GET /new/YWtoaWxzaW5naC5wYXRpbEB1YnMuY29t HTTP/1.1
Host: derakh.vxx8na.badfolk.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 08 Dec 2023 08:55:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 149
X-Powered-By: PHP/7.4.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=91489cf40b2538808250d06912e216f0; path=/
Upgrade: h2,h2c
Vary: Accept-Encoding
Content-Encoding: gzip

GET /aas.html HTTP/1.1
Host: pub-d89e3188311c46f49978b9555d4c9596.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://derakh.vxx8na.badfolk.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 08:55:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"8c5882e6702c337ea109a2b96793c460"
Last-Modified: Fri, 08 Dec 2023 05:33:50 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8323c99f4a1356a8-OSL
Content-Encoding: gzip

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 08 Dec 2023 08:55:07 GMT
age: 7225106
x-served-by: cache-lga21947-LGA, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 119, 142893
x-timer: S1702025708.812391,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/ellipsis_white_0ad43084800fd8b50a2576b5173746fe.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 207
content-type: image/png
content-md5: CtQwhIAP2LUKJXa1FzdG/g==
last-modified: Fri, 02 Nov 2018 20:25:24 GMT
etag: 0x8D6410151EBB082
x-cache: TCP_HIT
x-ms-request-id: e6429557-501e-0022-639b-29f044000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0NLByZQAAAAAE+SaD4MsTSJ+4LiDr4R8VQU1TMDRFREdFMTkxOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 069lyZQAAAAATM5miQKnxS5GRwL0oHibHU1ZHMjBFREdFMDYxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:55:07 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/microsoft_logo_ed9c9eb0dce17d752bedea6b5acda6d9.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 1057
content-type: image/png
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
last-modified: Fri, 02 Nov 2018 20:25:31 GMT
etag: 0x8D641015620C409
x-cache: TCP_HIT
x-ms-request-id: 0913678a-d01e-0016-1a09-297d5d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0NLByZQAAAAB+itJCws8PRYkJqNidBC0qQU1TMDRFREdFMTgxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 069lyZQAAAAAAWaAiHI65TKdVwzhP+bUtU1ZHMjBFREdFMDYxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:55:07 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Thu, 13 Feb 2020 02:05:12 GMT
etag: 0x8D7B0292911C366
x-cache: TCP_HIT
x-ms-request-id: ed96d3ae-e01e-000d-74ab-26e868000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kedtZQAAAACupD86JF1LQampgMI1tRAVQU1TMDRFREdFMTkxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 069lyZQAAAAC8bSM6d+kRQKkrA+xE4dJmU1ZHMjBFREdFMDYxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:55:07 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 240
content-type: image/png
content-md5: fMCW2mqi26P4H8wcgmIVfA==
last-modified: Fri, 02 Nov 2018 20:25:10 GMT
etag: 0x8D64101494D74DC
x-cache: TCP_HIT
x-ms-request-id: 92018a62-801e-000b-1e7e-251264000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0kedtZQAAAABCMc/HGzVeSJRo0ikq9R++QU1TMDRFREdFMTgxNgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 069lyZQAAAAA7Cgdm0wwNT7LV0sa/2kJ3U1ZHMjBFREdFMDYxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:55:07 GMT
X-Firefox-Spdy: h2

GET /estslogout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wWHZk3_dPcvlSWi1mmOmnTF-8dZpr_j4BCr2OvIYVqFsYXyHJ_tefsBgwJeLIYarhAMZGAZdQ6QI7GJZMrT0s-ftqe3cznvta1YUydxKLQySn2G778YahyLql-9PlUD&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0
vary: Accept-Encoding
set-cookie: OH.SID=03b14651-80e9-4db3-ae87-33f387e730b2; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Fri, 08 Dec 2023 16:55:07 GMT; path=/; secure; samesite=none; httponly
OH.FLID=1ddf81e5-1911-427a-9271-1d86132061cb; expires=Sun, 08 Dec 2024 08:55:07 GMT; path=/; secure; samesite=none; httponly
MUID=2EB47479FBBD652311C66798FA9164C1; path=/; secure; expires=Wed, 01-Jan-2025 08:55:07 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2168AFB393C84DF29C43F288F60585FD Ref B: SVG20EDGE0118 Ref C: 2023-12-08T08:55:07Z
date: Fri, 08 Dec 2023 08:55:07 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /estslogout?ru=/ HTTP/1.1
Host: www.office.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
location: https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wZ2DxjZ_JUdOxsnSF-hRHrfwAEkbIoMHWEL7OOqarVySCaBrxdaxFIUOuUXHZahDW7GKVSS_vxWjlSN2CpSBVOhPmBAN1SdQXKaehbzw8zfkazwPs6-hFmdlxWyRlaS&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0
vary: Accept-Encoding
set-cookie: OH.SID=4d0bb090-c801-4bcc-b85a-498344629d8d; path=/; secure; samesite=none; httponly
OH.DCAffinity=OH-noe; expires=Fri, 08 Dec 2023 16:55:07 GMT; path=/; secure; samesite=none; httponly
OH.FLID=116f344c-d9c1-496a-a77d-0d3f555d41e2; expires=Sun, 08 Dec 2024 08:55:07 GMT; path=/; secure; samesite=none; httponly
MUID=3AA4EA8382F86D6D1122F96283D46C1F; path=/; secure; expires=Wed, 01-Jan-2025 08:55:07 GMT; domain=office.com
request-context: appId=
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 10BB9898F7B3415CB09AFF73746D9B55 Ref B: SVG20EDGE0118 Ref C: 2023-12-08T08:55:07Z
date: Fri, 08 Dec 2023 08:55:07 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 0764e7f2-0d4d-4222-940f-3866f1d50d00
x-ms-ests-server: 2.1.16919.4 - WEULR1 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P8aYysEucpx4exzhY-xXZ04BLWv-gSRf-ZpF5S-utSvTqouTQkhbfxotzMETnGiy363lNjtDmF4dQ; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Thu, 08-Dec-2033 08:55:07 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Thu, 08-Dec-2033 08:55:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-gaIqLFsUiacyIWU8BSbgz8KByCdR2h0XXTrwvFLD5pHrlo-NQ9gKWyqvebQujyex_BVplZgEVFg; domain=.login.microsoftonline.com; expires=Thu, 07-Mar-2024 08:55:07 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_lffSAqBPhxXcR-MlGmgGp8pvtEXGECRbu4bhg4tZozkCLLrD0LxPvbnBz0nFb6ft5fcEyigmatw; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-Dt86hgJI04biTiVgSTvWKGX6UmlLgztLLEtINlnA03QZjf-tUaaORHzK4DuwdmoJjvnn89BgtLqSq2shQOSv0OqtpWQdZLeu56iRRjCqMJsgAA; expires=Sun, 07-Jan-2024 08:55:07 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=Ah-MfE_dmKBDmDvxyBFvbzw; expires=Sun, 07-Jan-2024 08:55:07 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-lMsQ-hkDFbHyxUPZHsLyPTk_ye6U5sw3q1j8FSHUYq_HuopyJywv-ffxDPeLA-jZTmBEla6BMBGg0JcuWtCVG3n2MPEBTDRvJot6F_NDLNa-m5NQMf8EFVAdVJ-yDrVYmTMfxixfMzDwd_j5u-YokwRDh_x7NWkxxsf4hUNL_1MgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Fri, 08 Dec 2023 08:55:07 GMT
Content-Length: 11164

GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 10 Nov 2020 17:17:51 GMT
accept-ranges: bytes
etag: "162f436b85b7d61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Fri, 08 Dec 2023 08:55:07 GMT
content-length: 871
X-Firefox-Spdy: h2

GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wWHZk3_dPcvlSWi1mmOmnTF-8dZpr_j4BCr2OvIYVqFsYXyHJ_tefsBgwJeLIYarhAMZGAZdQ6QI7GJZMrT0s-ftqe3cznvta1YUydxKLQySn2G778YahyLql-9PlUD&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P8aYysEucpx4exzhY-xXZ04BLWv-gSRf-ZpF5S-utSvTqouTQkhbfxotzMETnGiy363lNjtDmF4dQ; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-gaIqLFsUiacyIWU8BSbgz8KByCdR2h0XXTrwvFLD5pHrlo-NQ9gKWyqvebQujyex_BVplZgEVFg; ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_lffSAqBPhxXcR-MlGmgGp8pvtEXGECRbu4bhg4tZozkCLLrD0LxPvbnBz0nFb6ft5fcEyigmatw; ESTSAUTHLIGHT=+; buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-Dt86hgJI04biTiVgSTvWKGX6UmlLgztLLEtINlnA03QZjf-tUaaORHzK4DuwdmoJjvnn89BgtLqSq2shQOSv0OqtpWQdZLeu56iRRjCqMJsgAA; fpc=Ah-MfE_dmKBDmDvxyBFvbzw; esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-lMsQ-hkDFbHyxUPZHsLyPTk_ye6U5sw3q1j8FSHUYq_HuopyJywv-ffxDPeLA-jZTmBEla6BMBGg0JcuWtCVG3n2MPEBTDRvJot6F_NDLNa-m5NQMf8EFVAdVJ-yDrVYmTMfxixfMzDwd_j5u-YokwRDh_x7NWkxxsf4hUNL_1MgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: fe74627a-1e75-445e-a03f-383bb6453100
x-ms-ests-server: 2.1.16878.5 - SEC ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_nLn6LwWvq_4TlbN0oCpaxiXLfg_-2nRoWaEXxF8KBuIaLnbaTL6X67ocpycXnsjrbP05oOMPnXw; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Thu, 08-Dec-2033 08:55:08 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Thu, 08-Dec-2033 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P8gCbo3GImVfLjXQdRJaaK8u0APSL14QV3EccnCjqUG2QGIVgvSpc8wMXDrUg7lhBFfh9MB0iBNVQ; domain=.login.microsoftonline.com; expires=Thu, 07-Mar-2024 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_MLQ8ZZyFuSzIv-WUo4EPmmGQNKJzTR-ENt7uzlzFAn3TWoNIh20O_8tOCD01_6o4ZDqh1oERxXg; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-Ke5WhHeWsqAaT1OuiGG9J6X_Z2w72nTiPqVnqoVBY3H54aqX9VtcPJK0IIQDSt_xxD8-Ua_eJUKz0eZnG-L6CQoslES4eN7BLWEfNEFtdqogAA; expires=Sun, 07-Jan-2024 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=Ah-MfE_dmKBDmDvxyBFvbzw; expires=Sun, 07-Jan-2024 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Fri, 08 Dec 2023 08:55:08 GMT
Content-Length: 11305

GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 4797656
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 12e7e930-401e-009f-1a11-fe344e000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 11680500
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_chy_qb6g1qbjbxlng2ytiq2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 1759231
cache-control: public, max-age=31536000
content-md5: cclsNwaya3AD0ci2cGBnrw==
content-type: text/css
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DBE70343D336EF
last-modified: Fri, 17 Nov 2023 00:22:21 GMT
server: ECAcc (ska/F77A)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9f40a161-b01e-0098-79b4-19e540000000
x-ms-version: 2009-09-19
content-length: 20226
X-Firefox-Spdy: h2

GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16243262
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2

GET /?format=jsonp&callback=getPublic HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.1
Date: Fri, 08 Dec 2023 08:55:08 GMT
Content-Type: application/javascript
Content-Length: 33
Connection: keep-alive
Vary: Origin

GET /common/oauth2/logout?post_logout_redirect_uri=https%3A%2F%2Fwww.office.com%2F&state=7wZ2DxjZ_JUdOxsnSF-hRHrfwAEkbIoMHWEL7OOqarVySCaBrxdaxFIUOuUXHZahDW7GKVSS_vxWjlSN2CpSBVOhPmBAN1SdQXKaehbzw8zfkazwPs6-hFmdlxWyRlaS&x-client-SKU=ID_NET6_0&x-client-ver=6.34.0.0 HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
DNT: 1
Connection: keep-alive
Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P8aYysEucpx4exzhY-xXZ04BLWv-gSRf-ZpF5S-utSvTqouTQkhbfxotzMETnGiy363lNjtDmF4dQ; ESTSSSOTILES=1; AADSSOTILES=1; ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P-gaIqLFsUiacyIWU8BSbgz8KByCdR2h0XXTrwvFLD5pHrlo-NQ9gKWyqvebQujyex_BVplZgEVFg; ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_lffSAqBPhxXcR-MlGmgGp8pvtEXGECRbu4bhg4tZozkCLLrD0LxPvbnBz0nFb6ft5fcEyigmatw; ESTSAUTHLIGHT=+; buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-Dt86hgJI04biTiVgSTvWKGX6UmlLgztLLEtINlnA03QZjf-tUaaORHzK4DuwdmoJjvnn89BgtLqSq2shQOSv0OqtpWQdZLeu56iRRjCqMJsgAA; fpc=Ah-MfE_dmKBDmDvxyBFvbzw; esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-lMsQ-hkDFbHyxUPZHsLyPTk_ye6U5sw3q1j8FSHUYq_HuopyJywv-ffxDPeLA-jZTmBEla6BMBGg0JcuWtCVG3n2MPEBTDRvJot6F_NDLNa-m5NQMf8EFVAdVJ-yDrVYmTMfxixfMzDwd_j5u-YokwRDh_x7NWkxxsf4hUNL_1MgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 4ae3e4b7-3dc2-4b08-b594-852ab9339800
x-ms-ests-server: 2.1.16790.9 - NEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: SignInStateCookie=CAgABAAIAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_D1l2lJ-B_Jovw42q0MCy2p98Lq8Y4JxXrWVl5ketiFUDTXvtU_8DqJT8WV10DnexKqGLBdVhTZw; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSSSOTILES=1; expires=Thu, 08-Dec-2033 08:55:08 GMT; path=/; secure; SameSite=None
AADSSOTILES=1; expires=Thu, 08-Dec-2033 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHPERSISTENT=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P_FZKqbxcDxGgc6VTtUvKRJRHW0JVnC947HVFA7ZLv4URz8BzdLM5vuX55-BhyuMwNW1BkBTTKoWw; domain=.login.microsoftonline.com; expires=Thu, 07-Mar-2024 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
ESTSAUTH=AgABAAQAAAAmoFfGtYxvRrNriQdPKIZ-AgDs_wUA9P9Mn5KYjDmMx3jvGCpf7GqMp2dy_qgCNW9mAPINdqLLGbUU6HfBleVvQhyq9ch1WoWVYiAxeH8YVQ; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
ESTSAUTHLIGHT=+; path=/; secure; SameSite=None
buid=AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-SJ64FN6H8YU-EPBsXgU8r4N83RYs5fNYhBWFxhdNVXTQ0B4izDJtSvnost5NodzMwaDwZNJDQsZBCQ6V-qZeOcnqTc-xZbxyVMF3Wjq57_MgAA; expires=Sun, 07-Jan-2024 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=Ah-MfE_dmKBDmDvxyBFvbzw; expires=Sun, 07-Jan-2024 08:55:08 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Fri, 08 Dec 2023 08:55:07 GMT
Content-Length: 11310

GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-d89e3188311c46f49978b9555d4c9596.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
content-length: 17174
content-type: image/x-icon
content-md5: EuPayFgGHQiAI7K9SOL6lg==
last-modified: Fri, 02 Nov 2018 20:25:25 GMT
etag: 0x8D6410152A9D7E1
x-cache: TCP_HIT
x-ms-request-id: 7ed70d83-301e-005c-5835-29a059000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 04pxyZQAAAADqs0vNUy2mQo2/T03+TRNyQU1TMDRFREdFMTgxOQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 07NlyZQAAAACKYxu6/K5LRZ/IHo4MZO72U1ZHMjBFREdFMDYxMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 08 Dec 2023 08:55:08 GMT
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 7920179
cache-control: public, max-age=31536000
content-md5: znAMuOwBXwRYMjVZ8p4wCw==
content-type: text/css
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DBAF1F9F5D8653
last-modified: Wed, 06 Sep 2023 21:24:15 GMT
server: ECAcc (ska/F699)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: a859188b-b01e-00e0-2bab-e14f51000000
x-ms-version: 2009-09-19
content-length: 20208
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 11680500
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 4797656
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 12e7e930-401e-009f-1a11-fe344e000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 11680500
cache-control: public, max-age=31536000
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
content-type: application/x-javascript
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8D8DA1D9D23143A
last-modified: Fri, 26 Feb 2021 06:13:19 GMT
server: ECAcc (ska/F6C8)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 84b07241-d01e-0027-5a78-bfb818000000
x-ms-version: 2009-09-19
content-length: 40454
X-Firefox-Spdy: h2

GET /ests/2.1/content/cdnbundles/aad.login.min_vmmoyj1-4wcgq_4ljx53-q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 4797656
cache-control: public, max-age=31536000
content-md5: gkCQOa5xTExKUB2dlzn2rA==
content-type: application/x-javascript
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DBCB6954BD7E87
last-modified: Thu, 12 Oct 2023 21:22:25 GMT
server: ECAcc (ska/F76D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 12e7e930-401e-009f-1a11-fe344e000000
x-ms-version: 2009-09-19
content-length: 44809
X-Firefox-Spdy: h2

GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16243262
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2

GET /shared/1.0/content/images/microsoft_logo_ea19b2112f4dfd8e90b4505ef7dcb4f9.png HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 16243262
cache-control: public, max-age=31536000
content-md5: 7ZyesNzhfXUr7eprWs2m2Q==
content-type: image/png
date: Fri, 08 Dec 2023 08:55:08 GMT
etag: 0x8DB5C3F494E35F8
last-modified: Wed, 24 May 2023 10:11:48 GMT
server: ECAcc (ska/F791)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3c7794d4-a01e-005f-0ff8-95a2ec000000
x-ms-version: 2009-09-19
content-length: 1057
X-Firefox-Spdy: h2

GET /aas.html HTTP/1.1
Host: pub-d89e3188311c46f49978b9555d4c9596.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://derakh.vxx8na.badfolk.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 08:55:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"8c5882e6702c337ea109a2b96793c460"
Last-Modified: Fri, 08 Dec 2023 05:33:50 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8323c99f4a1356a8-OSL
Content-Encoding: gzip