-Dec-2033 08:48:31 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Thu, 08-Dec-2033 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-Zs-ZtaYsiQoTFwt1UFbtqELt9hj2sw6vxMm9UfWbwqS0eyICcRbS_EUgT0QTUIet_shsfv24tdQ; domain=.login.microsoftonline.com; expires=Thu, 07-Mar-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-LXuAt7qo57fsqfVLkj0WGXCWckkxDPmjjw6XU3tLAqQgWbkAdUfzH8D89j96XI8_NK6CMcGTO6Q; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-GekrgQFsqHaxF15EZ09m5vVNU5vYJyKTfHaVnKS4MOW2kl3KG8WOcJEMQxJpfdTdDrH8q_BYx-rt2eE1bDGWtdbxtfHnHD5O3urPWixdW5IgAA; expires=Sun, 07-Jan-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=Aq3TlcUPzv9Lgqvu24X1-Eo; expires=Sun, 07-Jan-2024 08:48:31 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Fri, 08 Dec 2023 08:48:31 GMT
Content-Length: 11309

GET /?format=jsonp&callback=getPublic HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.1
Date: Fri, 08 Dec 2023 08:48:31 GMT
Content-Type: application/javascript
Content-Length: 33
Connection: keep-alive
Vary: Origin

GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 17174
content-type: image/x-icon
content-md5: EuPayFgGHQiAI7K9SOL6lg==
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-cache: TCP_HIT
x-ms-request-id: 7ed70d83-301e-005c-5835-29a059000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 04pxyZQAAAADqs0vNUy2mQo2/T03+TRNyQU1TMDRFREdFMTgxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABeC7VPz6HtSohoF4+s4E+sU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 40454
content-type: application/x-javascript
content-encoding: gzip
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
last-modified: Fri, 26 Feb 2021 06:12:05 GMT
etag: 0x8D8DA1D70FBDD97
x-cache: TCP_HIT
x-ms-request-id: 11c0ec53-801e-000b-2ce7-281264000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0XfFxZQAAAAB65HopnG3xRooFyS7YaZakQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABMgbVVfU6xSKkzX6NIxwU3U1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 20208
content-type: text/css
content-encoding: gzip
content-md5: znAMuOwBXwRYMjVZ8p4wCw==
last-modified: Wed, 06 Sep 2023 21:22:45 GMT
etag: 0x8DBAF1F69A21EAA
x-cache: TCP_HIT
x-ms-request-id: 2d93e4bd-701e-0030-28fb-241662000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0sPJuZQAAAAAd+fcF/T0zTYti/Jb29laKQU1TMDRFREdFMTkxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAAAMYCEcSgeeSYUdM+ItbukAU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 44809
content-type: application/x-javascript
content-encoding: gzip
content-md5: gkCQOa5xTExKUB2dlzn2rA==
last-modified: Thu, 12 Oct 2023 21:23:59 GMT
etag: 0x8DBCB698CEF3B25
x-cache: TCP_HIT
x-ms-request-id: 7a11d444-f01e-0028-2510-24fe51000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kS5tZQAAAAA12l9WOtjLS4LIdVftErHVQU1TMDRFREdFMTgxNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABLBWPMFtraTbunzNGYIa0RU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 20226
content-type: text/css
content-encoding: gzip
content-md5: cclsNwaya3AD0ci2cGBnrw==
last-modified: Fri, 17 Nov 2023 00:24:07 GMT
etag: 0x8DBE703830C8407
x-cache: TCP_HIT
x-ms-request-id: 2a4863a5-f01e-0050-02d8-285440000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0F5lyZQAAAAD2p1cl6S9MTaetY/glkE2NQU1TMDRFREdFMTgwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAAAgV6UY19jLQLZUXdJlQKtlU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 40454
content-type: application/x-javascript
content-encoding: gzip
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
last-modified: Fri, 26 Feb 2021 06:12:05 GMT
etag: 0x8D8DA1D70FBDD97
x-cache: TCP_HIT
x-ms-request-id: 11c0ec53-801e-000b-2ce7-281264000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0XfFxZQAAAAB65HopnG3xRooFyS7YaZakQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABuZShIZWELQ63BCZBROFQWU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 44809
content-type: application/x-javascript
content-encoding: gzip
content-md5: gkCQOa5xTExKUB2dlzn2rA==
last-modified: Thu, 12 Oct 2023 21:23:59 GMT
etag: 0x8DBCB698CEF3B25
x-cache: TCP_HIT
x-ms-request-id: 7a11d444-f01e-0028-2510-24fe51000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kS5tZQAAAAA12l9WOtjLS4LIdVftErHVQU1TMDRFREdFMTgxNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABKnCZ634ISQr54Gd5DDalpU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F48FD7E08
x-cache: TCP_HIT
x-ms-request-id: 182c2558-001e-003f-22de-249f7d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0MWVvZQAAAAAkkqpQzfpITL0Xzx7v0fWOQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABWsKK8sZ99QLJUQGzzzEnCU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Wed, 24 May 2023 10:11:48 GMT
etag: 0x8DB5C3F48FD7E08
x-cache: TCP_HIT
x-ms-request-id: 182c2558-001e-003f-22de-249f7d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0MWVvZQAAAAAkkqpQzfpITL0Xzx7v0fWOQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0X9hyZQAAAABF3GVbhDRjRY09Z7KgaugPU1ZHMjBFREdFMDYxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:48:31 GMT
X-Firefox-Spdy: h2

GET /aas.html HTTP/1.1
Host: pub-d89e3188311c46f49978b9555d4c9596.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://derakh.vxx8na.badfolk.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 08:48:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"8c5882e6702c337ea109a2b96793c460"
Last-Modified: Fri, 08 Dec 2023 05:33:50 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8323bfee6a745687-OSL
Content-Encoding: gzip