george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login
188.114.96.1301 Moved Permanently 0 B URL HTTP/1.1 george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 14:16:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 08 Feb 2023 15:16:27 GMT
Location: https://george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FwKeNH32h0XRC%2F9WsF1islKniUzSYVMIFBgrIWXJMag3q3MyeU3ox%2F%2Fq5g7pgfYXLhftODzUA%2B%2BM%2Bsq%2Bw9W4q7G5XWAXW3cvDItWnO6b0mMq%2Fja2gfoH%2BtbOy5EQx%2BmMuva45A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7964fbb5adeab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9252
Expires: Wed, 08 Feb 2023 16:50:39 GMT
Date: Wed, 08 Feb 2023 14:16:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12422
Expires: Wed, 08 Feb 2023 17:43:29 GMT
Date: Wed, 08 Feb 2023 14:16:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 13:36:40 GMT
content-type: application/json
age: 2388
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11599
Expires: Wed, 08 Feb 2023 17:29:47 GMT
Date: Wed, 08 Feb 2023 14:16:28 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 1c52dabc9b7c1a8f3f8ce08ac1d02ad6
7662bc87359916db9e78f22d2a9edc2955273261
c33bf2063fdc7d675337478243448d7c4ec7d7377b04ba0e48b3d36ba3f8573a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 14:16:28 GMT
Etag: "63e29fe4-117"
Server: ECS (amb/6BA5)
Content-Length: 279
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7NDkKdEQUcufTecqrY3DzPpyQScKQZ44qrlYcdNQWxruWhIOAq5BTs8t+6WmpIEoJ1VFutVelO8=
x-amz-request-id: RBEAT8CBAK90P8PD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 13:35:57 GMT
age: 2431
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 14:16:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login/
188.114.96.1301 Moved Permanently 0 B URL HTTP/1.1 george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login/
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login/ HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 14:16:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 08 Feb 2023 15:16:28 GMT
Location: https://george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4maKmJMIIliw8KEa%2Frs%2FziT6s5FYra2FwFg3XXjSyxfZbDvRxdkaYZiRpaz9B5jSVfKkwqQW%2BUHc79C0z0l5Rldgb01uvR1yF8HwVv8opqjMPP%2BU2NEP%2BDgyMW0Ln5ELA8DFIA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7964fbb818deb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 1c52dabc9b7c1a8f3f8ce08ac1d02ad6
7662bc87359916db9e78f22d2a9edc2955273261
c33bf2063fdc7d675337478243448d7c4ec7d7377b04ba0e48b3d36ba3f8573a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 14:16:28 GMT
Etag: "63e29fe4-117"
Last-Modified: Wed, 08 Feb 2023 14:16:28 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
www.bing.com/th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
13.107.21.200200 OK 74 kB URL HTTP/2 www.bing.com/th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Hash 4ae4572731632c549e32933fff134703
198ccd3f02f4d1fe0eb8a81911e1d5f2b4ccd46b
9af9fc03089bd0128065c3eebf398d446877ff4e19dcbeb2b9815f901d5d569a
GET /th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 73647
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 45C3D6F1DEA74C9188A501A8646B40C8 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:27 GMT
X-Firefox-Spdy: h2
r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
23.36.79.19200 OK 1.8 kB URL HTTP/2 r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
IP 23.36.79.19:0
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1766), with no line terminators
Hash 946b8d209533755165d5d0fe8d795f22
37bb4a7589a53831778e8162296bf9d72477144e
d9233990059b3f88531f67b1c4725ef4f28f46564ae7e511472f48e2a84f9f1d
GET /rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-length: 1766
content-type: image/svg+xml
content-md5: lGuNIJUzdVFl1dD+jXlfIg==
last-modified: Wed, 17 Aug 2022 05:49:33 GMT
etag: 0x8DA801442F5D6E9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f3801604-f01e-0013-1051-395339000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=161244
expires: Fri, 10 Feb 2023 11:03:52 GMT
date: Wed, 08 Feb 2023 14:16:28 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1675865788.125b985
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
23.36.79.19200 OK 5 B URL HTTP/2 r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
IP 23.36.79.19:0
ASN #20940 Akamai International B.V.
File type very short file (no magic)
Hash e5aa921deb86f8138026bb9c240820fb
966bbc10109a3d130ab5acbc2d202b1b26379afe
18b848a269a2d23ead68930fee1552542e8bd30c65f5d374d3ebea036c903381
GET /rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-length: 5
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: 5aqSHeuG+BOAJrucJAgg+w==
last-modified: Wed, 17 Aug 2022 06:39:21 GMT
etag: 0x8DA801B37C8EF2D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9c1b516c-a01e-00ea-11ba-f9501b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=162039
expires: Fri, 10 Feb 2023 11:17:07 GMT
date: Wed, 08 Feb 2023 14:16:28 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1675865788.125b98e
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
13.107.21.200200 OK 4.3 kB URL HTTP/2 www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 30967b1b52cb6df18a8af8fcc04f83c9
aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=15552000
content-length: 4286
content-type: image/x-icon
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-/7geeYa9AjTqJ6NSFUBbPHMm4kUYG2CkAMAPBU/HAOo='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 33361D9D74DD42BB981F64CC757B1F28 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:27 GMT
X-Firefox-Spdy: h2
www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
13.107.21.200200 OK 6.7 kB URL HTTP/2 www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (17343), with no line terminators
Hash 204bb375b5117b07884a137329e07bab
e87cb497b3b6e3c43a8abfa85ff1289e2d842308
030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1
GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: b9ef9644-001e-00e3-6204-3a15c8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: E2883413BC694A8F902BD57EB89E6815 Ref B: AM3EDGE0615 Ref C: 2023-02-07T07:40:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: F43EE33471A04A69B5C4F83275E4C839 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:27 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/lsp.aspx?
13.107.21.200204 No Content 0 B URL HTTP/2 www.bing.com/fd/ls/lsp.aspx?
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx? HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1D1F62352DDB44C99C781E6EE1709121 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:27 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:74,%22CT%22:77,%22IL%22:2}}&P=SERP&DA=DUBE01
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:74,%22CT%22:77,%22IL%22:2}}&P=SERP&DA=DUBE01
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:74,%22CT%22:77,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 14AC18FE061A43AF8062EEB7D788DB48 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:27 GMT
content-length: 0
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 14:14:52 GMT
age: 96
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6374
Expires: Wed, 08 Feb 2023 16:02:42 GMT
Date: Wed, 08 Feb 2023 14:16:28 GMT
Connection: keep-alive
www.bing.com/hp/api/v1/codex?format=json&
13.107.21.200200 OK 601 B URL HTTP/2 www.bing.com/hp/api/v1/codex?format=json&
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (2148), with no line terminators
Hash c658b4f79c7ac1605c5cb4019f3cd1c3
0db3159a4ea7e2b90a486d1b6f4f01ad70bc1272
6cf73a2ce08b13aba14a2b5576aee3f0a84d4c560a4e2145d5b3f43a4d548756
GET /hp/api/v1/codex?format=json& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 601
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D480E70762F84B08BCC4801FCC040F90 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/vs/ec/start.mp3
13.107.21.200206 Partial Content 32 kB URL HTTP/2 www.bing.com/vs/ec/start.mp3
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash f139839a0b2291e7e31f2589454e470f
754ac75088a1b1c586acbe6751e52a1835a4e428
a8b226c9281cae3e162006c9d509f5bfc649724876ca81a95a48e7f1fa9886ef
GET /vs/ec/start.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 31561
content-type: audio/mpeg
content-range: bytes 0-31560/31561
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-28pEwDovvjLPWtFUmeF2jmd4M/p77uqZHZaDyxU7260='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: F0D204EC6ABC4C32969F6863201E8146 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/vs/ec/stop.mp3
13.107.21.200206 Partial Content 35 kB URL HTTP/2 www.bing.com/vs/ec/stop.mp3
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 475028300cc8c44e7a4db97079bfca2b
09b8d7346324c456fcea95fa4826fc94686ce52c
45c8123c99a15aef1762667d2fbc2de1937449d20610023a21e47b313e3b7ee4
GET /vs/ec/stop.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 35386
content-type: audio/mpeg
content-range: bytes 0-35385/35386
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-CH6pKNDh2lOR196nQDUQsTfHkrR/tcNt+izzlF5T5A4='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: E130FF5CAAF54A9684822B6E3156CA59 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=9C0847173E904D6391BB2AC6D702F698&
13.107.21.200200 OK 16 kB URL HTTP/2 www.bing.com/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=9C0847173E904D6391BB2AC6D702F698&
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (28929), with CRLF, LF line terminators
Hash 218891b79c98101f46317a8aae73fe04
fb6f90f58c95b5cbc2ef9deb97b0f185d908d63b
f2f459871dda8d39a51475e1e5854aa3abbdac7ca07805f8f51d0a09630c4ec4
GET /images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=9C0847173E904D6391BB2AC6D702F698& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 16047
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; HttpOnly
SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; domain=.bing.com; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 669301DBC6164D5EA2FD8C327B16DF9D Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/hp/api/model
13.107.21.200200 OK 4.7 kB URL HTTP/2 www.bing.com/hp/api/model
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18752), with no line terminators
Hash 15c8394a6cee492c3a5f5b0390441f7f
cc7b68c96a3644b5aebd7e4c6415220cd8527556
c2c9d306d454db49ad020a8fc2e096f4fccce251497d28f65b146159de4133ac
GET /hp/api/model HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 4676
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; HttpOnly
ULC=; domain=.bing.com; expires=Tue, 07-Feb-2023 14:16:28 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; domain=.bing.com; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: ACA497C685134E56B4E8C077B557014E Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1243%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843605%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1243%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843605%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1243%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843605%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7EDD268E54824E40931A1B0060185D12 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1243%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843605%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1243%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843605%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1243%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843605%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C9C0676362A54878B283277975A86917 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1244%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843607%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1244%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843607%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1244%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843607%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 450D9B1CE77D4E17BCF5486759275D0B Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 372F536C695948F58E8BD15849F3B890 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login
188.114.96.1301 Moved Permanently 371 B URL HTTP/2 george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4fc8cca18fe07fd7ce6cf3444f3c6848
fae63ac2331e5878553f35c0e6e358957f64333b
35b11fc9edd58ccd46f97f85cf1a8a5b9250dff46f007bffc82841d693deaa42
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 08 Feb 2023 14:16:28 GMT
content-type: text/html; charset=iso-8859-1
location: http://george-login.buzz/sparkat/a1b2c3/e3eff93e28449b2b7938b69e6de489c4/login/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S3Mc7GOHIBrStRUZMZvEDI60qvG7Ma98CSIH4TCcmuHJ2uxDRbAfNijbNUYmRU9ZPZoGEEmQajdOvyrTrPybCxHWAwCoJNE6PeKczBptQomDtmqOYNHPJuAGdLDDGQQFK2UHBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7964fbb78965b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 199F7059487A4FFFAB90577E7CA62DCE Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1361%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843724%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0F4F00AB5DB8499DB234A9E89901DAED Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
13.107.21.200200 OK 2.9 kB URL HTTP/2 www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (13172), with no line terminators
Hash e4870e413e51c9d58b334b217941c5eb
9e5741a102d2c104169df2607c0a4ffd3b3fa152
136692d456989937dbfddfdf277ebdf01365763fa4786ea45145724fd5fedbe1
GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2898
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BD7F109DC850450395BEC08CEF55969F Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1429%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843792%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1429%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843792%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1429%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843792%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 83F8C360D37B4D26B6E4E4E38B400958 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1431%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843793%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1431%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843793%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9C0847173E904D6391BB2AC6D702F698%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1431%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843793%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 20CB402B8A3E48CAA98270E2484E6E0D Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1431%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843794%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1431%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843794%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1431%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843794%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7DDCAB53966B49FA9A1A9F1ED48891B6 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9C0847173E904D6391BB2AC6D702F698&IID=Bnp
13.107.21.200200 OK 8.9 kB URL HTTP/2 www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9C0847173E904D6391BB2AC6D702F698&IID=Bnp
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (13649)
Hash 1a7d34fad5dabc5057eca6742001c88f
73d54bba1932475c612eca0170dd1112f30c8798
393b2009116710dc84a631838bb72d06a7761e864f6283fef861d6b786129f35
GET /notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9C0847173E904D6391BB2AC6D702F698&IID=Bnp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 8947
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9CF290706CE24E94AB23F726C10460A1 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1514%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843877%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1514%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843877%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1514%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843877%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DA2EA23FFF4C4E2098F598EE53DE5587 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1511%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843874%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1511%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843874%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1511%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843874%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 29610447DB064120B64F6AC1081013C8 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png
13.107.21.200200 OK 8.2 kB URL HTTP/2 www.bing.com/rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 842 x 92, 8-bit colormap, non-interlaced\012- data
Hash 83c9af188daea75971437f3f67daa05f
b5fa68ab362fe36afb52342fcf0d0f548a13da76
96054ad091360d568c6d01633833ac8988981696e14b1ec230e96a2457884990
GET /rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8244
content-type: image/png
content-md5: g8mvGI2up1lxQ38/Z9qgXw==
last-modified: Tue, 24 Jan 2023 20:16:32 GMT
etag: 0x8DAFE47E28F035A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 57ca4fdd-d01e-00df-7502-3a3c0f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 2E8F1113FB324A478A520B9CAE2F280E Ref B: AM3EDGE0713 Ref C: 2023-02-07T07:53:50Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: C08062B4067248888E9FDBD10D97650E Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1554%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843918%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1554%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843918%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1554%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865843918%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 98534EECBBCB42A78AA232D5E8F7D72A Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1560%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675865843923%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1560%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675865843923%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1560%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675865843923%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 533F4405429347DB8A8473DC54E3F17D Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/rewardsapp/ncheader?ver=34018894&IID=SERP.5019&IG=9C0847173E904D6391BB2AC6D702F698
13.107.21.200200 OK 135 B URL HTTP/2 www.bing.com/rewardsapp/ncheader?ver=34018894&IID=SERP.5019&IG=9C0847173E904D6391BB2AC6D702F698
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with no line terminators
Hash 220681134a8094ce652f9fe8016037a5
a771c8027c266aded9f60f97965d2f9bf4f67af8
8af854ff412f28bd161367c8e5b1a5469e03363a5ad11c14634b6abc38388b9e
POST /rewardsapp/ncheader?ver=34018894&IID=SERP.5019&IG=9C0847173E904D6391BB2AC6D702F698 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 135
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 84F80F0232874ABB9281446FCC050E15 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/rewardsapp/reportActivity?IG=9C0847173E904D6391BB2AC6D702F698&IID=SERP.5028&&src=hp
13.107.21.200200 OK 611 B URL HTTP/2 www.bing.com/rewardsapp/reportActivity?IG=9C0847173E904D6391BB2AC6D702F698&IID=SERP.5028&&src=hp
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (1266)
Hash fccbccfa9fa16d8a366c66a48ee11333
6d76fa7c3f19d3b26709507c899c407437de8500
6846af9048d598c449b5ab1ecdc0fdcf9698f57c849cb0bf3ea31fbabc203cec
POST /rewardsapp/reportActivity?IG=9C0847173E904D6391BB2AC6D702F698&IID=SERP.5028&&src=hp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 611
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
_RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:16:29.4170063+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; domain=.bing.com; expires=Thu, 08-Feb-2024 14:16:29 GMT; path=/; secure; SameSite=None
_SS=SID=117FB76CE8F466760041A5DEE9016703&R=0&RB=0&GB=0&RG=200&RP=0; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 026FBB5E2FE04587B5A85F5CA78B40F8 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/ipv6test/test?FORM=MONITR
13.107.21.200200 OK 64 B URL HTTP/2 www.bing.com/ipv6test/test?FORM=MONITR
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 1bf1ff302246bc930c733c405f985472
de1fb6765de8bd2d9d98507705e24d51d2bd335c
c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
GET /ipv6test/test?FORM=MONITR HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703; ipv6=hit=1675869444081
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BF2FCA403BF64DACBA2E1DACDD14329D Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www2.bing.com/ipv6test/test
13.107.21.200200 OK 64 B URL HTTP/2 www2.bing.com/ipv6test/test
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 1bf1ff302246bc930c733c405f985472
de1fb6765de8bd2d9d98507705e24d51d2bd335c
c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
GET /ipv6test/test HTTP/1.1
Host: www2.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703; ipv6=hit=1675869444081
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0F404462D95B4D82B0DDBFA075B79AB3 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675865843954%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675865843954%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675865843965%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675865843965%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675865844012%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e3aebc84b74f0286383ecdc8f9b7ec%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675865844035%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e3aebc84b74f0286383ecdc8f9b7ec%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675865844035%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675865844126%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675865843954%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675865843954%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675865843965%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675865843965%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675865844012%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e3aebc84b74f0286383ecdc8f9b7ec%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675865844035%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e3aebc84b74f0286383ecdc8f9b7ec%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675865844035%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675865844126%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675865843954%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675865843954%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675865843965%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675865843965%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675865844012%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e3aebc84b74f0286383ecdc8f9b7ec%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675865844035%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e3aebc84b74f0286383ecdc8f9b7ec%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675865844035%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675865844126%2C%22Name%22%3A%22AnimationLoad%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462588&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:16:29.4170063+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675869444081
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8355784480FC4CB48EEE242EC887A811 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
23.36.79.18200 OK 4.6 kB URL HTTP/2 assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
IP 23.36.79.18:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13100)
Hash efeffb4eda40b16e38658170c235b5a3
e078e0d6863751d2a6701ca0330c9d12ca1df7f9
2da59d63f7bf73a152fb1d90b28ce1b92dac8e30c61b832cd085e6a7b4a452b9
GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1
Host: assets.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Origin: https://www.bing.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 4555
content-md5: 7+/7TtpAsW44ZYFwwjW1ow==
last-modified: Thu, 02 Feb 2023 23:27:13 GMT
etag: 0x8DB057503C0C11B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 681d5ce9-001e-0059-3f5e-37cb93000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Wed, 08 Feb 2023 14:16:29 GMT
akamai-request-bc: [a=23.36.79.14,b=81145319,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 23.36.79.14
akamai-request-id: 4d62de7
access-control-allow-credentials: true
access-control-allow-origin: https://www.bing.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1831%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865844195%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1831%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865844195%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9C0847173E904D6391BB2AC6D702F698&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1831%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675865844195%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462588&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:16:29.4170063+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; _SS=SID=117FB76CE8F466760041A5DEE9016703&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675869444081&t=4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D3669DCF0F3F49F69239620A09398729 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
content-length: 0
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1675865788&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
40.126.32.139302 Found 0 B URL HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1675865788&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
IP 40.126.32.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.srf?wa=wsignin1.0&rpsnv=11&ct=1675865788&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: Wed, 08 Feb 2023 14:15:29 GMT
Location: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: R3_BL2
x-ms-request-id: 0390d2a5-fa6a-4cfe-88e0-177ffcf65d58
PPServer: PPV: 30 H: BL02EPF000066BA V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=6651c0d692cf4a1ca1e99cf63471c252; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=264960<=1675865789&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DUsFiEqEtjOsNzeP30crEFrr!3liZB0*29kmm2IlONo3UYo6126fr3NVs8wOMGNVTrRXChxSu2Ghw4EoiH!7X4EqwJ*lvm8dOmVImS2yomUnIM!SOy*ZRTgbzK6K1JS*jxgtIZbKNBQrqGOPaeRaN5lHzLOcanxpggyGoK9bLUCYMZ1hQSL76uzv3PoucYDgVDKOnbF*9Lab3vayAm!JS63x0j00!WvHvMYChR1s0bHw7u!94vD3tUF41!P0ceFQz*Lskrej4uZ6xKea7zytYQSZRdWenWwFU1oyZqzdtDh*BIhq2Z0uzD935vlljG83Cw$$; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Wed, 08 Feb 2023 14:16:28 GMT
Content-Length: 0
www.bing.com/secure/Passport.aspx?popup=1&ssl=1
13.107.21.200200 OK 184 B URL HTTP/2 www.bing.com/secure/Passport.aspx?popup=1&ssl=1
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c692cf35c4d3ad00b5a49bdf3cd2363c
eb9c1fb3345378800f697c7c92519c5188dd9f5a
fa404c029e5e3109f687ed6e12018f34e43ecb2ef8991172af7bd9fc220562fe
GET /secure/Passport.aspx?popup=1&ssl=1 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462588&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:16:29.4170063+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _SS=SID=117FB76CE8F466760041A5DEE9016703&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675869444081&t=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 184
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
_EDGE_S=SID=3CF12B7B8A056D23173039C98BF06CBA; domain=.bing.com; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D1F215B6F2D44D28867E53C54E9D68CB Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=a4754da5-03c6-4039-bf03-62f3696fa76f&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%229C0847173E904D6391BB2AC6D702F698%22%7d
40.126.32.132200 OK 680 B URL HTTP/1.1 login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=a4754da5-03c6-4039-bf03-62f3696fa76f&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%229C0847173E904D6391BB2AC6D702F698%22%7d
IP 40.126.32.132:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (627), with CRLF line terminators
Hash a1cec2eb7a39ce6842fed6c8d6508ad3
b15f993db98722f77a334c72dee66989101de557
c4c81a50acc21f5bc66233477ac2a09ee175392bdab5938da8dd1fd929eeabcb
GET /common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=a4754da5-03c6-4039-bf03-62f3696fa76f&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%229C0847173E904D6391BB2AC6D702F698%22%7d HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: brcap=0; MSFPC=GUID=27491a5fca0c436896bdbf20a1588da0&HASH=2749&LV=202205&V=4&LU=1652883922743; ESTSSSOTILES=1; AADSSOTILES=1; buid=0.AU4AMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrTG-fJB7V5FpyHS-MZUt8cb9ur7ThoQDipX29W8wPqfd8QQqTOdma3fsIfvXEls5psgVdmydg459YydPiHg307ZVbchSNyKlyXai96eS2M2ggAA; fpc=AhlBJ7RlPnNGhXzWiUB5GEKCeMQLAQAAABWlddsOAAAA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: d493cd97-6104-4e43-9f02-45a9c8ee3601
x-ms-ests-server: 2.1.14526.6 - NEULR2 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.AU4AMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevrp9D-hAH5CKlmVQgfPVq3JHrzM0FnKnnTMu4l4Sg9g5aouQ05gW3bz-1LWomMIPOpzZMdcRtKwuSxMVmbRYitqTtR9rRd5_kv2jjKt6tK7jkgAA; expires=Fri, 10-Mar-2023 14:16:29 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AhlBJ7RlPnNGhXzWiUB5GEKCeMQLAgAAABWlddsOAAAA; expires=Fri, 10-Mar-2023 14:16:29 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevr4Jg4BVUFUB0Fxt8bKtEHKv8Zbk687P-zCjQ0oHnNJL77OojWhYtsv9wJEjI37vVYsh9K4xg3ow_y-G8JOMH2wn4GDdMqGkH57n0pwCrTnK2zhLRfsVEzAMj_28a1a5uDSKvRMpi7Ck335sCVPa_54J0vh1BaDhvpc581D-B7XvogAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Wed, 08 Feb 2023 14:16:29 GMT
Content-Length: 680
www.bing.com/orgid/idtoken/conditional
13.107.21.200200 OK 1 B URL HTTP/2 www.bing.com/orgid/idtoken/conditional
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4
POST /orgid/idtoken/conditional HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 708
Origin: https://login.microsoftonline.com
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462588&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:16:29.4170063+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3CF12B7B8A056D23173039C98BF06CBA; _SS=SID=117FB76CE8F466760041A5DEE9016703&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675869444081&t=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 1
content-type: text/html
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:29 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 383772AD08DA41B3993323C6BFB8D872 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:29Z
date: Wed, 08 Feb 2023 14:16:28 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/lsp.aspx
13.107.21.200204 No Content 0 B URL HTTP/2 www.bing.com/fd/ls/lsp.aspx
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/xml
Content-Length: 10741
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462588&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:16:29.4170063+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3CF12B7B8A056D23173039C98BF06CBA; _SS=SID=117FB76CE8F466760041A5DEE9016703&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675869444081&t=4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3C6FABB668624A7F808871C0BF0A65D1 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:30Z
date: Wed, 08 Feb 2023 14:16:29 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10705
Expires: Wed, 08 Feb 2023 17:14:55 GMT
Date: Wed, 08 Feb 2023 14:16:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10705
Expires: Wed, 08 Feb 2023 17:14:55 GMT
Date: Wed, 08 Feb 2023 14:16:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10705
Expires: Wed, 08 Feb 2023 17:14:55 GMT
Date: Wed, 08 Feb 2023 14:16:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbe359ce6fb136add75c8f3d3cc06330
e6584afcf39b6fad21eccbcce95c6645b8e1b3b8
29478bf1b8168dc457bb7d298448a78e1040bd3aa80cbf11cfa37475568590d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8170
x-amzn-requestid: d1ddb47f-3472-4015-8d55-72f435671f03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f5aSPHiroAMFpSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e070da-114975440d70915472cdba2f;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 03:15:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0w6JgtsKSRHLPJ3LyY6YUI8N7PS-gVlLuivQUq9jdyeYYm3STiJJIQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:13:34 GMT
age: 36176
etag: "e6584afcf39b6fad21eccbcce95c6645b8e1b3b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 003fc35e140a75a12b7795c3986426ec
da002b22e2a01f48a545b369d4403eabb17a10d5
bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 05:30:12 GMT
age: 31578
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5416f10c-2a0c-46e5-a76b-853a2be4c374.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5416f10c-2a0c-46e5-a76b-853a2be4c374.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe800d6af728cd622a6192ad5e7dda6a
3a301dd894fc428c7d1863c9d5eaf2652f5c2083
f4923c211ef24e933bbe73bd8d2033d6b6da4a9fa0c9d4699a1041a7bd8bf5a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5416f10c-2a0c-46e5-a76b-853a2be4c374.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12216
x-amzn-requestid: cc61a63b-35fe-4bfa-ad20-1db3f4165446
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7LFrCIAMFoYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-2b5e27c62218510b74ea0989;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: C1EXSLUCdc9GzSKxUzv9_uWK4ZTqggdr03uVW5SWuZwVVSn2wc4k7w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:44:01 GMT
age: 59549
etag: "3a301dd894fc428c7d1863c9d5eaf2652f5c2083"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8a3fa4f1ec82d501942f9db3de2cb7d
b91c2aea7f2fb26131c8929b254c5596a1bb25ff
9d246eeab8ba04c775a03fd960c8859934a0accb737e845e89aba40bc573fdaa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6342
x-amzn-requestid: b2b61a71-5326-4fc6-baba-7baad29cf7c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkbHfDIAMF5AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c482-5cc4028d01d05305637af317;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xc32O6lBfn7jYg9I3VlZ5FnR9YpJtU3DbYD_ozsf_-R_Ih1-2e1-CQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:10 GMT
age: 59660
etag: "b91c2aea7f2fb26131c8929b254c5596a1bb25ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcee4072-2c9e-4db4-b200-065a1ef67ace.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcee4072-2c9e-4db4-b200-065a1ef67ace.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f175de8eebe398f5de2829cd551b3f04
e6da63e9b03289bfded190d999a20da78232437c
b5d1ee4bd6186cbac1e4ac037766c9e453e166b0cfb2e08004cb11b8bb7daa88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcee4072-2c9e-4db4-b200-065a1ef67ace.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10202
x-amzn-requestid: 15e6c7ee-acef-4638-9a15-a01864ac74f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PEYFZOoAMFzEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c54f-3681217a71e5b9472b9cdb8a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: PyOVGtKFSYIU2don5C7_L_pTUxdP_VEAhLZUhtBWo2PZ4kvPqaTg9g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:13:47 GMT
etag: "e6da63e9b03289bfded190d999a20da78232437c"
content-type: image/jpeg
age: 57763
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5129898de057eb92808f18d120eb7a70
eb0a900843beac5c4ee46686b89b3e8b8d77f80f
7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7847
x-amzn-requestid: 60759e32-ac58-4dda-8ea3-fd80413c0deb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkkEpMoAMFnGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c483-61b8715a0da73f4526215649;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TCX7ZFhV73kN0UBshXeb0qdSkY-8qdeNN6EgioqOUmSAnraEhAohMQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:11 GMT
age: 59659
etag: "eb0a900843beac5c4ee46686b89b3e8b8d77f80f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/
13.107.21.200200 OK 0 B IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET / HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: SUID=M; MUID=02769A4BDE89636F28E588F9DF7C6261; MUIDB=02769A4BDE89636F28E588F9DF7C6261; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=938F45715FFA46CDBF7761BA6B1EF067&dmnchg=1; SRCHUSR=DOB=20230208&T=1675865620000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T14:13:41.6126400+00:00&rwred=0&wls=&lka=0&lkt=0&TH=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: _EDGE_S=SID=117FB76CE8F466760041A5DEE9016703; domain=.bing.com; path=/; HttpOnly
MUIDB=02769A4BDE89636F28E588F9DF7C6261; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; HttpOnly
SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811462420&HV=1675865684; domain=.bing.com; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; secure; SameSite=None
_SS=SID=117FB76CE8F466760041A5DEE9016703; domain=.bing.com; path=/; secure; SameSite=None
ULC=; domain=.bing.com; expires=Tue, 07-Feb-2023 14:16:28 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; domain=.bing.com; expires=Mon, 04-Mar-2024 14:16:28 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 147D4AA7645F411E9D9753B47740D569 Ref B: OSL30EDGE0217 Ref C: 2023-02-08T14:16:28Z
date: Wed, 08 Feb 2023 14:16:27 GMT
X-Firefox-Spdy: h2