GET free.1260628466.workers.dev/th?id=OHR.GwaliorFortMP_ROW9892795132_1920x1080.webp&qlt=50
200 OK 237 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.GwaliorFortMP_ROW9892795132_1920x1080.webp&qlt=50
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 237 kB (237294 bytes)
Hash 7a809c73a62df450bcf7cf6b79118745
3a8887c30c546c7d21bb9a7c3f6335f346231965
933ff827df7dccad89a34054e4f5015c9ec60a20132612ac3d2192e4d13e5029
GET /th?id=OHR.GwaliorFortMP_ROW9892795132_1920x1080.webp&qlt=50 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:26 GMT
content-type: image/webp
content-length: 237294
cf-ray: 82f5884d79cf7128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5c0a655f.1701540686.5388823f
vary: Accept-Encoding
server: cloudflare
GET r.bing.com/rs/79/fR/jnc,nj/tlifxqsNyCzxIJnRwtQKuZToQQw.js?or=w
200 OK 5 B URL GET HTTP/2 r.bing.com/rs/79/fR/jnc,nj/tlifxqsNyCzxIJnRwtQKuZToQQw.js?or=w
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /rs/79/fR/jnc,nj/tlifxqsNyCzxIJnRwtQKuZToQQw.js?or=w HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 5
content-type: application/x-javascript; charset=utf-8
server: Kestrel
access-control-allow-headers: *
access-control-allow-origin: *
content-encoding: br
last-modified: Wed, 29 Nov 2023 20:51:35 GMT
x-eventid: 656827754a154379926fe35858a5bccb
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-as-instrumentationoptions: AppServerLoggingMaster=1
x-as-machinename: DUBEEAP0000E04B
x-as-suppresssetcookie: 1
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-iEbetfHzaE+9sCigYCdePC4aFtu56HV+OSd2J5sCnsE='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}, {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
cache-control: public, max-age=216182
expires: Tue, 05 Dec 2023 06:14:29 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.1069fc3
timing-allow-origin: *
X-Firefox-Spdy: h2
GET r.bing.com/rp/FZ5O-ErYUzrzxeNohlwlhLYlY_Y.gz.js
200 OK 2.0 kB URL GET HTTP/2 r.bing.com/rp/FZ5O-ErYUzrzxeNohlwlhLYlY_Y.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (6111), with no line terminators
Hash f8c6d0a85334bd6da4bc9b7f185f0755
db600d69f470d17949f69e57468dfc429224bf28
842532a1e1d67ca1efdb72b123bfce418dd286e2fec749cbb1373e688378734c
GET /rp/FZ5O-ErYUzrzxeNohlwlhLYlY_Y.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 2035
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: 83/hyyOOoUulUeDYyIZ49g==
last-modified: Tue, 07 Nov 2023 23:53:19 GMT
etag: 0x8DBDFECB7F2F164
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 76625218-c01e-0032-2ad9-231a51000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=273213
expires: Tue, 05 Dec 2023 22:05:00 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a009
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
GET r.bing.com/rp/ICf9X-WMafiZOnS_3M9RpM8994E.gz.js
200 OK 21 B URL GET HTTP/2 r.bing.com/rp/ICf9X-WMafiZOnS_3M9RpM8994E.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /rp/ICf9X-WMafiZOnS_3M9RpM8994E.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 21
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: AtUQRHwMLfUWfUcUVx5RxQ==
last-modified: Mon, 01 May 2023 19:03:03 GMT
etag: 0x8DB4A76B0A213F0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 712bc159-d01e-00c3-5d5e-eaf90b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=179880
expires: Mon, 04 Dec 2023 20:09:27 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.1069ff4
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
GET bing.com/th?id=OBFB.A4BA5FAAD27A6328F8FF1BBC72391AE2&pid=Fb
200 OK 409 B URL GET HTTP/2 bing.com/th?id=OBFB.A4BA5FAAD27A6328F8FF1BBC72391AE2&pid=Fb
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 80969a6d700e813ef741d172674feadd
361263c136cd857ba53fd7743c971bb7527bf12e
0775687711d232f4c891f22cbc4040464e160c09044deaa12c98bfbab9c79cd6
GET /th?id=OBFB.A4BA5FAAD27A6328F8FF1BBC72391AE2&pid=Fb HTTP/1.1
Host: bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=2592000
content-length: 409
content-type: image/png
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 42F908114F324B3DB93C901AC8A37078 Ref B: OSL30EDGE0515 Ref C: 2023-12-02T18:11:27Z
date: Sat, 02 Dec 2023 18:11:26 GMT
X-Firefox-Spdy: h2
GET free.1260628466.workers.dev/sa/simg/favicon-trans-bg-blue-mg-png.png
200 OK 308 B URL GET HTTP/3 free.1260628466.workers.dev/sa/simg/favicon-trans-bg-blue-mg-png.png
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash bda49766e2e7e028ef09d0e34988ecdf
73fed2c00c224aa0df89397ec41488d63975c882
5cbda906c7db6d50c7e200d73841a7bb7404bcff1b3c9121aa5bc79dbc608b9a
GET /sa/simg/favicon-trans-bg-blue-mg-png.png HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:27 GMT
content-type: image/png
content-length: 308
cf-ray: 82f5884fec127128-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: public, max-age=15552000
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.7c0a655f.1701540687.2a0bde9b
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRa2E8uivQncWs2C6UlQupLwtPHh3Mnq5%2FKioaBYmwjCk7H6yKz9mE2GAh40lG9xjpi0jVQ%2B2TU7ilF%2FxRHtuolOikXJY8TgBM3gcaLNxM7hNQH1YkUU%2BqFxLL3OHKIw3TR2tdhRByXjsr4TJE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
GET r.bing.com/rp/bo5EFnUmGfRPJAKh5rI6sgFVIsE.gz.css
200 OK 129 kB URL GET HTTP/3 r.bing.com/rp/bo5EFnUmGfRPJAKh5rI6sgFVIsE.gz.css
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129196 bytes)
Hash 16d653246cc7daa6f7cf4ff4bbb4cc37
98cd4bfeceb5a055801a16dcf6365b55b498571e
fe7a73f7f713f45e415253a77b2e5fcbadfdb5eb15fce1e6479914bb38220d33
GET /rp/bo5EFnUmGfRPJAKh5rI6sgFVIsE.gz.css HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 129196
content-type: text/css; charset=utf-8
content-encoding: gzip
content-md5: UdguMNIzUwL9IWf7EnfPyQ==
last-modified: Fri, 01 Dec 2023 05:29:40 GMT
etag: 0x8DBF22E847F2360
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3aabea00-c01e-00c6-325e-24d1a7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=330589
expires: Wed, 06 Dec 2023 14:01:16 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a44a
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.1260628466.workers.dev/rp/traKMhqhQFnIaVeNjRVKzlq78ys.gz.js
200 OK 6.6 kB URL GET HTTP/3 free.1260628466.workers.dev/rp/traKMhqhQFnIaVeNjRVKzlq78ys.gz.js
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type ASCII text, with very long lines (17402), with no line terminators
Hash f4be1a0bba957f4296aceca775b33ca5
d254d5d56c3a04b0553f4af18fecfeeb9927c8db
48d780a6e405cc2b1fba774f15748a66ec54a0e3e7a86ea429330833feb5cd06
GET /rp/traKMhqhQFnIaVeNjRVKzlq78ys.gz.js HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:27 GMT
content-type: text/javascript; charset=utf-8
content-length: 6621
cf-ray: 82f588509cb77128-OSL
cf-cache-status: MISS
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, no-transform, max-age=431562
content-encoding: gzip
etag: 0x8DB8815B45DE88B
expires: Mon, 04 Dec 2023 04:19:47 GMT
last-modified: Wed, 19 Jul 2023 05:05:00 GMT
vary: Accept-Encoding
akamai-grn: 0.5d5cda17.1701232025.15c1c2a6
alt-svc: h3=":443"; ma=86400
content-md5: J1W/Z/2V8xgrGfOVHW1TKQ==
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
timing-allow-origin: *
x-cdn-traceid: 0.bd0a655f.1701540687.4ec0bdc0
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 795d7a12-701e-007a-608e-1e0766000000
x-ms-version: 2009-09-19
server: cloudflare
POST free.1260628466.workers.dev/fd/ls/lsp.aspx?
204 No Content 0 B URL POST HTTP/3 free.1260628466.workers.dev/fd/ls/lsp.aspx?
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx? HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Sat, 02 Dec 2023 18:11:27 GMT
cf-ray: 82f588508caf7128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
alt-svc: h3=":443"; ma=86400
x-cdn-traceid: 0.5c0a655f.1701540687.53888445
x-msedge-ref: Ref A: 464F8A5689C84D708C80B7669F374972 Ref B: OSL30EDGE0109 Ref C: 2023-12-02T18:11:27Z
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kRc9c0unnZKDnsySfFE8MLoT0OHcLAf7caeak3Gx8X%2FuHDNntVHcwkpO02uxrdwyZaHthZBtvAe%2FmMtD%2BJFP4XZ%2FPzn%2B5I75%2FjdpBHZloj583qad0nrkY8kV47QqNJfwNkctPqhw%2FtHJWhKznVg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:529,%22CT%22:532,%22IL%22:2}}&P=SERP&DA=DUBE01
200 OK 0 B URL GET HTTP/3 free.1260628466.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:529,%22CT%22:532,%22IL%22:2}}&P=SERP&DA=DUBE01
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:529,%22CT%22:532,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:27 GMT
content-length: 0
cf-ray: 82f588507ca47128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
alt-svc: h3=":443"; ma=86400
x-cdn-traceid: 0.5c0a655f.1701540687.5388844b
x-msedge-ref: Ref A: 3035D880B4204013A9813DAE9D8302A3 Ref B: OSL30EDGE0320 Ref C: 2023-12-02T18:11:27Z
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C39YigyzTGv2UnAhoQcNoBSnaim4GAbaVSnEJAFH43aRiQ4mDktuoH8Y8KuB%2Boa9yDqKr7sd%2FCSOcGOia%2BqTx1KUtulxatF91T2uC%2FjgDAJ0JgAr4NlABB%2BzVB6tWkX3uLCC6DxRy2iE9XWbgI4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
GET r.bing.com/rp/D-hEdXC7G-DgvV_tAK4BodWZ7no.png
200 OK 5.3 kB URL GET HTTP/3 r.bing.com/rp/D-hEdXC7G-DgvV_tAK4BodWZ7no.png
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 58 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash c49766495653bb160fe23c0303734b7b
0fe8447570bb1be0e0bd5fed00ae01a1d599ee7a
bc9dd5f6fb6506eaedcc886c79b6c72be115a72664c9eaa2b0f89cc04d63481e
GET /rp/D-hEdXC7G-DgvV_tAK4BodWZ7no.png HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.bing.com/rp/bo5EFnUmGfRPJAKh5rI6sgFVIsE.gz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5339
content-type: image/png
content-md5: xJdmSVZTuxYP4jwDA3NLew==
last-modified: Tue, 29 Aug 2023 02:26:40 GMT
etag: 0x8DBA83760CA809C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 864c5310-701e-00d3-5ac6-21c614000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=45425
expires: Sun, 03 Dec 2023 06:48:32 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a58d
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/A8E6AtwLN3G6zsuV2i9-40NW8hg.gz.js
200 OK 12 kB URL GET HTTP/3 r.bing.com/rp/A8E6AtwLN3G6zsuV2i9-40NW8hg.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (37078), with no line terminators
Hash 3296f64a7a2bf91e144553e17654643b
639b0f05038c69cfc21ad55ce92b92c71b9bb8ba
4de9e2c37234da98c8be5f282084e5603918a287602df7f75af3f1bcf825781f
GET /rp/A8E6AtwLN3G6zsuV2i9-40NW8hg.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11485
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: Mq4n/Vfz6R2oQSPiV5SXMw==
last-modified: Mon, 01 May 2023 19:02:52 GMT
etag: 0x8DB4A76AA0B98C3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e1afc862-101e-00ae-4256-ea4d40000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=273232
expires: Tue, 05 Dec 2023 22:05:19 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a5ce
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/2btleEXVAqzWmhWmb55mfOm2g1E.gz.js
200 OK 66 kB URL GET HTTP/3 r.bing.com/rp/2btleEXVAqzWmhWmb55mfOm2g1E.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (19008)
Hash 8192d891e754afd81a399f98bc6b265f
965e6c69f45118feab86eeebbb0fc4964f2b3a98
e2e4d97c20d4478e8e947480c8f6c71a2c795776d405366be70db82e4ea4ba77
GET /rp/2btleEXVAqzWmhWmb55mfOm2g1E.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 66418
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: KSPDBiVoZAYaEeQmhB/ESg==
last-modified: Mon, 01 May 2023 19:02:35 GMT
etag: 0x8DB4A76A049638E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: af868554-b01e-0038-31c5-1bbee6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=284087
expires: Wed, 06 Dec 2023 01:06:14 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a5d9
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/ec3JKFzrmfRKEKnPkV78BWTHEI8.gz.js
200 OK 4.9 kB URL GET HTTP/3 r.bing.com/rp/ec3JKFzrmfRKEKnPkV78BWTHEI8.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (10033), with CRLF line terminators
Hash 3e1cd65b12888a023f899069eb6fd830
5dc4bb155beb355755c78fa0d991c45696497794
b8bb4d94b0fcfeceae541a257dea9bc8f598c2e008beb857274607868ba3fb10
GET /rp/ec3JKFzrmfRKEKnPkV78BWTHEI8.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4936
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: lzQYOCBV/0wGSYDpPwIPVQ==
last-modified: Mon, 01 May 2023 19:02:18 GMT
etag: 0x8DB4A76960A9666
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 70433f70-801e-0010-6627-242fb7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=307010
expires: Wed, 06 Dec 2023 07:28:17 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a5da
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/QbYyLCdy1I1SCWvGByuoFuAOh1U.gz.js
200 OK 134 kB URL GET HTTP/3 r.bing.com/rp/QbYyLCdy1I1SCWvGByuoFuAOh1U.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 134 kB (134040 bytes)
Hash a5d43402119315f997714bcd25e26dcb
a823f421fa490a31cc6d0628fc44fbce9d480402
4928ab04fc16240d0f2e02048b4940b20ed38b2289be98b84b3f27ce82d1f788
GET /rp/QbYyLCdy1I1SCWvGByuoFuAOh1U.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 134040
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: RwdXZnBCdt4JcplmgAWNkQ==
last-modified: Thu, 30 Nov 2023 03:46:54 GMT
etag: 0x8DBF156FE775B51
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9851d551-501e-00e2-176c-23dd70000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=226392
expires: Tue, 05 Dec 2023 09:04:39 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a628
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/u7YJKAAtuh0wKEb3fFHJMq04qUs.gz.js
200 OK 276 B URL GET HTTP/3 r.bing.com/rp/u7YJKAAtuh0wKEb3fFHJMq04qUs.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (561), with no line terminators
Hash 6d69808bc13425dcfbcd61c2dcd11305
76ccc14a62edf6e44901a237b3460e22874b6f53
88d86fe4ad7534bb5d79d6ceafdc527ade975d07f49a856ce0ee6783161516c3
GET /rp/u7YJKAAtuh0wKEb3fFHJMq04qUs.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 276
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ji/AlYPinXLcWyszoLYLPw==
last-modified: Mon, 01 May 2023 19:02:26 GMT
etag: 0x8DB4A769ACE5B9C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f985e632-801e-002f-30cf-1ee714000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=108659
expires: Mon, 04 Dec 2023 00:22:26 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a629
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/X5wTpuC4Z-4tywO0ePRmdAg9EBE.gz.js
200 OK 91 kB URL GET HTTP/3 r.bing.com/rp/X5wTpuC4Z-4tywO0ePRmdAg9EBE.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f22aef5e40b4fc45d422d6326d4e82cf
4fa95cb3a8aa07bae7dfa1485f26cbc1ba8fc042
597a5a961aff54e9e5ad009c670674a5dc11c9f829764b32b925066b5ab9dc8b
GET /rp/X5wTpuC4Z-4tywO0ePRmdAg9EBE.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 91293
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ubXprHB4WJJFk7eBQvrrKA==
last-modified: Mon, 01 May 2023 19:03:12 GMT
etag: 0x8DB4A76B64FA991
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 73db0366-001e-0079-38f2-eb1c75000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.b7777b5c.1695282805.49ffb12e, 0.0f4f2417.1701540687.106a62b
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=213604
expires: Tue, 05 Dec 2023 05:31:31 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/3J5afDcWT7tohqS1ddzLYPW3R0A.gz.js
200 OK 1.4 kB URL GET HTTP/3 r.bing.com/rp/3J5afDcWT7tohqS1ddzLYPW3R0A.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (2996), with no line terminators
Hash a4a2895e7fbfe6377307b4c2aab9e525
399fcad73e013bab2867567b731b0e0eaa278a49
2f754393d443981912bdd0e557b8cf9724b956e552c50bfd75044848ac347aa5
GET /rp/3J5afDcWT7tohqS1ddzLYPW3R0A.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1404
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: gurnlOlmbSyE4M3ECGAROA==
last-modified: Thu, 31 Aug 2023 22:03:06 GMT
etag: 0x8DBAA6E0E67DD1B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f2a68672-b01e-00dc-63b6-23b078000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=258438
expires: Tue, 05 Dec 2023 17:58:45 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a62c
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/gXjXcmZTDxs2-O-ZaLfJ0o5tmjY.gz.js
200 OK 633 B URL GET HTTP/3 r.bing.com/rp/gXjXcmZTDxs2-O-ZaLfJ0o5tmjY.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1228), with no line terminators
Hash 04e46d18c015e7c22cb2e4b43dcefd05
212f9f2089a5f85033160582dccb1b41a7e4cd15
a8172a1cd35702e0679aa2fc817640738b09d8c2a1bacf4a132e68d314407744
GET /rp/gXjXcmZTDxs2-O-ZaLfJ0o5tmjY.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 633
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ajID9MmZrFleacboLdSqjQ==
last-modified: Mon, 01 May 2023 19:03:13 GMT
etag: 0x8DB4A76B69F33BD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 45cba09d-801e-0051-441f-2387aa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=193242
expires: Mon, 04 Dec 2023 23:52:09 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a660
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/9pPjqlTOsMG4nKl9FvG_qP3fAAY.gz.js
200 OK 2.5 kB URL GET HTTP/3 r.bing.com/rp/9pPjqlTOsMG4nKl9FvG_qP3fAAY.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (5983), with no line terminators
Hash 785d3c1d93d18e5478f0c3ffce35cd03
1f7533428af383a196cc2319477b762f86500514
b32b54f6d1be64df456502b677407d4cfa5f10e98cde9350d9e63331fdbb7bfc
GET /rp/9pPjqlTOsMG4nKl9FvG_qP3fAAY.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2535
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: 7Syc4BPMdH3F+GzjucGQGg==
last-modified: Tue, 25 Jul 2023 15:10:37 GMT
etag: 0x8DB8D214DA632A5
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e9c8f173-f01e-00eb-5836-d598a3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=49530
expires: Sun, 03 Dec 2023 07:56:57 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a661
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.1260628466.workers.dev/
200 OK 38 kB URL User Request GET HTTP/2 free.1260628466.workers.dev/
IP
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (60836), with CRLF, LF line terminators
Hash ec618bb4e9c9206b36878b9ee2fd3ad5
d4ce3f4fb882fea929668aaa4bd9564f92f11dfa
6a4c0bd8172ccc12610281d79d159c8002c572e82082b87cfbbe26ab5e86bf0a
GET / HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 18:11:26 GMT
content-type: text/html; charset=utf-8
cf-ray: 82f5884a1a215696-OSL
cf-cache-status: DYNAMIC
cache-control: private
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; secure; SameSite=None
MUIDB=392FE21D2959657609D0F1C628366424; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; HttpOnly
_EDGE_S=F=1&SID=352705B68E836B4600C8166D8FEC6A1A; domain=.bing.com; path=/; HttpOnly
_EDGE_V=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=47AE04753B87423EAE48C78C03B6E60E&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; secure; SameSite=None
_SS=SID=352705B68E836B4600C8166D8FEC6A1A; domain=.bing.com; path=/; secure; SameSite=None
ULC=; domain=.bing.com; expires=Fri, 01-Dec-2023 18:11:26 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0xMi0wMlQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIlRucyI6MCwiRGZ0IjpudWxsLCJNdnMiOjAsIkZsdCI6MCwiSW1wIjoxLCJUb2JicyI6MH0=; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:26 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.cf0a655f.1701540686.3e8f5f57
x-eventid: 656b734ee4f548af9c7259a84ace9d28
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MfFAny9nxKdP24FM8avYiJBgs0mzphwEKCyPVR4lzIMzOp45KIyt6VTvLtH7mr012x9r%2B7qA4P2vg0m3fEbEOMzP%2FRpFYHna6z09AreJ%2F%2BaWr%2FLDGsy8RsRilxV93QlOLkTRxN6XmO6wbfUACWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
GET r.bing.com/rp/8srl0LOx92Ew0yyAq2m2e33cq7I.gz.js
200 OK 259 B URL GET HTTP/3 r.bing.com/rp/8srl0LOx92Ew0yyAq2m2e33cq7I.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (426), with no line terminators
Hash 857a0de0bbf14f3427a1afa5cd985bce
0c1d2e767f07e5c0f14ea64980db213d379cc6f7
3ed65f33193430c0b9db61ffe7f5fe27b29f86a28563992c3afc47d4c22c23d7
GET /rp/8srl0LOx92Ew0yyAq2m2e33cq7I.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 259
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: v7tZ/ztkya0GBN4voj+crw==
last-modified: Mon, 01 May 2023 19:02:47 GMT
etag: 0x8DB4A76A743B126
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c7a0cbdc-a01e-003d-3315-09964a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=264532
expires: Tue, 05 Dec 2023 19:40:19 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a6a6
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/Mt62GUgrdySmO3Hz6WvsY51OVCM.gz.js
200 OK 290 B URL GET HTTP/3 r.bing.com/rp/Mt62GUgrdySmO3Hz6WvsY51OVCM.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (423), with no line terminators
Hash 3a5049db26af9ce03db6a53d3541082d
934daea4edde2568ca02ab89af23fdcfeb57339a
af8c36defed55d79106513865f69933e546e1e4c361e41c29f65905ded009047
GET /rp/Mt62GUgrdySmO3Hz6WvsY51OVCM.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 290
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: nRjeKHDCzIA360jfIiZTGA==
last-modified: Mon, 01 May 2023 19:03:06 GMT
etag: 0x8DB4A76B2849499
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3b77c03e-401e-0047-6692-ff8b0a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=61166
expires: Sun, 03 Dec 2023 11:10:53 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a6a7
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/FGPg8EdzobIQOzM59dg7NfaOobo.gz.js
200 OK 288 B URL GET HTTP/3 r.bing.com/rp/FGPg8EdzobIQOzM59dg7NfaOobo.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (425), with no line terminators
Hash 016ecfdb34031f881fa5e34dfbd0b7a1
16d3ba1049939d00ae47aad053993b4762d9b102
08021ed3bca5532304b597e636beb939ff7baa6d08dca4e94c0dde1fdf940389
GET /rp/FGPg8EdzobIQOzM59dg7NfaOobo.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 288
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: A4dabF4Eds5NYuYTpn2yHQ==
last-modified: Mon, 01 May 2023 19:03:05 GMT
etag: 0x8DB4A76B22C774D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 438b479f-201e-006e-72c4-1bb57e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=164918
expires: Mon, 04 Dec 2023 16:00:05 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a6a8
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/DQQTu0f9ldw9QQHZ9i-TAYjSeD0.gz.js
200 OK 8.8 kB URL GET HTTP/3 r.bing.com/rp/DQQTu0f9ldw9QQHZ9i-TAYjSeD0.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (21819)
Hash 30280c218d3caaf6b04ec8c6f906e190
653d368efdd498caf65677e1d54f03dd18b026b5
d313c6fff97701cc24db9d84c8b0643ca7a82a01c0868517e6e543779985c46e
GET /rp/DQQTu0f9ldw9QQHZ9i-TAYjSeD0.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8791
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: IlB8CLy1h/uOl+Tsmzlrhg==
last-modified: Wed, 28 Jun 2023 05:03:37 GMT
etag: 0x8DB779508390AE0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 28579f92-701e-0097-3d5e-eab65c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=58749
expires: Sun, 03 Dec 2023 10:30:36 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a6a9
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/qVpzYkc_URbHUlmGgx4K0RYXSw0.gz.js
200 OK 801 B URL GET HTTP/3 r.bing.com/rp/qVpzYkc_URbHUlmGgx4K0RYXSw0.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1648), with no line terminators
Hash 17691d7face6fa529a6a72c2e48ea168
9ccfa021b47a7088d1525b9e02e4efcba28e2c64
607a2ad3079710205734fb04e35c084a01c3ff2a66ba3299b25ecbc6cadcecdd
GET /rp/qVpzYkc_URbHUlmGgx4K0RYXSw0.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 801
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: MuAowIseFlT6zmp8ZS32aw==
last-modified: Mon, 01 May 2023 19:03:18 GMT
etag: 0x8DB4A76B9F86BFD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2ead0988-701e-0055-7582-230aad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=236103
expires: Tue, 05 Dec 2023 11:46:30 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a6aa
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/jhk_5I4f9VeUBzSlHc_enKyc3Ko.gz.js
200 OK 512 B URL GET HTTP/3 r.bing.com/rp/jhk_5I4f9VeUBzSlHc_enKyc3Ko.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (938), with no line terminators
Hash dbf771b1f0b05393d18bc55fd6dd94a7
bc4fd6c9efb2e87d2d30f19dd78c9188b6d76b2d
f2c5677d58718ae60f7f4e98351643afeb8ad7fdfe4b2b6af0b7b63108cb7071
GET /rp/jhk_5I4f9VeUBzSlHc_enKyc3Ko.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 512
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: IJYKxTXJToOmhJu5Y+Ge9g==
last-modified: Mon, 01 May 2023 19:02:18 GMT
etag: 0x8DB4A7695A1C32E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f71d847e-301e-0005-6a35-233804000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=203014
expires: Tue, 05 Dec 2023 02:35:01 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a771
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/yjXVFOxf6UdoTA2BOwEH6n4ClfI.gz.js
200 OK 738 B URL GET HTTP/3 r.bing.com/rp/yjXVFOxf6UdoTA2BOwEH6n4ClfI.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1274), with no line terminators
Hash a969230a51dba5ab5adf5877bcc28cfa
7c4cdc6b86ca3b8a51ba585594ea1ab7b78b8265
8e572950cbda0558f7b9563ce4f5017e06bc9c262cf487e33927a948f8d78f7f
GET /rp/yjXVFOxf6UdoTA2BOwEH6n4ClfI.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 738
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: IdwtZGA9MByocbZXe9uLtg==
last-modified: Mon, 01 May 2023 19:03:43 GMT
etag: 0x8DB4A76C8CAA4A3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: aef7be7a-201e-006e-5ddd-23b57e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=274928
expires: Tue, 05 Dec 2023 22:33:35 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a772
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/ihC7RhTVhw2ULO_1rMUWydIu_rA.gz.js
200 OK 835 B URL GET HTTP/3 r.bing.com/rp/ihC7RhTVhw2ULO_1rMUWydIu_rA.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (1587), with no line terminators
Hash cb027ba6eb6dd3f033c02183b9423995
368e7121931587d29d988e1b8cb0fda785e5d18b
04a007926a68bb33e36202eb27f53882af7fd009c1ec3ad7177fba380a5fb96f
GET /rp/ihC7RhTVhw2ULO_1rMUWydIu_rA.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 835
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: 1TXsxNVn3RseZNq3n6BUeA==
last-modified: Mon, 01 May 2023 19:02:20 GMT
etag: 0x8DB4A7696F574EE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ade96bd6-001e-0021-0fba-22cea4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=150229
expires: Mon, 04 Dec 2023 11:55:16 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a773
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/cJksCHwhB_Z32I0ytWPMUDsybak.gz.js
200 OK 178 B URL GET HTTP/3 r.bing.com/rp/cJksCHwhB_Z32I0ytWPMUDsybak.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a5363c37b617d36dfd6d25bfb89ca56b
31682afce628850b8cb31faa8e9c4c5ec9ebb957
8b4d85985e62c264c03c88b31e68dbabdcc9bd42f40032a43800902261ff373f
GET /rp/cJksCHwhB_Z32I0ytWPMUDsybak.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 178
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: bN4C0ra+ctbnBbTcyL619g==
last-modified: Mon, 01 May 2023 19:03:25 GMT
etag: 0x8DB4A76BE181C6A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ae2d3754-d01e-00b1-75fd-15fe44000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=330554
expires: Wed, 06 Dec 2023 14:00:41 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a774
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/PgVOrYqTvqK49IEnVEVlZVYfA1U.gz.js
200 OK 393 B URL GET HTTP/3 r.bing.com/rp/PgVOrYqTvqK49IEnVEVlZVYfA1U.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (576), with no line terminators
Hash f5712e664873fde8ee9044f693cd2db7
2a30817f3b99e3be735f4f85bb66dd5edf6a89f4
1562669ad323019cda49a6cf3bddece1672282e7275f9d963031b30ea845ffb2
GET /rp/PgVOrYqTvqK49IEnVEVlZVYfA1U.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 393
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: GEN21UcxZJtjS9dUSwGqSA==
last-modified: Mon, 01 May 2023 19:03:19 GMT
etag: 0x8DB4A76BA68ADFF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 8ba9a302-701e-00e5-6ece-21b113000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=48617
expires: Sun, 03 Dec 2023 07:41:44 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a775
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/njelUYNJ9xk_aIzI9GKLCNIsxD8.gz.js
200 OK 221 B URL GET HTTP/3 r.bing.com/rp/njelUYNJ9xk_aIzI9GKLCNIsxD8.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (328), with no line terminators
Hash cdddab121eb434876615391ad4107b9a
8038444c80b8e76ddf8ae5c00ab5784207e5aeff
243d212a9ff764ccda9b19c3c823b2f408a0718e56a3e7a8b5b533e108db56cb
GET /rp/njelUYNJ9xk_aIzI9GKLCNIsxD8.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 221
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: aWD4XETGiFm1C1Ea/JadzQ==
last-modified: Mon, 01 May 2023 19:03:34 GMT
etag: 0x8DB4A76C37A7E1D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6a396943-d01e-0037-5fe1-1e32fd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=120171
expires: Mon, 04 Dec 2023 03:34:18 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a776
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/BmRJAuTc8UgOeXgJh_NIObAa5HE.gz.js
200 OK 274 B URL GET HTTP/3 r.bing.com/rp/BmRJAuTc8UgOeXgJh_NIObAa5HE.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash 55ec2297c0cf262c5fa9332f97c1b77a
92640e3d0a7cbe5d47bc8f0f7cc9362e82489d23
342c3dd52a8a456f53093671d8d91f7af5b3299d72d60edb28e4f506368c6467
GET /rp/BmRJAuTc8UgOeXgJh_NIObAa5HE.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 274
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: AMzTpWxqysnsqB3a4Wv0UA==
last-modified: Mon, 01 May 2023 19:03:03 GMT
etag: 0x8DB4A76B0E9EFD0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 53e11634-201e-0051-2159-117ddd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=88137
expires: Sun, 03 Dec 2023 18:40:24 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a777
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/pXVzgohStRjQefcwyp3z6bhIArA.gz.js
200 OK 507 B URL GET HTTP/3 r.bing.com/rp/pXVzgohStRjQefcwyp3z6bhIArA.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (924), with no line terminators
Hash 47442e8d5838baaa640a856f98e40dc6
54c60cad77926723975b92d09fe79d7beff58d99
15ed1579bccf1571a7d8b888226e9fe455aca5628684419d1a18f7cda68af89e
GET /rp/pXVzgohStRjQefcwyp3z6bhIArA.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 507
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: x+G+lCZu47Kw0twNFcZMOg==
last-modified: Mon, 01 May 2023 19:03:33 GMT
etag: 0x8DB4A76C2B87D41
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 95df8faf-501e-0064-70ed-eb11c9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=310783
expires: Wed, 06 Dec 2023 08:31:10 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a778
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/kzHfYwAwahpHm-ZU7kDOHkFbADU.gz.js
200 OK 1.5 kB URL GET HTTP/3 r.bing.com/rp/kzHfYwAwahpHm-ZU7kDOHkFbADU.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (3363), with no line terminators
Hash fabb77c7ae3fd2271f5909155fb490e5
cde0b1304b558b6de7503d559c92014644736f88
e482bf4baaa167335f326b9b4f4b83e806cc21fb428b988a4932c806d918771c
GET /rp/kzHfYwAwahpHm-ZU7kDOHkFbADU.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1541
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: VXQKTAHYa3rUIFPlZfmQpQ==
last-modified: Wed, 21 Jun 2023 19:01:24 GMT
etag: 0x8DB7289E8C9BE38
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1611b198-301e-003a-6016-22f0a7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=79655
expires: Sun, 03 Dec 2023 16:19:02 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a779
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/GK9SuRKiu0QbKYnVgoAlgmuWrNU.gz.js
200 OK 1.2 kB URL GET HTTP/3 r.bing.com/rp/GK9SuRKiu0QbKYnVgoAlgmuWrNU.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (2524), with no line terminators
Hash 17cdab99027114dbcbd9d573c5b7a8a9
42d65caae34eba7a051342b24972665e61fa6ae2
5ff6b0f0620aa14559d5d869dbeb96febc4014051fa7d5df20223b10b35312de
GET /rp/GK9SuRKiu0QbKYnVgoAlgmuWrNU.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1240
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: NAaNjvwmKkp0KjjfVNG3Rw==
last-modified: Mon, 01 May 2023 19:02:07 GMT
etag: 0x8DB4A768F7B68D4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: fee4e90b-b01e-001b-7010-22d4dc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=77250
expires: Sun, 03 Dec 2023 15:38:57 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a77a
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/uukG4aoFVhFS_w3yNb3N_d_l9XI.gz.js
200 OK 653 B URL GET HTTP/3 r.bing.com/rp/uukG4aoFVhFS_w3yNb3N_d_l9XI.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1051), with no line terminators
Hash f76d06d7669e399dc0788bc5473562bb
159293d99346a27e2054a812451909de832ca0d1
23f0357ae77648ee38f39960e56507d87f8d690c48e759a0e054f6e691c843ec
GET /rp/uukG4aoFVhFS_w3yNb3N_d_l9XI.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 653
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: dH1ALXBQRg+oulb8xCKyzA==
last-modified: Mon, 01 May 2023 19:03:32 GMT
etag: 0x8DB4A76C224D260
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 5fa10a16-301e-002f-2b5e-eaed9a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=178858
expires: Mon, 04 Dec 2023 19:52:25 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a77b
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rs/79/x4/nj/V9Lbi4rGakA-OjwcLcoh5jr1zfY.js?or=w
200 OK 356 B URL GET HTTP/3 r.bing.com/rs/79/x4/nj/V9Lbi4rGakA-OjwcLcoh5jr1zfY.js?or=w
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (520), with no line terminators
Hash f03cfee55a7f1e0b91dd062a5654fc3d
57d2db8b8ac66a403e3a3c1c2dca21e63af5cdf6
39477bae95ee7073936851a67106a42f585454ebd6c4feadeacc818c52da49a4
GET /rs/79/x4/nj/V9Lbi4rGakA-OjwcLcoh5jr1zfY.js?or=w HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 356
content-type: application/x-javascript; charset=utf-8
server: Kestrel
access-control-allow-headers: *
access-control-allow-origin: *
content-encoding: br
last-modified: Thu, 12 Jan 2023 01:31:54 GMT
x-eventid: 6569cadf266f4331a5387228186a6753
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-as-instrumentationoptions: AppServerLoggingMaster=1
x-as-machinename: DUBEEAP0000E0CB
x-as-suppresssetcookie: 1
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-IB2df0bnv99sW1UAVlgHGxRh6WU7JH47l879D06iobc='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}, {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
cache-control: public, max-age=323452
expires: Wed, 06 Dec 2023 12:02:19 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a77c
timing-allow-origin: *
GET r.bing.com/rp/LmUyQT3QdtAqzWk3kKa_4KTKOX0.gz.js
200 OK 902 B URL GET HTTP/3 r.bing.com/rp/LmUyQT3QdtAqzWk3kKa_4KTKOX0.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (2009), with no line terminators
Hash 601102ca711e0b4140af45c1657db13f
7977ef6e79471380b8787b5b7148e9ff0a74a203
e47318cd9d80769ac59e732347fb4f574cd4eea9e2c787f3a996805265069001
GET /rp/LmUyQT3QdtAqzWk3kKa_4KTKOX0.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 902
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ppUe2fp65/28hlKzuddTDw==
last-modified: Fri, 06 Oct 2023 19:35:33 GMT
etag: 0x8DBC6A36898BC40
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1df1a659-901e-00b9-35d5-1c1e3c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=279637
expires: Tue, 05 Dec 2023 23:52:04 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a77d
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/y_61f0IFfv8Q_a9jAO8tmOS3Gkk.gz.js
200 OK 5.6 kB URL GET HTTP/3 r.bing.com/rp/y_61f0IFfv8Q_a9jAO8tmOS3Gkk.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (28499), with no line terminators
Hash 435d4389cf37ebdf488b09d33328e64c
e4897917bb729f94808672478a32fad44ceeb350
f56c5b27ad30b13345dedb5081ac381a0be37a454242d2d289b90c5f44cddda8
GET /rp/y_61f0IFfv8Q_a9jAO8tmOS3Gkk.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5645
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: VFSIVgFjOJib7KKBdRZSgg==
last-modified: Fri, 01 Dec 2023 21:09:22 GMT
etag: 0x8DBF2B1CAE10001
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 50c72ba4-701e-0049-4acb-24a834000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=377116
expires: Thu, 07 Dec 2023 02:56:43 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a77e
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/SO02eTikN8ZV7bCSXFKur4CKSoQ.gz.js
200 OK 160 B URL GET HTTP/3 r.bing.com/rp/SO02eTikN8ZV7bCSXFKur4CKSoQ.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 6c2c6db3832d53062d303cdff5e2bd30
b7a064a64ceae5c9009ef7d6d8f63b90d3933c9d
06b77ee16a2cd34acd210b4f2b6e423762ea8874bb26ae5a37db9dd01a00ff70
GET /rp/SO02eTikN8ZV7bCSXFKur4CKSoQ.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 160
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: uJ47yL0Sp1fVl3nUOL3X8g==
last-modified: Tue, 06 Jun 2023 10:30:38 GMT
etag: 0x8DB66791261E315
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 17de54f7-401e-0071-3bab-23fc0d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=253653
expires: Tue, 05 Dec 2023 16:39:00 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a77f
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/-4gFBdS7ddZ3KedeXnuTcXwYQ5U.gz.js
200 OK 1.1 kB URL GET HTTP/3 r.bing.com/rp/-4gFBdS7ddZ3KedeXnuTcXwYQ5U.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (3102), with no line terminators
Hash dd6a528c55708896155fea98148725fa
53c48069abe54fd30d9fff1d7fd8c287afbbe1b1
635421af44598c7601907a7ad263a3a8925be6495ba349382f02805dbe668566
GET /rp/-4gFBdS7ddZ3KedeXnuTcXwYQ5U.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1118
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: AkjWeVPfNttEBDfGZbcT6A==
last-modified: Thu, 23 Nov 2023 12:26:25 GMT
etag: 0x8DBEC1F6967A5BD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 249c80b6-e01e-001a-2e9c-227bf9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=137204
expires: Mon, 04 Dec 2023 08:18:11 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a780
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/A8E6AtwLN3G6zsuV2i9-40NW8hg.gz.js
200 OK 12 kB URL GET HTTP/3 r.bing.com/rp/A8E6AtwLN3G6zsuV2i9-40NW8hg.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (37078), with no line terminators
Hash 3296f64a7a2bf91e144553e17654643b
639b0f05038c69cfc21ad55ce92b92c71b9bb8ba
4de9e2c37234da98c8be5f282084e5603918a287602df7f75af3f1bcf825781f
GET /rp/A8E6AtwLN3G6zsuV2i9-40NW8hg.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11485
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: Mq4n/Vfz6R2oQSPiV5SXMw==
last-modified: Mon, 01 May 2023 19:02:52 GMT
etag: 0x8DB4A76AA0B98C3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e1afc862-101e-00ae-4256-ea4d40000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=273232
expires: Tue, 05 Dec 2023 22:05:19 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a926
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/2btleEXVAqzWmhWmb55mfOm2g1E.gz.js
200 OK 66 kB URL GET HTTP/3 r.bing.com/rp/2btleEXVAqzWmhWmb55mfOm2g1E.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (19008)
Hash 8192d891e754afd81a399f98bc6b265f
965e6c69f45118feab86eeebbb0fc4964f2b3a98
e2e4d97c20d4478e8e947480c8f6c71a2c795776d405366be70db82e4ea4ba77
GET /rp/2btleEXVAqzWmhWmb55mfOm2g1E.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 66418
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: KSPDBiVoZAYaEeQmhB/ESg==
last-modified: Mon, 01 May 2023 19:02:35 GMT
etag: 0x8DB4A76A049638E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: af868554-b01e-0038-31c5-1bbee6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=284087
expires: Wed, 06 Dec 2023 01:06:14 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106a9c1
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/ec3JKFzrmfRKEKnPkV78BWTHEI8.gz.js
200 OK 4.9 kB URL GET HTTP/3 r.bing.com/rp/ec3JKFzrmfRKEKnPkV78BWTHEI8.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (10033), with CRLF line terminators
Hash 3e1cd65b12888a023f899069eb6fd830
5dc4bb155beb355755c78fa0d991c45696497794
b8bb4d94b0fcfeceae541a257dea9bc8f598c2e008beb857274607868ba3fb10
GET /rp/ec3JKFzrmfRKEKnPkV78BWTHEI8.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4936
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: lzQYOCBV/0wGSYDpPwIPVQ==
last-modified: Mon, 01 May 2023 19:02:18 GMT
etag: 0x8DB4A76960A9666
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 70433f70-801e-0010-6627-242fb7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=307010
expires: Wed, 06 Dec 2023 07:28:17 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106aae6
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/QbYyLCdy1I1SCWvGByuoFuAOh1U.gz.js
200 OK 134 kB URL GET HTTP/3 r.bing.com/rp/QbYyLCdy1I1SCWvGByuoFuAOh1U.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 134 kB (134040 bytes)
Hash a5d43402119315f997714bcd25e26dcb
a823f421fa490a31cc6d0628fc44fbce9d480402
4928ab04fc16240d0f2e02048b4940b20ed38b2289be98b84b3f27ce82d1f788
GET /rp/QbYyLCdy1I1SCWvGByuoFuAOh1U.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 134040
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: RwdXZnBCdt4JcplmgAWNkQ==
last-modified: Thu, 30 Nov 2023 03:46:54 GMT
etag: 0x8DBF156FE775B51
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9851d551-501e-00e2-176c-23dd70000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=226392
expires: Tue, 05 Dec 2023 09:04:39 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106ab15
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/u7YJKAAtuh0wKEb3fFHJMq04qUs.gz.js
200 OK 276 B URL GET HTTP/3 r.bing.com/rp/u7YJKAAtuh0wKEb3fFHJMq04qUs.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (561), with no line terminators
Hash 6d69808bc13425dcfbcd61c2dcd11305
76ccc14a62edf6e44901a237b3460e22874b6f53
88d86fe4ad7534bb5d79d6ceafdc527ade975d07f49a856ce0ee6783161516c3
GET /rp/u7YJKAAtuh0wKEb3fFHJMq04qUs.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 276
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ji/AlYPinXLcWyszoLYLPw==
last-modified: Mon, 01 May 2023 19:02:26 GMT
etag: 0x8DB4A769ACE5B9C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f985e632-801e-002f-30cf-1ee714000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=108659
expires: Mon, 04 Dec 2023 00:22:26 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540687.106ac4f
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/X5wTpuC4Z-4tywO0ePRmdAg9EBE.gz.js
200 OK 91 kB URL GET HTTP/3 r.bing.com/rp/X5wTpuC4Z-4tywO0ePRmdAg9EBE.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f22aef5e40b4fc45d422d6326d4e82cf
4fa95cb3a8aa07bae7dfa1485f26cbc1ba8fc042
597a5a961aff54e9e5ad009c670674a5dc11c9f829764b32b925066b5ab9dc8b
GET /rp/X5wTpuC4Z-4tywO0ePRmdAg9EBE.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 91293
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ubXprHB4WJJFk7eBQvrrKA==
last-modified: Mon, 01 May 2023 19:03:12 GMT
etag: 0x8DB4A76B64FA991
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 73db0366-001e-0079-38f2-eb1c75000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.b7777b5c.1695282805.49ffb12e, 0.0f4f2417.1701540687.106acbb
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=213604
expires: Tue, 05 Dec 2023 05:31:31 GMT
date: Sat, 02 Dec 2023 18:11:27 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
200 OK 6.6 kB URL GET HTTP/2 assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectassets.msn.com
FingerprintD2:49:8D:0A:5B:1A:88:10:F9:95:1D:61:B3:13:55:46:77:A5:8D:B4
ValidityTue, 25 Jul 2023 19:29:13 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (19627)
Hash 6a57e4acae2d82619ad37056e8de818a
10845130b44263a871d825caee336b4b096e74f7
92e6a2ae0de1410b072a98d819eb590b3beb6a7e8bff47f9f86213cd56102e53
GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1
Host: assets.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 6648
content-md5: VrCV+unB2D4FKgPCz6DrpQ==
last-modified: Wed, 15 Nov 2023 03:40:56 GMT
etag: 0x8DBE58CACFD7C32
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6daa4f7b-c01e-0107-62d2-17e46c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Sat, 02 Dec 2023 18:11:28 GMT
akamai-request-bc: [a=23.36.79.4,b=4291330908,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=2, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 23.36.79.4
akamai-request-id: ffc8835c
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
akamai-grn: 0.044f2417.1701540688.ffc8835c
vary: Origin
X-Firefox-Spdy: h2
GET r.bing.com/rp/ni3MyKKVu9pK0SgY6gb6Z2NOGpg.jpg
200 OK 3.8 kB URL GET HTTP/3 r.bing.com/rp/ni3MyKKVu9pK0SgY6gb6Z2NOGpg.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:08:01 11:43:45], progressive, precision 8, 160x160, components 3\012- data
Hash 281570611f89219a970f2589f98a09db
9e2dccc8a295bbda4ad12818ea06fa67634e1a98
7bdab4155253e159b748e2be6cb1c0af736f18d2a4dbddf79d93d6219a3de9dd
GET /rp/ni3MyKKVu9pK0SgY6gb6Z2NOGpg.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3814
content-type: image/jpeg
content-md5: KBVwYR+JIZqXDyWJ+YoJ2w==
last-modified: Tue, 27 Dec 2022 02:26:51 GMT
etag: 0x8DAE7B1D07452CB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 8c564eb0-e01e-00aa-0fc0-9ec047000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=231253
expires: Tue, 05 Dec 2023 10:25:41 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af25
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/f21jlSMmEDN43OaavcdaB-7Phq0.svg
200 OK 1.1 kB URL GET HTTP/3 r.bing.com/rp/f21jlSMmEDN43OaavcdaB-7Phq0.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1111), with no line terminators
Hash 5e834a775c3b3f93f83f7c48e5286257
7f6d63952326103378dce69abdc75a07eecf86ad
006563db23523a6369d81fcfa6f3515f0317cf651d74024635d2bfbe694779b8
GET /rp/f21jlSMmEDN43OaavcdaB-7Phq0.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1111
content-type: image/svg+xml
content-md5: XoNKd1w7P5P4P3xI5ShiVw==
last-modified: Tue, 10 Jan 2023 09:29:56 GMT
etag: 0x8DAF2ED3CCCFE9D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f6fea025-d01e-0027-5720-d0f795000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=348797
expires: Wed, 06 Dec 2023 19:04:45 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af30
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/fdVZU4ttbw8NDRm6H3I5BW3_vCo.svg
200 OK 671 B URL GET HTTP/3 r.bing.com/rp/fdVZU4ttbw8NDRm6H3I5BW3_vCo.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash d9ed1a42342f37695571419070f8e818
7dd559538b6d6f0f0d0d19ba1f7239056dffbc2a
0c1e2169110dd2b16f43a9bc2621b78cc55423d769b0716edaa24f95e8c2e9fe
GET /rp/fdVZU4ttbw8NDRm6H3I5BW3_vCo.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 671
content-type: image/svg+xml
content-md5: 2e0aQjQvN2lVcUGQcPjoGA==
last-modified: Mon, 15 Aug 2022 21:45:00 GMT
etag: 0x8DA7F07674FBF82
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e19ea37e-501e-00b6-4e92-226850000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=132813
expires: Mon, 04 Dec 2023 07:05:01 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af31
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/4L4QdyjTv0HYE2Ig2ol9eYoqxg8.svg
200 OK 1.1 kB URL GET HTTP/3 r.bing.com/rp/4L4QdyjTv0HYE2Ig2ol9eYoqxg8.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (796), with CRLF line terminators
Hash 91cd11cfcca65cface96153268d71f63
e0be107728d3bf41d8136220da897d798a2ac60f
8ee1e6d7a487c38412d7b375ac4a6bd7e47f70858055eeb7957226ada05544be
GET /rp/4L4QdyjTv0HYE2Ig2ol9eYoqxg8.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1101
content-type: image/svg+xml
content-md5: kc0Rz8ymXPrOlhUyaNcfYw==
last-modified: Fri, 12 Aug 2022 20:45:00 GMT
etag: 0x8DA7CA3867FC831
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: adc41e54-901e-0086-2e09-15d69f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.097b1060.1686747743.2aab8902, 0.097b1060.1686747764.2aac12e8, 0.2a7b1060.1687568922.2d70b24a, 0.3d7b1060.1689052474.2206a8cd, 0.21aedd58.1689771282.bd10a3b, 0.0f4f2417.1701540688.106af32
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=8950493
expires: Fri, 15 Mar 2024 08:26:21 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/Fsa_OI0AplCnVoXGca8ALOo0S0s.svg
200 OK 282 B URL GET HTTP/3 r.bing.com/rp/Fsa_OI0AplCnVoXGca8ALOo0S0s.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash e38795b634154ec1ff41c6bcda54ee52
16c6bf388d00a650a75685c671af002cea344b4b
66b589f920473f0fd69c45c8e3c93a95bb456b219cba3d52873f2a3a1880f3f0
GET /rp/Fsa_OI0AplCnVoXGca8ALOo0S0s.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 282
content-type: image/svg+xml
content-md5: 44eVtjQVTsH/Qca82lTuUg==
last-modified: Mon, 15 Aug 2022 17:30:24 GMT
etag: 0x8DA7EE3D63BB0A6
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9727cd26-501e-006d-41c0-9eae6d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.2f1bdd58.1699949708.1f243ae, 0.0f4f2417.1701540688.106af33
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=12314787
expires: Tue, 23 Apr 2024 06:57:55 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/UYtUYDcn1oZlFG-YfBPz59zejYI.svg
200 OK 964 B URL GET HTTP/3 r.bing.com/rp/UYtUYDcn1oZlFG-YfBPz59zejYI.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (964), with no line terminators
Hash 88e3ed3dd7eee133f73ffb9d36b04b6f
518b54603727d68665146f987c13f3e7dcde8d82
a39ab0a67c08d907eddb18741460399232202c26648d676a22ad06e9c1d874cb
GET /rp/UYtUYDcn1oZlFG-YfBPz59zejYI.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 964
content-type: image/svg+xml
content-md5: iOPtPdfu4TP3P/udNrBLbw==
last-modified: Mon, 15 Aug 2022 20:49:31 GMT
etag: 0x8DA7EFFA703EB5F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b5f2f746-601e-0059-48c0-9e9da5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.edf41602.1700638847.116af097, 0.0f4f2417.1701540688.106af54
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=14627419
expires: Mon, 20 May 2024 01:21:47 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/kiGH9ukZK6Q4hvtDtwwVc1yvueg.svg
200 OK 1.4 kB URL GET HTTP/3 r.bing.com/rp/kiGH9ukZK6Q4hvtDtwwVc1yvueg.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 620580657e8a45b4a7b8450b8da5cd32
922187f6e9192ba43886fb43b70c15735cafb9e8
91de3100632e986cdb6897793ef1b2a8655b15ed4145098ca489856c043d207e
GET /rp/kiGH9ukZK6Q4hvtDtwwVc1yvueg.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1391
content-type: image/svg+xml
content-md5: YgWAZX6KRbSnuEULjaXNMg==
last-modified: Mon, 15 Aug 2022 21:56:20 GMT
etag: 0x8DA7F08FCE8967A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 49cc60c1-d01e-0001-43fa-2345fa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=287692
expires: Wed, 06 Dec 2023 02:06:20 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af55
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/KC_nX2_tPPyFvVw1RK20Yu1FyDk.svg
200 OK 726 B URL GET HTTP/3 r.bing.com/rp/KC_nX2_tPPyFvVw1RK20Yu1FyDk.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (557), with CRLF line terminators
Hash 6601e4a25ab847203e1015b32514b16c
282fe75f6fed3cfc85bd5c3544adb462ed45c839
6e5d3fff70eec85ff6d42c84062076688cb092a3d605f47260dbbe6b3b836b21
GET /rp/KC_nX2_tPPyFvVw1RK20Yu1FyDk.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 726
content-type: image/svg+xml
content-md5: ZgHkolq4RyA+EBWzJRSxbA==
last-modified: Mon, 15 Aug 2022 17:39:27 GMT
etag: 0x8DA7EE519EF54EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7f4b1ec6-601e-0082-2fc0-9e5b98000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=13554674
expires: Tue, 07 May 2024 15:22:42 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af56
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/NnFHhz2jL6yzChtIhaB5IIVKY5k.svg
200 OK 1.1 kB URL GET HTTP/3 r.bing.com/rp/NnFHhz2jL6yzChtIhaB5IIVKY5k.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (872), with CRLF line terminators
Hash c04c8834ac91802186e6ce677ae4a89d
367147873da32facb30a1b4885a07920854a6399
46cc84ba382b065045db005e895414686f2e76b64af854f5ad1ac0df020c3bdb
GET /rp/NnFHhz2jL6yzChtIhaB5IIVKY5k.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Mon, 15 Aug 2022 17:43:38 GMT
etag: 0x8DA7EE5AFDCD0E6
akamai-grn: 0.ce054917.1694197956.1b9b8489, 0.c8054917.1699951046.1504ae25, 0.0f4f2417.1701540688.106af57
content-length: 1111
content-type: image/svg+xml
content-md5: wEyINKyRgCGG5s5neuSonQ==
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: dd758786-401e-0035-2ec0-9e8c45000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=10157707
expires: Fri, 29 Mar 2024 07:46:35 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/hx-eea1zqtCz4K0bW2uH_oN7Fs4.jpg
200 OK 3.8 kB URL GET HTTP/3 r.bing.com/rp/hx-eea1zqtCz4K0bW2uH_oN7Fs4.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=GIMP 2.10.18, datetime=2020:04:16 19:04:38], progressive, precision 8, 160x160, components 3\012- data
Hash 299a479a2f7f1f30d09545ca8cc5d162
871f9e79ad73aad0b3e0ad1b5b6b87fe837b16ce
b314ead01e8e89c964273418bb1117d24dfe01e4838e7a1b46fa19f64699af05
GET /rp/hx-eea1zqtCz4K0bW2uH_oN7Fs4.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3791
content-type: image/jpeg
content-md5: KZpHmi9/HzDQlUXKjMXRYg==
last-modified: Tue, 27 Dec 2022 02:22:53 GMT
etag: 0x8DAE7B14238457E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: cd9cc9cb-b01e-0091-68d7-217f94000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=52665
expires: Sun, 03 Dec 2023 08:49:13 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af59
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/95z5wMy4UcfbSSSlSw780vQ5jKA.jpg
200 OK 5.4 kB URL GET HTTP/3 r.bing.com/rp/95z5wMy4UcfbSSSlSw780vQ5jKA.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:08:01 11:38:22], progressive, precision 8, 160x160, components 3\012- data
Hash 69d162774f894ff8b920330e376b7a62
f79cf9c0ccb851c7db4924a54b0efcd2f4398ca0
c9faa34663fe19eb4d8c007bf00ad7c4bc993f70c9fc42a04801eccdd59008f7
GET /rp/95z5wMy4UcfbSSSlSw780vQ5jKA.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5387
content-type: image/jpeg
content-md5: adFid0+JT/i5IDMON2t6Yg==
last-modified: Tue, 27 Dec 2022 02:26:51 GMT
etag: 0x8DAE7B1D074A0DB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 835147a0-201e-0023-094f-ea7a92000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.2c18dd58.1701464282.886d2f0, 0.0f4f2417.1701540688.106af5a
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=37416
expires: Sun, 03 Dec 2023 04:35:04 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/GJDmKr3_TS3Qpm6KEL9UKUQKUO4.jpg
200 OK 6.8 kB URL GET HTTP/3 r.bing.com/rp/GJDmKr3_TS3Qpm6KEL9UKUQKUO4.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:08:01 11:40:12], progressive, precision 8, 160x160, components 3\012- data
Hash 0c41ee31b04e978b4882d17690f03a3a
1890e62abdff4d2dd0a66e8a10bf5429440a50ee
97785743a5ffc303ff8b7b465cd12af8403f7eed2b2d19687e118e2621059741
GET /rp/GJDmKr3_TS3Qpm6KEL9UKUQKUO4.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6817
content-type: image/jpeg
content-md5: DEHuMbBOl4tIgtF2kPA6Og==
last-modified: Tue, 27 Dec 2022 02:22:53 GMT
etag: 0x8DAE7B142389397
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 66015554-201e-0048-0dcf-210711000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=49245
expires: Sun, 03 Dec 2023 07:52:13 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af5b
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/ln5TQq6AIWfcBlduDk-5bnaJMpY.jpg
200 OK 4.4 kB URL GET HTTP/3 r.bing.com/rp/ln5TQq6AIWfcBlduDk-5bnaJMpY.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:58:04], progressive, precision 8, 160x160, components 3\012- data
Hash a98a08bdb99b8422c9dc9d6fdd9387c3
967e5342ae802167dc06576e0e4fb96e76893296
5fab9ee214738e71d6c01392ebc7b1eec09ef8e19ca508ef28154e3e7a769acf
GET /rp/ln5TQq6AIWfcBlduDk-5bnaJMpY.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4409
content-type: image/jpeg
content-md5: qYoIvbmbhCLJ3J1v3ZOHww==
last-modified: Tue, 27 Dec 2022 02:26:51 GMT
etag: 0x8DAE7B1D074A0DB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 355f2d25-301e-0000-5fe1-ebe051000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=119075
expires: Mon, 04 Dec 2023 03:16:03 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af5c
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/dbmNS45xQvD1diApY1T2HExvOo8.jpg
200 OK 4.9 kB URL GET HTTP/3 r.bing.com/rp/dbmNS45xQvD1diApY1T2HExvOo8.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:53:43], progressive, precision 8, 160x160, components 3\012- data
Hash fda2ceae0679611937e6e71f701a36ab
75b98d4b8e7142f0f57620296354f61c4c6f3a8f
b818c1e9b0b46cccdc158aca581c3c5f4a9bd3dda380da03af52f43f14f5651e
GET /rp/dbmNS45xQvD1diApY1T2HExvOo8.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Tue, 27 Dec 2022 02:26:51 GMT
etag: 0x8DAE7B1D07452CB
akamai-grn: 0.1f18dd58.1701242972.3c76ab52, 0.0f4f2417.1701540688.106af5d
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 4934
content-type: image/jpeg
content-md5: /aLOrgZ5YRk35ucfcBo2qw==
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: bc3aa526-f01e-00d4-6bc0-9e5000000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=52225
expires: Sun, 03 Dec 2023 08:41:53 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/cfeVf2-uV0hUo3ToTbLjztuomWk.jpg
200 OK 4.5 kB URL GET HTTP/3 r.bing.com/rp/cfeVf2-uV0hUo3ToTbLjztuomWk.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:51:08], progressive, precision 8, 160x158, components 3\012- data
Hash 7aef4ccf6e47b9ba038365cd3d1f5693
71f7957f6fae574854a374e84db2e3cedba89969
08102ba7a0388b1afc9a351b3387b2ddeda846551303170e0273b2f305aeccb2
GET /rp/cfeVf2-uV0hUo3ToTbLjztuomWk.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4547
content-type: image/jpeg
content-md5: eu9Mz25HuboDg2XNPR9Wkw==
last-modified: Tue, 27 Dec 2022 02:23:08 GMT
etag: 0x8DAE7B14B5009AB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f36547ac-f01e-001a-3c29-248b00000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=307572
expires: Wed, 06 Dec 2023 07:37:40 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af5e
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/lvCKZ07bEYtoYmY62ifMzVa0RIE.jpg
200 OK 5.9 kB URL GET HTTP/3 r.bing.com/rp/lvCKZ07bEYtoYmY62ifMzVa0RIE.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:59:08], progressive, precision 8, 160x160, components 3\012- data
Hash f6e70da298349ad94215f0b4a6875037
96f08a674edb118b6862663ada27cccd56b44481
68b6356ba9f37ff17eae98bc094a493075f83d446b1e88f1ed32c2926e72e76c
GET /rp/lvCKZ07bEYtoYmY62ifMzVa0RIE.jpg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5944
content-type: image/jpeg
content-md5: 9ucNopg0mtlCFfC0podQNw==
last-modified: Tue, 27 Dec 2022 02:26:51 GMT
etag: 0x8DAE7B1D07479D4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d225c54a-501e-0074-349f-04d4a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=348678
expires: Wed, 06 Dec 2023 19:02:46 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106af5f
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.1260628466.workers.dev/th?id=OHR.GwaliorFortMP_ROW9892795132_1920x1080.webp
200 OK 237 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.GwaliorFortMP_ROW9892795132_1920x1080.webp
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 237 kB (237294 bytes)
Hash 7a809c73a62df450bcf7cf6b79118745
3a8887c30c546c7d21bb9a7c3f6335f346231965
933ff827df7dccad89a34054e4f5015c9ec60a20132612ac3d2192e4d13e5029
GET /th?id=OHR.GwaliorFortMP_ROW9892795132_1920x1080.webp HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/webp
content-length: 237294
cf-ray: 82f5885509a57128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
vary: Accept-Encoding
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5e0a655f.1701540688.641a2ea
server: cloudflare
GET r.bing.com/rp/3J5afDcWT7tohqS1ddzLYPW3R0A.gz.js
200 OK 1.4 kB URL GET HTTP/3 r.bing.com/rp/3J5afDcWT7tohqS1ddzLYPW3R0A.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (2996), with no line terminators
Hash a4a2895e7fbfe6377307b4c2aab9e525
399fcad73e013bab2867567b731b0e0eaa278a49
2f754393d443981912bdd0e557b8cf9724b956e552c50bfd75044848ac347aa5
GET /rp/3J5afDcWT7tohqS1ddzLYPW3R0A.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1404
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: gurnlOlmbSyE4M3ECGAROA==
last-modified: Thu, 31 Aug 2023 22:03:06 GMT
etag: 0x8DBAA6E0E67DD1B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f2a68672-b01e-00dc-63b6-23b078000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=258437
expires: Tue, 05 Dec 2023 17:58:45 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b2b2
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6d70709a63d3a39c8b32de83e3d87401%26pid%3dWdp&ehk=vEcjI9sZmjs3lbFsEK9CVX6AD8MMmoN%2bBjD37AL1tXM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 5.3 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6d70709a63d3a39c8b32de83e3d87401%26pid%3dWdp&ehk=vEcjI9sZmjs3lbFsEK9CVX6AD8MMmoN%2bBjD37AL1tXM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash f057deca90403fb597ea933a9bbb6c5d
81fba01b77fb2f84e167ae3dcbc700f6b5a69f99
0189b4bce2bb025b889c68839caacdeb6e3380c8125cdfe69d7b1dbdf035b825
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6d70709a63d3a39c8b32de83e3d87401%26pid%3dWdp&ehk=vEcjI9sZmjs3lbFsEK9CVX6AD8MMmoN%2bBjD37AL1tXM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 5340
cache-control: public, max-age=2439055
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b32e
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.1bcedbaf6d7176c4e71f23b8df008867%26pid%3dWdp&ehk=yGI%2fgHQsKo54%2bxTbvjNqvQgMhyUcJQVkSE6EvzHrZCc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.2 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.1bcedbaf6d7176c4e71f23b8df008867%26pid%3dWdp&ehk=yGI%2fgHQsKo54%2bxTbvjNqvQgMhyUcJQVkSE6EvzHrZCc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 51037bbeedcfbc53f964a97a0328baf7
d922057bb8dd169ddeb22ff893618e1409af85f2
53318583bd3e0451f30dfdd04bc3fce73a3c4423fdc610fc981eaa6af8204c9b
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.1bcedbaf6d7176c4e71f23b8df008867%26pid%3dWdp&ehk=yGI%2fgHQsKo54%2bxTbvjNqvQgMhyUcJQVkSE6EvzHrZCc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3188
cache-control: public, max-age=2566994
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b32f
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.857a73035f8d9563c32df116b9c4dd21%26pid%3dWdp&ehk=bGmrHA%2fupWkl%2f%2bmAXE8K3WdqMHzwmQSmMZSCPoGKxlc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.7 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.857a73035f8d9563c32df116b9c4dd21%26pid%3dWdp&ehk=bGmrHA%2fupWkl%2f%2bmAXE8K3WdqMHzwmQSmMZSCPoGKxlc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash b05ba84268ffb243adae2f533686fd8a
563d25ec94de8c2f77b754ae82e41780d7373fcc
2ac6d5622d082002875eb560ae94dc6ea21cbc278b00679d8d5eed9d9c51318d
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.857a73035f8d9563c32df116b9c4dd21%26pid%3dWdp&ehk=bGmrHA%2fupWkl%2f%2bmAXE8K3WdqMHzwmQSmMZSCPoGKxlc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2711
cache-control: public, max-age=2591646
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b330
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.bdca2644547becd62c42a3b052001d59%26pid%3dWdp&ehk=FTeh%2f8CDe1RsfDMx2TJnpkzqDLzlwI1%2bCRQfI1jVjbA%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.6 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.bdca2644547becd62c42a3b052001d59%26pid%3dWdp&ehk=FTeh%2f8CDe1RsfDMx2TJnpkzqDLzlwI1%2bCRQfI1jVjbA%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 4e906c019dff5c27d922e50f2cba32ea
6f75ef39a969480ed8c482f2c4601db3a67f375e
da48d9c3c9ea4e96b76c61ced8116446edb5506e745818a281fc9ec9a0d0a8f1
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.bdca2644547becd62c42a3b052001d59%26pid%3dWdp&ehk=FTeh%2f8CDe1RsfDMx2TJnpkzqDLzlwI1%2bCRQfI1jVjbA%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2583
cache-control: public, max-age=2583611
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b331
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.8524a332e0dff02b21fd780011d7428e%26pid%3dWdp&ehk=JOxXqSDePI8pK7hW5ubWreDwdItnuVxzJnRtbQCbOjo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.9 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.8524a332e0dff02b21fd780011d7428e%26pid%3dWdp&ehk=JOxXqSDePI8pK7hW5ubWreDwdItnuVxzJnRtbQCbOjo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 34c18c1b01d74d9aec19f85bd634a382
3e5875387f7e2af6914c37003a45fe41aefbebe2
0d6f43a12344037adf6317ef7d816406b3916544e3c74e9988b67a6d3fec01c3
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.8524a332e0dff02b21fd780011d7428e%26pid%3dWdp&ehk=JOxXqSDePI8pK7hW5ubWreDwdItnuVxzJnRtbQCbOjo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2893
cache-control: public, max-age=2585081
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b332
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.c9f7b0f748a060d5d19aca87189fa81e%26pid%3dWdp&ehk=U9Qo6JIMkmufmvB%2f8iq%2bBOQHJpSRsE47hZUw3tGvo9o%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 4.0 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.c9f7b0f748a060d5d19aca87189fa81e%26pid%3dWdp&ehk=U9Qo6JIMkmufmvB%2f8iq%2bBOQHJpSRsE47hZUw3tGvo9o%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 2b0dc5294b2596cd8b9f2fcb9f77fa1f
85d7039cf5eb97cb9ba76e68eaffd3ce4b861fc8
7f1ded06ef12863d68a7bac995da3fbcb8717798a72c1642d55422cec336ada4
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.c9f7b0f748a060d5d19aca87189fa81e%26pid%3dWdp&ehk=U9Qo6JIMkmufmvB%2f8iq%2bBOQHJpSRsE47hZUw3tGvo9o%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3998
cache-control: public, max-age=2516632
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b333
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.eb41d71a7a450f2d31d9f5941a644ddc%26pid%3dWdp&ehk=yV59N9tNLDNJ3DUL1smvpbzNsTl20bIGVH71DI3OOac%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.3 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.eb41d71a7a450f2d31d9f5941a644ddc%26pid%3dWdp&ehk=yV59N9tNLDNJ3DUL1smvpbzNsTl20bIGVH71DI3OOac%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 418ee67f47b718814c34e332e6f31d75
f7ec76a999ac56737980422bc1f625b81e5da298
a2a655d66b183da4062353b523aec429960b7f6487b3f8dc4ffc6fd45cad3df1
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.eb41d71a7a450f2d31d9f5941a644ddc%26pid%3dWdp&ehk=yV59N9tNLDNJ3DUL1smvpbzNsTl20bIGVH71DI3OOac%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3339
cache-control: public, max-age=2579116
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b334
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2aec774097348958cc7ed8cfa9d33a7e%26pid%3dWdp&ehk=JtMr5QPdCk4AB3eBfZAwxQHlA%2bl5u3vIxE28zRCT%2fMk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 4.8 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2aec774097348958cc7ed8cfa9d33a7e%26pid%3dWdp&ehk=JtMr5QPdCk4AB3eBfZAwxQHlA%2bl5u3vIxE28zRCT%2fMk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash d8bf3df192af7435a02818349c4b95e3
c4c1d77c7e63a16afb2f440f8e2207207b6320de
d5a589ebb6eab5261684c09fc95387a84c5820e90ef41530bd116e12e8d5eba2
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2aec774097348958cc7ed8cfa9d33a7e%26pid%3dWdp&ehk=JtMr5QPdCk4AB3eBfZAwxQHlA%2bl5u3vIxE28zRCT%2fMk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 4817
cache-control: public, max-age=2512230
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b335
x-check-cacheable: YES
GET free.1260628466.workers.dev/hp/api/model
200 OK 12 kB URL GET HTTP/3 free.1260628466.workers.dev/hp/api/model
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (26293), with no line terminators
Hash e05e3ff205bd7a97338d8bb85dd63dfd
0dcc08b6c6d289e7e4333a0d57cfff3c6060768e
cad322eedfa346a61b84ad5b2ce73c97f5a769c2483a6d82f57da72ade94a3d0
GET /hp/api/model HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
Content-type: application/json
DNT: 1
Connection: keep-alive
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 82f58853a8297128-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=1ECF48E0699566B13B615B3B68026735; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=7907E4959B414B6B88E69374EAB45DDF&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_SS=SID=1ECF48E0699566B13B615B3B68026735; domain=.bing.com; path=/; secure; SameSite=None
ULC=; domain=.bing.com; expires=Fri, 01-Dec-2023 18:11:27 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0xMi0wMlQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIlRucyI6MCwiRGZ0IjpudWxsLCJNdnMiOjAsIkZsdCI6MCwiSW1wIjoxLCJUb2JicyI6MH0=; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5c0a655f.1701540687.53888616
x-eventid: 656b734f71fa4d40906f71420e86d8b5
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FY2XqAjP7CB5zW0TKNLde%2BaQqKLTw8SAsopzTPj51zq2nLj0a8Nv1wXfHXAk9OtC8CkGqcOl8wax9%2B3EHSxw2r7fQoWDuz3h39gBF4RRKTNBmfFT7tWSkUVNTFLowuA4dPpNB5XQ9RbjKR4ncp4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.103dcb2d238f625208ce515679a0c7ee%26pid%3dWdp&ehk=mSJ7HOSMjCWSkoiyH4lZ%2fBA2CJMpjKDTt4FORtdStTo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 6.0 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.103dcb2d238f625208ce515679a0c7ee%26pid%3dWdp&ehk=mSJ7HOSMjCWSkoiyH4lZ%2fBA2CJMpjKDTt4FORtdStTo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash f6ceba642b5b4d1a8f841cf4d843c4b5
c73d3e2440727aaf0f0ef56faaa9933b201b6df9
64334a24f3729ea7167bcfb59ec9403b9b628ca181d86a9fe356af313dbd7642
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.103dcb2d238f625208ce515679a0c7ee%26pid%3dWdp&ehk=mSJ7HOSMjCWSkoiyH4lZ%2fBA2CJMpjKDTt4FORtdStTo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 5987
cache-control: public, max-age=2574120
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b337
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6b4738ede4f2339d04269b73d3268132%26pid%3dWdp&ehk=lW1iVp6pE%2fDopcTuWt344GqbK7RAknxOj6FfGC6Izm0%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 5.7 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6b4738ede4f2339d04269b73d3268132%26pid%3dWdp&ehk=lW1iVp6pE%2fDopcTuWt344GqbK7RAknxOj6FfGC6Izm0%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 8c8d81fc12ef588619e119347aa469b9
6e7867382240dc80e8fffa4eacfbb0b1ab3c2dde
7f800b2c4336469fe41f673f1205af1c158799f5727a6f749a85d674250fe397
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6b4738ede4f2339d04269b73d3268132%26pid%3dWdp&ehk=lW1iVp6pE%2fDopcTuWt344GqbK7RAknxOj6FfGC6Izm0%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 5665
cache-control: public, max-age=2438788
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b338
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.78545df691d49d48745eef95f62a2bc8%26pid%3dWdp&ehk=tjdCRrZ3%2bk6UC4YBk8TSElXMkSjh9JVxlr9KQrRkuio%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 4.4 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.78545df691d49d48745eef95f62a2bc8%26pid%3dWdp&ehk=tjdCRrZ3%2bk6UC4YBk8TSElXMkSjh9JVxlr9KQrRkuio%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 3584af9a3e69586f28febf012ae5781f
10d39ad35b0be5b05c98bf2a7a87ad59d19d628e
785f3f2b316a75ceaad1a8aae598d40946de8345799027953c1d2b6ef7b04b73
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.78545df691d49d48745eef95f62a2bc8%26pid%3dWdp&ehk=tjdCRrZ3%2bk6UC4YBk8TSElXMkSjh9JVxlr9KQrRkuio%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 4352
cache-control: public, max-age=2516623
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b339
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2ae96b9651e06ce8b603916d9f172757%26pid%3dWdp&ehk=BbNUygihjJGulm3yaNTeXI1C6KJ79OK%2fxE69npP82sA%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.6 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2ae96b9651e06ce8b603916d9f172757%26pid%3dWdp&ehk=BbNUygihjJGulm3yaNTeXI1C6KJ79OK%2fxE69npP82sA%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 4a8bd2301a801cc0cc1c49ab5df59ac9
39be26b9e9e26fa9306944952e9b70e1d54ff651
4a939d74ca88deb9fce2cc4a76ce2e95e7f269f644d9848922097979477be577
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2ae96b9651e06ce8b603916d9f172757%26pid%3dWdp&ehk=BbNUygihjJGulm3yaNTeXI1C6KJ79OK%2fxE69npP82sA%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2648
cache-control: public, max-age=2434668
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b33a
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6676c7c4d1596b136ecd6a28c724fc63%26pid%3dWdp&ehk=3kP%2beTp7Dv%2bRts6pOQG7TFIEX3hU6X2Uuhcn2cktYaI%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.4 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6676c7c4d1596b136ecd6a28c724fc63%26pid%3dWdp&ehk=3kP%2beTp7Dv%2bRts6pOQG7TFIEX3hU6X2Uuhcn2cktYaI%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 31c8bc8c763ffdbd13248cc798629ab5
31e907cffa6d2a84e4913032b3f40aaa85c6798c
44cf06b053942ef7c82811909113c58b600084374252b06ba1137eec88654df3
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6676c7c4d1596b136ecd6a28c724fc63%26pid%3dWdp&ehk=3kP%2beTp7Dv%2bRts6pOQG7TFIEX3hU6X2Uuhcn2cktYaI%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2386
cache-control: public, max-age=2452206
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b33b
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.ad82688dbe918767b63c782bda55308c%26pid%3dWdp&ehk=IfO89MAclzi2UgqmhMylGv5JQ%2fwCtp9fIjOc6N%2fjQVQ%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 1.9 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.ad82688dbe918767b63c782bda55308c%26pid%3dWdp&ehk=IfO89MAclzi2UgqmhMylGv5JQ%2fwCtp9fIjOc6N%2fjQVQ%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 1a3dc2b0211f9dc8461a250962646468
f15b8c5fdb2b412f3a3ec256121c4aa1c07530f6
ae91d77e6bde0351d859a1a20ae8508eec3745cc6f76504a9cb13d1ea1e70f66
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.ad82688dbe918767b63c782bda55308c%26pid%3dWdp&ehk=IfO89MAclzi2UgqmhMylGv5JQ%2fwCtp9fIjOc6N%2fjQVQ%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 1920
cache-control: public, max-age=2522982
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b33c
x-check-cacheable: YES
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.3ddfdb52b164d3d1a3431ca096ed3b82%26pid%3dWdp&ehk=HFHGzUvpKbRQ7JDTmWFsq5wGIWFw5DaV1qSKLAHmA48%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.6 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.3ddfdb52b164d3d1a3431ca096ed3b82%26pid%3dWdp&ehk=HFHGzUvpKbRQ7JDTmWFsq5wGIWFw5DaV1qSKLAHmA48%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 09d7adcde34a6db0c08587c4fa38546e
76c1e3ca0e47cd964f114aaa8a54a30af80fdc48
df48d15b734e3565a1a6f3da50ac00a206800fb21f470566adf944ee04498880
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.3ddfdb52b164d3d1a3431ca096ed3b82%26pid%3dWdp&ehk=HFHGzUvpKbRQ7JDTmWFsq5wGIWFw5DaV1qSKLAHmA48%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3611
cache-control: public, max-age=2517848
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b33d
x-check-cacheable: YES
GET r.bing.com/rp/gXjXcmZTDxs2-O-ZaLfJ0o5tmjY.gz.js
200 OK 633 B URL GET HTTP/3 r.bing.com/rp/gXjXcmZTDxs2-O-ZaLfJ0o5tmjY.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1228), with no line terminators
Hash 04e46d18c015e7c22cb2e4b43dcefd05
212f9f2089a5f85033160582dccb1b41a7e4cd15
a8172a1cd35702e0679aa2fc817640738b09d8c2a1bacf4a132e68d314407744
GET /rp/gXjXcmZTDxs2-O-ZaLfJ0o5tmjY.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 633
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ajID9MmZrFleacboLdSqjQ==
last-modified: Mon, 01 May 2023 19:03:13 GMT
etag: 0x8DB4A76B69F33BD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 45cba09d-801e-0051-441f-2387aa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=193241
expires: Mon, 04 Dec 2023 23:52:09 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b3d6
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.1260628466.workers.dev/hp/api/v1/imagegallery?format=json&ssd=20231202_0800&
200 OK 6.2 kB URL GET HTTP/3 free.1260628466.workers.dev/hp/api/v1/imagegallery?format=json&ssd=20231202_0800&
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10974), with no line terminators
Hash 752933651593374249f24817495ab820
23a9f5768c197d5202f5959e2a789531758eb92b
b85fc3a167ac1c3646aebc6f83b7be1f62f0b8a0ef6947875de0891ab652c1e9
GET /hp/api/v1/imagegallery?format=json&ssd=20231202_0800& HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
Content-type: application/json
DNT: 1
Connection: keep-alive
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 82f588564ae17128-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=03A6802EAD83640C1F2F93F5AC19652A; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=9D78824938C349D18FAF553C06E36CEB&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_SS=SID=03A6802EAD83640C1F2F93F5AC19652A; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5c0a655f.1701540688.538887ac
x-eventid: 656b7350ad4f4c86b99521bec566f80e
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LmEZyPDRKGGtdUBInhFCV7Ps08jtq574wDYxf3l%2BTUKiuiL770%2F117MNrwtJcKAhbI0e7%2BFh%2FsRZJJGFTq0cjwLU58dcXPY%2Fne5pgVdCaaLn7MwuCG%2BLdj1Vt7V9946sBfiCAImOnRX1fDWZcO0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET free.1260628466.workers.dev/th?id=OHR.JasperDarkSky_ROW7527441566_1920x1080.jpg&w=720
200 OK 64 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.JasperDarkSky_ROW7527441566_1920x1080.jpg&w=720
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x405, components 3\012- data
Hash 049a8695b6948c7890ea7ba7b474736d
01d1514bd993de5b15d11ded19c36b4db9074c3c
851c425f9e3163a4517cfb596aca38844a4ca9de3b91f4c76b6a6d0b646e9a85
GET /th?id=OHR.JasperDarkSky_ROW7527441566_1920x1080.jpg&w=720 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 64063
cf-ray: 82f588570b7a7128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5c0a655f.1701540688.53888820
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/th?id=OHR.AssiniboineProvincialPark_ROW9470886401_1920x1080.jpg&w=360
200 OK 17 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.AssiniboineProvincialPark_ROW9470886401_1920x1080.jpg&w=360
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 360x202, components 3\012- data
Hash a54a2203a18b1809a4786bbaccca6148
0531494fd54a711fc90389d3385e2ba1b4490316
88d8bd48960146acdeea7157866ab895a0880f990b24f8f84928184049770b41
GET /th?id=OHR.AssiniboineProvincialPark_ROW9470886401_1920x1080.jpg&w=360 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 16599
cf-ray: 82f588570b837128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.cf0a655f.1701540688.3e8f6824
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/th?id=OHR.TrotternishStorr_ROW9568788023_1920x1080.jpg&w=360
200 OK 13 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.TrotternishStorr_ROW9568788023_1920x1080.jpg&w=360
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 360x202, components 3\012- data
Hash 0bd7d54fd846660e01818c7f2801dd60
c5018492fe5ad021ce585577b899bb5e2f37668d
5c56f0be2da0a14d1ca0c8839d666e15e01205161dafd9d9ad8d986521bf3061
GET /th?id=OHR.TrotternishStorr_ROW9568788023_1920x1080.jpg&w=360 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 12667
cf-ray: 82f588570b7d7128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5e0a655f.1701540688.641a441
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/th?id=OHR.TajoRiver_ROW8810692657_1920x1080.jpg&w=360
200 OK 17 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.TajoRiver_ROW8810692657_1920x1080.jpg&w=360
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 360x202, components 3\012- data
Hash e34a2d524b8d2b33ac8a2574d3080df1
5729a69e76f8d33237594c709b5f0ccb160f6ab0
12542797d6ed58e2fa732f3f777a59cb6fe878e82af81a77a202eb4f6183e9ec
GET /th?id=OHR.TajoRiver_ROW8810692657_1920x1080.jpg&w=360 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 17376
cf-ray: 82f588571b877128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5c0a655f.1701540688.53888826
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/th?id=OHR.SchwerinerSchloss_ROW9723994138_1920x1080.jpg&w=360
200 OK 14 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.SchwerinerSchloss_ROW9723994138_1920x1080.jpg&w=360
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 360x202, components 3\012- data
Hash 319ca3a362b57984a80d5430b15adc81
16a58ae6a4aab3079934f4b39ead27c3bbced447
3bee9dec0e169516fdec2989b6d590e98956469455b0d4e586340ab4c156ad20
GET /th?id=OHR.SchwerinerSchloss_ROW9723994138_1920x1080.jpg&w=360 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 14320
cf-ray: 82f588570b807128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5c0a655f.1701540688.53888823
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/th?id=OHR.BradgateFallow_ROW8870334567_1920x1080.jpg&w=360
200 OK 18 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.BradgateFallow_ROW8870334567_1920x1080.jpg&w=360
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 360x202, components 3\012- data
Hash fdd7ebcfcb313853e89c2dafd176eae4
7273d857b323d8148f1e2b7376d8faef00bd2495
4e4f9a68ba646b65b15dd89a72c99444104fd9ef79af9a51cd3638250a024d2b
GET /th?id=OHR.BradgateFallow_ROW8870334567_1920x1080.jpg&w=360 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 18235
cf-ray: 82f588571b867128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5e0a655f.1701540688.641a446
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/th?id=OHR.RioNegro_ROW9293014046_1920x1080.jpg&w=360
200 OK 10 kB URL GET HTTP/3 free.1260628466.workers.dev/th?id=OHR.RioNegro_ROW9293014046_1920x1080.jpg&w=360
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 360x202, components 3\012- data
Hash ba3d306252e6c0946cba8ade9e52a8ed
d04effc197f8d47d1c2947f8bb85bbd5c19d8664
9b687f0900bfe65adf456d3f323f0f64c6c7b9dcf5007d85e50c015c366aa946
GET /th?id=OHR.RioNegro_ROW9293014046_1920x1080.jpg&w=360 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/jpeg
content-length: 10131
cf-ray: 82f588571b847128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: public, max-age=691200
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
alt-svc: h3=":443"; ma=86400
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
timing-allow-origin: *
x-cdn-traceid: 0.5e0a655f.1701540688.641a44c
vary: Accept-Encoding
server: cloudflare
GET free.1260628466.workers.dev/rp/fHZP5vAMq4BYyuujjrdIIIijePQ.png
200 OK 22 kB URL GET HTTP/3 free.1260628466.workers.dev/rp/fHZP5vAMq4BYyuujjrdIIIijePQ.png
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type PNG image data, 926 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash f0d11cde238eb54a334858a3b0432a3f
7c764fe6f00cab8058caeba38eb7482088a378f4
579adf148a5905868140df9075b90a2ff33c9070dfd35b3ab869a2d9aacd9a96
GET /rp/fHZP5vAMq4BYyuujjrdIIIijePQ.png HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: image/png
content-length: 22297
cf-ray: 82f588576bc97128-OSL
cf-cache-status: MISS
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=432000, no-transform, immutable
etag: 0x8DB71A14429C2A2
last-modified: Tue, 20 Jun 2023 15:16:05 GMT
vary: Accept-Encoding
akamai-amd-bc-debug: [a=2.21.96.54,b=490135875,c=c,d=1701209502,h=200,k=46,l=0,n=SE_AB_STOCKHOLM,o=20940,r=46,p=22297]
alt-svc: h3=":443"; ma=86400
content-md5: 8NEc3iOOtUozSFijsEMqPw==
x-cdn-traceid: 0.be0a655f.1701540688.13052093
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 242e9938-101e-0070-24fa-215328000000
x-ms-version: 2009-09-19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=knVVbujZakeDO7cgR2ew4o7cu0PGKY1SW3YWpau4%2FmoqwKXcOm5FdmTa1z98mizI7y76c1IFrSw3oxy%2BsxvvejdV43OKYmTUgPKT7XKidoT1ScmSpve3ii5EOzqrplijJ4vkrHYmL6DYDZTmR7s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
GET r.bing.com/rp/-oGw7zHbSP6ud-S56UAZNKYHlGY.gz.js
200 OK 189 B URL GET HTTP/3 r.bing.com/rp/-oGw7zHbSP6ud-S56UAZNKYHlGY.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1f62e9fdc6ca43f3fc2c4fa56856f368
75add74c4e04db88023404099b9b4aaea6437ae7
e1436445696905df9e8a225930f37015d0ef7160eb9a723bafc3f9b798365df6
GET /rp/-oGw7zHbSP6ud-S56UAZNKYHlGY.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 189
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: eRzv0jmlCkXrO9K8SpfWKQ==
last-modified: Mon, 01 May 2023 19:02:39 GMT
etag: 0x8DB4A76A23BC756
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 25e7c967-901e-00e4-56a2-2314b8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=249630
expires: Tue, 05 Dec 2023 15:31:58 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b765
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/N0NZj2UoTgAcpHMO-3FYmE5C7G4.gz.js
200 OK 160 B URL GET HTTP/3 r.bing.com/rp/N0NZj2UoTgAcpHMO-3FYmE5C7G4.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 51a9ea95d5ed461ed98ac3d23a66aa15
62fbb857b873bd79bee7f16d0766a452fa2798a3
a5b4181611e951faecd6c164d704569c633e95fe68d3d1934b911a089ebf70e8
GET /rp/N0NZj2UoTgAcpHMO-3FYmE5C7G4.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 160
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: Fsl7AHL1UDrd0rg5v5ti+A==
last-modified: Mon, 01 May 2023 19:02:55 GMT
etag: 0x8DB4A76AC095FCC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 075413ea-b01e-004a-1424-23b9a9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=195587
expires: Tue, 05 Dec 2023 00:31:15 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b789
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/8srl0LOx92Ew0yyAq2m2e33cq7I.gz.js
200 OK 259 B URL GET HTTP/3 r.bing.com/rp/8srl0LOx92Ew0yyAq2m2e33cq7I.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (426), with no line terminators
Hash 857a0de0bbf14f3427a1afa5cd985bce
0c1d2e767f07e5c0f14ea64980db213d379cc6f7
3ed65f33193430c0b9db61ffe7f5fe27b29f86a28563992c3afc47d4c22c23d7
GET /rp/8srl0LOx92Ew0yyAq2m2e33cq7I.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 259
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: v7tZ/ztkya0GBN4voj+crw==
last-modified: Mon, 01 May 2023 19:02:47 GMT
etag: 0x8DB4A76A743B126
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c7a0cbdc-a01e-003d-3315-09964a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=264531
expires: Tue, 05 Dec 2023 19:40:19 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b7d7
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/Mt62GUgrdySmO3Hz6WvsY51OVCM.gz.js
200 OK 290 B URL GET HTTP/3 r.bing.com/rp/Mt62GUgrdySmO3Hz6WvsY51OVCM.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (423), with no line terminators
Hash 3a5049db26af9ce03db6a53d3541082d
934daea4edde2568ca02ab89af23fdcfeb57339a
af8c36defed55d79106513865f69933e546e1e4c361e41c29f65905ded009047
GET /rp/Mt62GUgrdySmO3Hz6WvsY51OVCM.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 290
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: nRjeKHDCzIA360jfIiZTGA==
last-modified: Mon, 01 May 2023 19:03:06 GMT
etag: 0x8DB4A76B2849499
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3b77c03e-401e-0047-6692-ff8b0a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=61165
expires: Sun, 03 Dec 2023 11:10:53 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b806
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/FGPg8EdzobIQOzM59dg7NfaOobo.gz.js
200 OK 288 B URL GET HTTP/3 r.bing.com/rp/FGPg8EdzobIQOzM59dg7NfaOobo.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (425), with no line terminators
Hash 016ecfdb34031f881fa5e34dfbd0b7a1
16d3ba1049939d00ae47aad053993b4762d9b102
08021ed3bca5532304b597e636beb939ff7baa6d08dca4e94c0dde1fdf940389
GET /rp/FGPg8EdzobIQOzM59dg7NfaOobo.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 288
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: A4dabF4Eds5NYuYTpn2yHQ==
last-modified: Mon, 01 May 2023 19:03:05 GMT
etag: 0x8DB4A76B22C774D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 438b479f-201e-006e-72c4-1bb57e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=164917
expires: Mon, 04 Dec 2023 16:00:05 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b828
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/DQQTu0f9ldw9QQHZ9i-TAYjSeD0.gz.js
200 OK 8.8 kB URL GET HTTP/3 r.bing.com/rp/DQQTu0f9ldw9QQHZ9i-TAYjSeD0.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (21819)
Hash 30280c218d3caaf6b04ec8c6f906e190
653d368efdd498caf65677e1d54f03dd18b026b5
d313c6fff97701cc24db9d84c8b0643ca7a82a01c0868517e6e543779985c46e
GET /rp/DQQTu0f9ldw9QQHZ9i-TAYjSeD0.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 8791
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: IlB8CLy1h/uOl+Tsmzlrhg==
last-modified: Wed, 28 Jun 2023 05:03:37 GMT
etag: 0x8DB779508390AE0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 28579f92-701e-0097-3d5e-eab65c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=58748
expires: Sun, 03 Dec 2023 10:30:36 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b877
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/qVpzYkc_URbHUlmGgx4K0RYXSw0.gz.js
200 OK 801 B URL GET HTTP/3 r.bing.com/rp/qVpzYkc_URbHUlmGgx4K0RYXSw0.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1648), with no line terminators
Hash 17691d7face6fa529a6a72c2e48ea168
9ccfa021b47a7088d1525b9e02e4efcba28e2c64
607a2ad3079710205734fb04e35c084a01c3ff2a66ba3299b25ecbc6cadcecdd
GET /rp/qVpzYkc_URbHUlmGgx4K0RYXSw0.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 801
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: MuAowIseFlT6zmp8ZS32aw==
last-modified: Mon, 01 May 2023 19:03:18 GMT
etag: 0x8DB4A76B9F86BFD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2ead0988-701e-0055-7582-230aad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=236102
expires: Tue, 05 Dec 2023 11:46:30 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b8fe
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/zMc7zM25hj2i5UjTDYH71wUyWYI.gz.js
200 OK 1.5 kB URL GET HTTP/3 r.bing.com/rp/zMc7zM25hj2i5UjTDYH71wUyWYI.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (3278), with no line terminators
Hash 92bee1b96c65a17a6a8f2f053b47abf4
8dcc98fba79f4527bafcd49f3d072739c4a48ca6
39438227e61a6612ef17b02b2e6c38da7e1cf80d0a469104c874b82fbe3c1ac8
GET /rp/zMc7zM25hj2i5UjTDYH71wUyWYI.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1544
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: URIUikI+19m50/noO0NVWA==
last-modified: Mon, 01 May 2023 19:03:45 GMT
etag: 0x8DB4A76C9C6D513
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3da3d9c4-a01e-00bb-2e8a-185af3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=52745
expires: Sun, 03 Dec 2023 08:50:33 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b6c5
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/jhk_5I4f9VeUBzSlHc_enKyc3Ko.gz.js
200 OK 512 B URL GET HTTP/3 r.bing.com/rp/jhk_5I4f9VeUBzSlHc_enKyc3Ko.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (938), with no line terminators
Hash dbf771b1f0b05393d18bc55fd6dd94a7
bc4fd6c9efb2e87d2d30f19dd78c9188b6d76b2d
f2c5677d58718ae60f7f4e98351643afeb8ad7fdfe4b2b6af0b7b63108cb7071
GET /rp/jhk_5I4f9VeUBzSlHc_enKyc3Ko.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 512
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: IJYKxTXJToOmhJu5Y+Ge9g==
last-modified: Mon, 01 May 2023 19:02:18 GMT
etag: 0x8DB4A7695A1C32E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f71d847e-301e-0005-6a35-233804000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=203013
expires: Tue, 05 Dec 2023 02:35:01 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b9a5
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/yjXVFOxf6UdoTA2BOwEH6n4ClfI.gz.js
200 OK 738 B URL GET HTTP/3 r.bing.com/rp/yjXVFOxf6UdoTA2BOwEH6n4ClfI.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1274), with no line terminators
Hash a969230a51dba5ab5adf5877bcc28cfa
7c4cdc6b86ca3b8a51ba585594ea1ab7b78b8265
8e572950cbda0558f7b9563ce4f5017e06bc9c262cf487e33927a948f8d78f7f
GET /rp/yjXVFOxf6UdoTA2BOwEH6n4ClfI.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 738
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: IdwtZGA9MByocbZXe9uLtg==
last-modified: Mon, 01 May 2023 19:03:43 GMT
etag: 0x8DB4A76C8CAA4A3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: aef7be7a-201e-006e-5ddd-23b57e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=274927
expires: Tue, 05 Dec 2023 22:33:35 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b9ff
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/ihC7RhTVhw2ULO_1rMUWydIu_rA.gz.js
200 OK 835 B URL GET HTTP/3 r.bing.com/rp/ihC7RhTVhw2ULO_1rMUWydIu_rA.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (1587), with no line terminators
Hash cb027ba6eb6dd3f033c02183b9423995
368e7121931587d29d988e1b8cb0fda785e5d18b
04a007926a68bb33e36202eb27f53882af7fd009c1ec3ad7177fba380a5fb96f
GET /rp/ihC7RhTVhw2ULO_1rMUWydIu_rA.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 835
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: 1TXsxNVn3RseZNq3n6BUeA==
last-modified: Mon, 01 May 2023 19:02:20 GMT
etag: 0x8DB4A7696F574EE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ade96bd6-001e-0021-0fba-22cea4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=150228
expires: Mon, 04 Dec 2023 11:55:16 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bb02
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/cJksCHwhB_Z32I0ytWPMUDsybak.gz.js
200 OK 178 B URL GET HTTP/3 r.bing.com/rp/cJksCHwhB_Z32I0ytWPMUDsybak.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a5363c37b617d36dfd6d25bfb89ca56b
31682afce628850b8cb31faa8e9c4c5ec9ebb957
8b4d85985e62c264c03c88b31e68dbabdcc9bd42f40032a43800902261ff373f
GET /rp/cJksCHwhB_Z32I0ytWPMUDsybak.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 178
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: bN4C0ra+ctbnBbTcyL619g==
last-modified: Mon, 01 May 2023 19:03:25 GMT
etag: 0x8DB4A76BE181C6A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ae2d3754-d01e-00b1-75fd-15fe44000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=330553
expires: Wed, 06 Dec 2023 14:00:41 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bb81
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/PgVOrYqTvqK49IEnVEVlZVYfA1U.gz.js
200 OK 393 B URL GET HTTP/3 r.bing.com/rp/PgVOrYqTvqK49IEnVEVlZVYfA1U.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (576), with no line terminators
Hash f5712e664873fde8ee9044f693cd2db7
2a30817f3b99e3be735f4f85bb66dd5edf6a89f4
1562669ad323019cda49a6cf3bddece1672282e7275f9d963031b30ea845ffb2
GET /rp/PgVOrYqTvqK49IEnVEVlZVYfA1U.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 393
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: GEN21UcxZJtjS9dUSwGqSA==
last-modified: Mon, 01 May 2023 19:03:19 GMT
etag: 0x8DB4A76BA68ADFF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 8ba9a302-701e-00e5-6ece-21b113000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=48616
expires: Sun, 03 Dec 2023 07:41:44 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bbce
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/njelUYNJ9xk_aIzI9GKLCNIsxD8.gz.js
200 OK 221 B URL GET HTTP/3 r.bing.com/rp/njelUYNJ9xk_aIzI9GKLCNIsxD8.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (328), with no line terminators
Hash cdddab121eb434876615391ad4107b9a
8038444c80b8e76ddf8ae5c00ab5784207e5aeff
243d212a9ff764ccda9b19c3c823b2f408a0718e56a3e7a8b5b533e108db56cb
GET /rp/njelUYNJ9xk_aIzI9GKLCNIsxD8.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 221
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: aWD4XETGiFm1C1Ea/JadzQ==
last-modified: Mon, 01 May 2023 19:03:34 GMT
etag: 0x8DB4A76C37A7E1D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6a396943-d01e-0037-5fe1-1e32fd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=120170
expires: Mon, 04 Dec 2023 03:34:18 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bbf8
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.1260628466.workers.dev/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
200 OK 3.0 kB URL GET HTTP/3 free.1260628466.workers.dev/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (12070), with no line terminators
Hash 772671a4eb66bb9c3175491098d41857
d75a6973b3c497821357d773954d1c3fd0cdc54f
a2112eca0cf40443517ac93e223a784905fdbd6c43789c4cd924097d51ad7707
GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
Content-type: application/json
DNT: 1
Connection: keep-alive
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 82f58853a8277128-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=39EDD385B93364812C74C05EB84A65E7; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=A0C901A7E667411D92269C1D17C60077&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_SS=SID=39EDD385B93364812C74C05EB84A65E7; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5e0a655f.1701540687.641a13d
x-eventid: 656b734fcc6f4659a9c357c06e5f65e2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EvBobXAhby43aIoHX%2Btmf1Kpu7YpyRV3IVm2kiykckP7D98H6mTFzHDVhq%2B0ThcqAy%2Fkoo16fiRG9SE7HO7cR2RjpKsYa9IBECSgPQUDPK2%2BBZLpJq2N2T2gfqXbcH3TFSs90bhRBe6hOTXY33U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET r.bing.com/rp/pXVzgohStRjQefcwyp3z6bhIArA.gz.js
200 OK 507 B URL GET HTTP/3 r.bing.com/rp/pXVzgohStRjQefcwyp3z6bhIArA.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (924), with no line terminators
Hash 47442e8d5838baaa640a856f98e40dc6
54c60cad77926723975b92d09fe79d7beff58d99
15ed1579bccf1571a7d8b888226e9fe455aca5628684419d1a18f7cda68af89e
GET /rp/pXVzgohStRjQefcwyp3z6bhIArA.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 507
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: x+G+lCZu47Kw0twNFcZMOg==
last-modified: Mon, 01 May 2023 19:03:33 GMT
etag: 0x8DB4A76C2B87D41
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 95df8faf-501e-0064-70ed-eb11c9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=310782
expires: Wed, 06 Dec 2023 08:31:10 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bcb3
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/kzHfYwAwahpHm-ZU7kDOHkFbADU.gz.js
200 OK 1.5 kB URL GET HTTP/3 r.bing.com/rp/kzHfYwAwahpHm-ZU7kDOHkFbADU.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (3363), with no line terminators
Hash fabb77c7ae3fd2271f5909155fb490e5
cde0b1304b558b6de7503d559c92014644736f88
e482bf4baaa167335f326b9b4f4b83e806cc21fb428b988a4932c806d918771c
GET /rp/kzHfYwAwahpHm-ZU7kDOHkFbADU.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1541
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: VXQKTAHYa3rUIFPlZfmQpQ==
last-modified: Wed, 21 Jun 2023 19:01:24 GMT
etag: 0x8DB7289E8C9BE38
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1611b198-301e-003a-6016-22f0a7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=79654
expires: Sun, 03 Dec 2023 16:19:02 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bcf4
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/GK9SuRKiu0QbKYnVgoAlgmuWrNU.gz.js
200 OK 1.2 kB URL GET HTTP/3 r.bing.com/rp/GK9SuRKiu0QbKYnVgoAlgmuWrNU.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (2524), with no line terminators
Hash 17cdab99027114dbcbd9d573c5b7a8a9
42d65caae34eba7a051342b24972665e61fa6ae2
5ff6b0f0620aa14559d5d869dbeb96febc4014051fa7d5df20223b10b35312de
GET /rp/GK9SuRKiu0QbKYnVgoAlgmuWrNU.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1240
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: NAaNjvwmKkp0KjjfVNG3Rw==
last-modified: Mon, 01 May 2023 19:02:07 GMT
etag: 0x8DB4A768F7B68D4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: fee4e90b-b01e-001b-7010-22d4dc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=77249
expires: Sun, 03 Dec 2023 15:38:57 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bd28
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/uukG4aoFVhFS_w3yNb3N_d_l9XI.gz.js
200 OK 653 B URL GET HTTP/3 r.bing.com/rp/uukG4aoFVhFS_w3yNb3N_d_l9XI.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (1051), with no line terminators
Hash f76d06d7669e399dc0788bc5473562bb
159293d99346a27e2054a812451909de832ca0d1
23f0357ae77648ee38f39960e56507d87f8d690c48e759a0e054f6e691c843ec
GET /rp/uukG4aoFVhFS_w3yNb3N_d_l9XI.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 653
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: dH1ALXBQRg+oulb8xCKyzA==
last-modified: Mon, 01 May 2023 19:03:32 GMT
etag: 0x8DB4A76C224D260
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 5fa10a16-301e-002f-2b5e-eaed9a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=178857
expires: Mon, 04 Dec 2023 19:52:25 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bd4d
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rs/79/x4/nj/V9Lbi4rGakA-OjwcLcoh5jr1zfY.js?or=w
200 OK 356 B URL GET HTTP/3 r.bing.com/rs/79/x4/nj/V9Lbi4rGakA-OjwcLcoh5jr1zfY.js?or=w
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (520), with no line terminators
Hash f03cfee55a7f1e0b91dd062a5654fc3d
57d2db8b8ac66a403e3a3c1c2dca21e63af5cdf6
39477bae95ee7073936851a67106a42f585454ebd6c4feadeacc818c52da49a4
GET /rs/79/x4/nj/V9Lbi4rGakA-OjwcLcoh5jr1zfY.js?or=w HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 356
content-type: application/x-javascript; charset=utf-8
server: Kestrel
access-control-allow-headers: *
access-control-allow-origin: *
content-encoding: br
last-modified: Thu, 12 Jan 2023 01:31:54 GMT
x-eventid: 6569cadf266f4331a5387228186a6753
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-as-instrumentationoptions: AppServerLoggingMaster=1
x-as-machinename: DUBEEAP0000E0CB
x-as-suppresssetcookie: 1
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-IB2df0bnv99sW1UAVlgHGxRh6WU7JH47l879D06iobc='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}, {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
cache-control: public, max-age=323451
expires: Wed, 06 Dec 2023 12:02:19 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106bd83
timing-allow-origin: *
GET free.1260628466.workers.dev/hp/api/v1/momentsintime?format=json&ssd=20231202_0800&
200 OK 979 B URL GET HTTP/3 free.1260628466.workers.dev/hp/api/v1/momentsintime?format=json&ssd=20231202_0800&
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 28e36f39929ff85c50ef9469cb16d4b3
0bc7c00a6e04293f1a87b0dfca9dcec1c3bfe336
9a74e6f08fcd7361596c75310cdec58592ada508b955a71f8353f85e27cdb13b
GET /hp/api/v1/momentsintime?format=json&ssd=20231202_0800& HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
Content-type: application/json
DNT: 1
Connection: keep-alive
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 82f58855fa817128-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=2117D55CC55469A70BEBC687C46C6847; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=BCE0E1B553914BB1B55A721C9A6291C2&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_SS=SID=2117D55CC55469A70BEBC687C46C6847; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5c0a655f.1701540688.53888774
x-eventid: 656b73506cec4de5a1c7d35eddab8867
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dZvhOBSN5NKRG2EAhI4SaMdK%2F5p9FXdNiiFPpXY%2Fg8B5IvtFD4eEXVWzKytN9SdXJoaLSVG1HhQcCQQaUil6qu%2BaIiFhZWCuaBLzcYlkLI4mScL%2FF%2BZHcNq4%2F%2FDG4dFYTdYPogIczwrthdmzY7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET r.bing.com/rp/y_61f0IFfv8Q_a9jAO8tmOS3Gkk.gz.js
200 OK 5.6 kB URL GET HTTP/3 r.bing.com/rp/y_61f0IFfv8Q_a9jAO8tmOS3Gkk.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (28499), with no line terminators
Hash 435d4389cf37ebdf488b09d33328e64c
e4897917bb729f94808672478a32fad44ceeb350
f56c5b27ad30b13345dedb5081ac381a0be37a454242d2d289b90c5f44cddda8
GET /rp/y_61f0IFfv8Q_a9jAO8tmOS3Gkk.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5645
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: VFSIVgFjOJib7KKBdRZSgg==
last-modified: Fri, 01 Dec 2023 21:09:22 GMT
etag: 0x8DBF2B1CAE10001
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 50c72ba4-701e-0049-4acb-24a834000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=377115
expires: Thu, 07 Dec 2023 02:56:43 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106be30
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/SO02eTikN8ZV7bCSXFKur4CKSoQ.gz.js
200 OK 160 B URL GET HTTP/3 r.bing.com/rp/SO02eTikN8ZV7bCSXFKur4CKSoQ.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 6c2c6db3832d53062d303cdff5e2bd30
b7a064a64ceae5c9009ef7d6d8f63b90d3933c9d
06b77ee16a2cd34acd210b4f2b6e423762ea8874bb26ae5a37db9dd01a00ff70
GET /rp/SO02eTikN8ZV7bCSXFKur4CKSoQ.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 160
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: uJ47yL0Sp1fVl3nUOL3X8g==
last-modified: Tue, 06 Jun 2023 10:30:38 GMT
etag: 0x8DB66791261E315
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 17de54f7-401e-0071-3bab-23fc0d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=253652
expires: Tue, 05 Dec 2023 16:39:00 GMT
date: Sat, 02 Dec 2023 18:11:28 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106be65
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/-4gFBdS7ddZ3KedeXnuTcXwYQ5U.gz.js
200 OK 1.1 kB URL GET HTTP/3 r.bing.com/rp/-4gFBdS7ddZ3KedeXnuTcXwYQ5U.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (3102), with no line terminators
Hash dd6a528c55708896155fea98148725fa
53c48069abe54fd30d9fff1d7fd8c287afbbe1b1
635421af44598c7601907a7ad263a3a8925be6495ba349382f02805dbe668566
GET /rp/-4gFBdS7ddZ3KedeXnuTcXwYQ5U.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1118
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: AkjWeVPfNttEBDfGZbcT6A==
last-modified: Thu, 23 Nov 2023 12:26:25 GMT
etag: 0x8DBEC1F6967A5BD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 249c80b6-e01e-001a-2e9c-227bf9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=137202
expires: Mon, 04 Dec 2023 08:18:11 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540689.106beae
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/g2mFaePdYzQOubI8JEItbebrED8.gz.css
200 OK 389 B URL GET HTTP/3 r.bing.com/rp/g2mFaePdYzQOubI8JEItbebrED8.gz.css
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (824), with no line terminators
Hash 6d94f94bfb17721a8da8b53731eb0601
ae540db8d146e17cfc3d09d46b31bd16b3308a6d
21829c74fce2c9bbbb3099a7a487de71465ed712410c32bc6c69884db07a90dd
GET /rp/g2mFaePdYzQOubI8JEItbebrED8.gz.css HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 389
content-type: text/css; charset=utf-8
content-encoding: gzip
content-md5: 3/vZUXOW4wNHGLr6SU0xpQ==
last-modified: Mon, 01 May 2023 19:01:02 GMT
etag: 0x8DB4A7668AEE2D1
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 45ba6f31-901e-00d2-2f20-1e63bf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.3e18dd58.1701260260.32d5ddaf, 0.0f4f2417.1701540689.106bef6
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=39856
expires: Sun, 03 Dec 2023 05:15:45 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/_ykiGO1K5rjAQeICdJheT3jfLeY.gz.css
200 OK 301 B URL GET HTTP/3 r.bing.com/rp/_ykiGO1K5rjAQeICdJheT3jfLeY.gz.css
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (589), with no line terminators
Hash 7a903a859615d137e561051c006435c2
7c2cbeb8b0e83e80954b14360b4c6e425550bc54
281d6234fd292800c2a5dbd14e524c9cee0d4438188b0b7d873abf41515a7666
GET /rp/_ykiGO1K5rjAQeICdJheT3jfLeY.gz.css HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 301
content-type: text/css; charset=utf-8
content-encoding: gzip
content-md5: HJS5PMy7uv8AUjv1kxMX/A==
last-modified: Mon, 01 May 2023 19:00:50 GMT
etag: 0x8DB4A7661918D40
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: efd49d89-801e-00b5-4219-238934000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=190991
expires: Mon, 04 Dec 2023 23:14:40 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540689.106bef7
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
POST free.1260628466.workers.dev/rewardsapp/ncheader?ver=41625786&IID=SERP.5021&IG=87E20653A1B94544B3330D8DE7885A32
200 OK 1.1 kB URL POST HTTP/3 free.1260628466.workers.dev/rewardsapp/ncheader?ver=41625786&IID=SERP.5021&IG=87E20653A1B94544B3330D8DE7885A32
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type HTML document, ASCII text, with very long lines (906)
Hash 280577677bf5f3995766dba9fd090061
51be97fe97d964229db8f58790141aead90910d5
23b8931c0852a11e3ab5111d513f7d7aa966a98edd7d0382dc30effd473d983b
POST /rewardsapp/ncheader?ver=41625786&IID=SERP.5021&IG=87E20653A1B94544B3330D8DE7885A32 HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:29 GMT
content-type: text/html; charset=utf-8
cf-ray: 82f58859dddc7128-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, no-store, must-revalidate
expires: -1
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
pragma: no-cache
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=07B0A658081966B225D3B5830952671C; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=89DEDB6F3A614CE8B45C186AB7091C74&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_SS=SID=07B0A658081966B225D3B5830952671C; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5e0a655f.1701540688.641a5e0
x-eventid: 656b735016534ee19ee440a6e614e413
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DBl5HWMw2LaC8My%2BBXGwLqyXunFM77Bw0KOvne13cQuUblJz8nVeyW%2FOi%2FNOXynoVSsAX6tsxG4jbRis43C5ClN%2BzFiAQwGFshws4wxijZfSXlX3JWLqfmYWAFA6ML4TORBL4vBOpMFxRzvQ%2FfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET r.bing.com/rp/_XlDG2lWZo6smsxs2J6FeeNw3J8.gz.css
200 OK 3.6 kB URL GET HTTP/3 r.bing.com/rp/_XlDG2lWZo6smsxs2J6FeeNw3J8.gz.css
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (10425), with no line terminators
Hash b74765f3d1ed99c2fac3fa5e4202dc4b
a48b155dbbc65470f381282a1f9e21ff2dd46b27
1792b996f940322e3222d3abe4b08a1ae60cd7fda3e186fa008d14c0e541551d
GET /rp/_XlDG2lWZo6smsxs2J6FeeNw3J8.gz.css HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
last-modified: Thu, 23 Nov 2023 00:00:55 GMT
etag: 0x8DBEBB743C34C91
akamai-grn: 0.def41602.1701416036.11ddab97, 0.0f4f2417.1701540689.106bef9
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3579
content-type: text/css; charset=utf-8
content-encoding: gzip
content-md5: NKeLXAMMDD6i+c3/4IUVeg==
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: eb5266d7-c01e-00f9-79a6-221904000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=141404
expires: Mon, 04 Dec 2023 09:28:13 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
GET r.bing.com/rp/_503Xx_7SHSIr66ELrEWZEoRIOk.gz.js
200 OK 3.3 kB URL GET HTTP/3 r.bing.com/rp/_503Xx_7SHSIr66ELrEWZEoRIOk.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (8484), with no line terminators
Hash 768c025cadc4cbd980733f771feba772
376949ee88fcfabccd50a1976bd1e6ac20eb0ddc
bd014843a7d652b50956a5faaa927f66f810c8d2086b53a487fe9b45bcdca1b1
GET /rp/_503Xx_7SHSIr66ELrEWZEoRIOk.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3288
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: RwZu4auakRAhMa8MmfX8SQ==
last-modified: Tue, 10 Oct 2023 21:42:42 GMT
etag: 0x8DBC9D9D51E7363
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 29e44fdc-801e-0083-46ae-0dfe33000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=93758
expires: Sun, 03 Dec 2023 20:14:07 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540689.106bf52
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET r.bing.com/rp/Alln0oN_VmvjOEEiVqgqsaYDgMU.gz.js
200 OK 33 kB URL GET HTTP/3 r.bing.com/rp/Alln0oN_VmvjOEEiVqgqsaYDgMU.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 844d73e18ad668fa1e9057452080d941
213e6c9c9979db3c5e00393b592dac1cf8d77b8f
6fb0ed92a382c45de7f7df08f989d08573e06bec4239f6a3a0841141e990db1d
GET /rp/Alln0oN_VmvjOEEiVqgqsaYDgMU.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 33285
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: j9dlR3EG+bOy0DIAixQ8gA==
last-modified: Fri, 01 Dec 2023 12:56:19 GMT
etag: 0x8DBF26CE9757C71
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e950b51d-a01e-008d-7ba3-242df4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=360095
expires: Wed, 06 Dec 2023 22:13:04 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540689.106bf5d
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.1260628466.workers.dev/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%2C%22Referer%22%3A%22https%3A%2F%2Fwww.google.com%2Fq%3Dedtunnel%22%7D%7D&IG=87E20653A1B94544B3330D8DE7885A32&IID=Bnp
200 OK 10 kB URL GET HTTP/3 free.1260628466.workers.dev/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%2C%22Referer%22%3A%22https%3A%2F%2Fwww.google.com%2Fq%3Dedtunnel%22%7D%7D&IG=87E20653A1B94544B3330D8DE7885A32&IID=Bnp
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (14098)
Hash 44dc7dd4fbe3f6e0ed6ff31a04b3771e
53ee2a2c786255360431deb3e494c5b96eba76f5
45b3e680f89fe0f63f365573d40264e2adfad6be1c737f7fce66bd0583b90b38
GET /notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%2C%22Referer%22%3A%22https%3A%2F%2Fwww.google.com%2Fq%3Dedtunnel%22%7D%7D&IG=87E20653A1B94544B3330D8DE7885A32&IID=Bnp HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: text/html; charset=utf-8
cf-ray: 82f588566b027128-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache
expires: -1
vary: Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
pragma: no-cache
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=271815D2EC5F6FC803330609ED086EF6; domain=.bing.com; path=/; HttpOnly
MUIDB=392FE21D2959657609D0F1C628366424; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=A6E75D8B47014F31817FDD7DE6D27307&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:28 GMT; path=/; secure; SameSite=None
_SS=SID=271815D2EC5F6FC803330609ED086EF6; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5e0a655f.1701540688.641a3aa
x-eventid: 656b7350bcf541e9822ed5772e9ac0ba
x-msedge-ref: Ref A: 014EEB46CD084CE7B470F585578AE3C0 Ref B: OSL30EDGE0311 Ref C: 2023-12-02T18:11:28Z
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FWk1wMI5tLRFexAi7eZoLioSxf0xwAUEGSWJYUkHPGAIlJ2HFmcj3%2F157WvFcz0w9zCsFDOdK7Px93QYDyOslyL6rJWY0wF4SMmOyRd8wO1KxrclNEgcs%2BWBtj5UQij8NTlAd4sLQOKEIyKgbTk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=4d1755bf-7d43-41d9-bcc8-0a18fd553d1d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2287E20653A1B94544B3330D8DE7885A32%22%7d
200 OK 674 B URL GET HTTP/1.1 login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=4d1755bf-7d43-41d9-bcc8-0a18fd553d1d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2287E20653A1B94544B3330D8DE7885A32%22%7d
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://free.1260628466.workers.dev/
Certificate IssuerDigiCert Inc
Subjectstamp2.login.microsoftonline.com
Fingerprint2E:B3:86:45:AB:31:92:6E:11:85:D8:B1:22:CC:4C:E3:41:D7:48:04
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 21 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1166), with no line terminators
Hash a5f6ae4a7c2d60d4950c9842efd96287
c68d91357544c4187437d0eeaf3ea1f6a71c5bb0
4b2862cc14ce29d32a902cb5140238fcd2f4a548982448c5c9d6e220f678f27e
GET /common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=4d1755bf-7d43-41d9-bcc8-0a18fd553d1d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2287E20653A1B94544B3330D8DE7885A32%22%7d HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 99d0a08f-d303-4d18-af6f-b6096ec01f00
x-ms-ests-server: 2.1.16790.7 - WEULR1 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.ATEAMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-vatudRBT4aYNki3q-x3_jIOLSQiWtMeUGKoBf6pas1shyt9RFm5Ww2H3guXgh1sTNGo-xwTVL1lv-ATbhtu6OVw9TyxbbiChmL7uxk1JYwQgAA; expires=Mon, 01-Jan-2024 18:11:29 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=ApmzZ2GbxrJLpvAP5exzg8eCeMQLAQAAAFBq_dwOAAAA; expires=Mon, 01-Jan-2024 18:11:29 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAmoFfGtYxvRrNriQdPKIZ-XxyhbEZC8cWHPKuZrogDc_qTlUD4SPcncr3Z6Ui7PpZIRJDm-WI8xglWCyufcJAUuVXq5So_i8EhBhu8GYDLYYx1gWx8X6Mx9SFDGjJWOL0Hw6pwO8JRfVuF84HNY9fMqUvzwlSQKdiAlCsbEH7Wlf-EXYsPg_TBFRObq7iHAQcgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Sat, 02 Dec 2023 18:11:28 GMT
Content-Length: 674
GET www2.bing.com/ipv6test/test
64 B URL GET www2.bing.com/ipv6test/test
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
File type ASCII text, with no line terminators
Hash e82d9bd501b46df5cb2b650af9e1b126
0fe6876226e88d8104ed51cb6329eb172bba8d68
c2ba8fccfc980bcc8fc24e7a41bfcfee88cca9331c8d4d62890d7dfab4a12226
GET /ipv6test/test HTTP/1.1
Host: www2.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=2B73F091257C69051109E34A248968C2; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
MUIDB=2B73F091257C69051109E34A248968C2; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; HttpOnly
_EDGE_S=F=1&SID=388B415BEEEC64181E335280EF196560; domain=.bing.com; path=/; HttpOnly
_EDGE_V=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=E4D0D03F38254CDCBD2FD7FFC268A039&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_SS=SID=388B415BEEEC64181E335280EF196560; domain=.bing.com; path=/; secure; SameSite=None
x-eventid: 656b7351abac42bdb95a26bd5004fc0f
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 873CCC098474418E82F569417D0D0C6B Ref B: OSL30EDGE0515 Ref C: 2023-12-02T18:11:29Z
date: Sat, 02 Dec 2023 18:11:28 GMT
X-Firefox-Spdy: h2
POST free.1260628466.workers.dev/rewardsapp/reportActivity?IG=87E20653A1B94544B3330D8DE7885A32&IID=SERP.5030&&src=hp
200 OK 747 B URL POST HTTP/3 free.1260628466.workers.dev/rewardsapp/reportActivity?IG=87E20653A1B94544B3330D8DE7885A32&IID=SERP.5030&&src=hp
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type HTML document, ASCII text, with very long lines (1572)
Hash 71cb8e9c3603f20f889b95b7b658b67f
2caa1fdbb487ee4a11d4e03d5e569842b67f3f23
d8cef4d1cc0f10ef3d5026f1e602391e1f59e60cc60ae24d79cc093f488ae6b0
POST /rewardsapp/reportActivity?IG=87E20653A1B94544B3330D8DE7885A32&IID=SERP.5030&&src=hp HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 48
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:29 GMT
content-type: text/html; charset=utf-8
cf-ray: 82f5885a4e327128-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache
expires: -1
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
pragma: no-cache
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=3F0B52931F186FD4190441481EDD6E47; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=DCF5162C2F854ABF9A00339BADAF995D&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_SS=R=0&RB=0&GB=0&RG=200&RP=0; domain=.bing.com; path=/; secure; SameSite=None
_RwBf=r=0&ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-12-02T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-12-02T18:11:29.0871563+00:00&rwred=0&wls=&wlb=&ccp=&lka=0&lkt=0&aad=0&TH=; domain=.bing.com; expires=Mon, 02-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_Rwho=u=d; domain=.bing.com; path=/; secure; HttpOnly; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5c0a655f.1701540689.53888a79
x-eventid: 656b73510f7d49d095027b5ade56c597
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f4irwxKL%2Fep2ktrZ0NNPsAx136Zu%2BI84gkcMLZ0HeK5kDr7kWD1S79BkQRn7sWWtKJ7w0ZAWTtZqzrrthqv60b%2BVp1RoQ5ISR2u1ivcNNsfoDjNHEm%2FUoFvKo2BKnERxTqX%2BRCpiEt5%2F9JNHCn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1701540687&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
302 Found 0 B URL GET HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1701540687&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://free.1260628466.workers.dev/
Certificate IssuerDigiCert Inc
Subjectlogin.live.com
FingerprintF6:95:3F:10:AD:8C:5F:52:2B:86:41:BA:29:A9:7F:BC:47:88:2D:0D
ValidityFri, 10 Nov 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.srf?wa=wsignin1.0&rpsnv=11&ct=1701540687&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: Sat, 02 Dec 2023 18:10:29 GMT
Location: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C106_BL2
x-ms-request-id: e2ce8ee1-6d2d-4b80-89ee-e31ca647014a
PPServer: PPV: 30 H: BL02PF93AA95108 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=e196306ecad74df19e49368f92159a88; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=264960<=1701540689&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DpON9c7kO0S9wf49xT1bpLGhAjln8HuloGIj31xHkhJay9F2yu3uXmlYpDzW2WDUjGA*geDGBJyTOEzQQlvgMxpk00epKUvYiODrViXcOiVdRXPNXauFyl9X!J3!wwfArqz8CfdUCsl!mmkPDVNc2bXWZlaKVT7M1gQCDgYviOI9FeuQEBDmG3Ngj2x0YurBll2FDqIi9mT86xMzdj!snKa5J042IB4DS2JtqYsz7fz8DGIMBwOMQv0gYTSrVROoo!pUa!pNV78EVTKXXNhO3wyJXKawYHF3XT*gQ8XMxMaMZtBXiY1!KW2LYANTaJINAQ$$; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Sat, 02 Dec 2023 18:11:28 GMT
Content-Length: 0
GET www.bing.com/secure/Passport.aspx?popup=1&ssl=1
200 OK 184 B URL GET HTTP/3 www.bing.com/secure/Passport.aspx?popup=1&ssl=1
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 232461ac46abfbe06a8a64325f27e147
4d67f58235f8b6b0bfa022c27e473a03602116b1
1915cb755b5d98010425c3fedba14e8d0ad08da3ca24f3248ab159bbdfc6ed32
GET /secure/Passport.aspx?popup=1&ssl=1 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: no-cache,no-store
pragma: no-cache
content-length: 184
content-type: text/html; charset=utf-8
content-encoding: br
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-eventid: 656b7351f9d44cf989b2689b888ae58b
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C36E994951904D29B02D56193CB09D21 Ref B: OSL30EDGE0216 Ref C: 2023-12-02T18:11:29Z
date: Sat, 02 Dec 2023 18:11:29 GMT
set-cookie: .AspNetCore.Cookies=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly
MUID=096929CD3075606A2DA43A16318061C7; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
MUIDB=096929CD3075606A2DA43A16318061C7; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; HttpOnly
_EDGE_S=F=1&SID=3D944EE2BA22627530755D39BBD763F2; domain=.bing.com; path=/; HttpOnly
_EDGE_V=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=848A0A30A09546E28F40834DA01452A2&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_SS=SID=3D944EE2BA22627530755D39BBD763F2; domain=.bing.com; path=/; secure; SameSite=None
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.0f4f2417.1701540689.106c833
POST free.1260628466.workers.dev/fd/ls/lsp.aspx
204 No Content 0 B URL POST HTTP/3 free.1260628466.workers.dev/fd/ls/lsp.aspx
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/xml
Content-Length: 12630
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sat, 02 Dec 2023 18:11:30 GMT
cf-ray: 82f588602c837128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
alt-svc: h3=":443"; ma=86400
x-cdn-traceid: 0.5e0a655f.1701540689.641a9fe
x-msedge-ref: Ref A: 1BE3A275714442C4B7A2D04FF862EA6E Ref B: OSL30EDGE0118 Ref C: 2023-12-02T18:11:29Z
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XkWAq3YD2LxXCmavRbfvOLoiD4aT4QdOWWHWvoA0ET0KCL0DZZN3a5LE5zwQk6aGX0wqmkl8qZFNqX3zrC27y07GZUOWl0dDB4cv%2FPj6k1aM1deWpLhc7Mk%2F30yPHmqTxQL1rfFMlTgV%2FJ1J8Gw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
POST free.1260628466.workers.dev/fd/ls/lsp.aspx
204 No Content 0 B URL POST HTTP/3 free.1260628466.workers.dev/fd/ls/lsp.aspx
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/xml
Content-Length: 508
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sat, 02 Dec 2023 18:11:34 GMT
cf-ray: 82f588793d807128-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
alt-svc: h3=":443"; ma=86400
x-cdn-traceid: 0.5c0a655f.1701540693.53889ea5
x-msedge-ref: Ref A: F8D9FCDC5B5646D5A990C4D708C696A3 Ref B: OSL30EDGE0517 Ref C: 2023-12-02T18:11:33Z
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IlptAzMjIq0xLp7Rz489qv%2FU2iAG%2Fzc8IgaSgpgoOh5OjA4DNsETvLZRezCxlmLPeHas76rGjrHue%2BZ8fo2rsQWCN605fAgL%2B5Ic%2BZNsfmFMHd2qAvnmW32w6aqh3WlPcDgy5tNW%2BtyTthXcxtQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A2167%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693567%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A2167%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693567%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A2167%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693567%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221280%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%221024%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22T%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692619%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692619%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A1657%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693056%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221280%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%221024%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22T%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692619%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692619%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A1657%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693056%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221280%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%221024%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692618%2C%22Name%22%3A%22T%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692619%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540692619%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A1657%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693056%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
POST www.bing.com/orgid/idtoken/conditional
200 OK 0 B URL POST HTTP/3 www.bing.com/orgid/idtoken/conditional
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /orgid/idtoken/conditional HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 693
Origin: https://login.microsoftonline.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: private
content-length: 1
content-type: text/html
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-eventid: 656b73517d0e4633a96225a8c2233833
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6F95795CB61C4E2AAFAC47D26FBB46FD Ref B: OSL30EDGE0309 Ref C: 2023-12-02T18:11:29Z
date: Sat, 02 Dec 2023 18:11:29 GMT
set-cookie: MUID=25B58A3A97CF6F33172199E196986E80; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
MUIDB=25B58A3A97CF6F33172199E196986E80; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; HttpOnly
_EDGE_S=F=1&SID=0472F996E7546E812910EA4DE6036F84; domain=.bing.com; path=/; HttpOnly
_EDGE_V=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=D59AE1F8C7DA413088799CF6AF437E4A&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_SS=SID=0472F996E7546E812910EA4DE6036F84; domain=.bing.com; path=/; secure; SameSite=None
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.0f4f2417.1701540689.106c482
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Give%20me%20a%20list%20of%20new%20hobbies%20I%20could%20pursue%20with%20limited%20free%20time%5C%22%2C%5C%22chipIndex%5C%22%3A1%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540698332%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Give%20me%20a%20list%20of%20new%20hobbies%20I%20could%20pursue%20with%20limited%20free%20time%5C%22%2C%5C%22chipIndex%5C%22%3A1%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540698332%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Give%20me%20a%20list%20of%20new%20hobbies%20I%20could%20pursue%20with%20limited%20free%20time%5C%22%2C%5C%22chipIndex%5C%22%3A1%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540698332%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1872%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1872%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1872%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.1260628466.workers.dev/ipv6test/test?FORM=MONITR
200 OK 64 B URL GET HTTP/3 free.1260628466.workers.dev/ipv6test/test?FORM=MONITR
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type ASCII text, with no line terminators
Hash e82d9bd501b46df5cb2b650af9e1b126
0fe6876226e88d8104ed51cb6329eb172bba8d68
c2ba8fccfc980bcc8fc24e7a41bfcfee88cca9331c8d4d62890d7dfab4a12226
GET /ipv6test/test?FORM=MONITR HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:29 GMT
content-type: text/html; charset=utf-8
cf-ray: 82f5885adec57128-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, no-store, must-revalidate
expires: -1
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
pragma: no-cache
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=1138D7EE74EE63763E6EC4357561623B; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=MONITR; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=7F6A6D8D287E4298B9B8EDD24A0FA2BC&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:29 GMT; path=/; secure; SameSite=None
_SS=SID=1138D7EE74EE63763E6EC4357561623B; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5e0a655f.1701540689.641a67d
x-eventid: 656b73516f50488284dd7e75dc6e55cb
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TD5REvWGtcY4GGKbgDVjSk5IcZdAVzfH1Zz76wn3jcVR%2FUFdXYwrhJQbNHtDRmwztMWkK%2Fz4cU91%2FpT2R20S2BIFN06KA0OdTC%2ByNRw5ngRutdIxU%2BA4QcDEu46CzbbcTmcuL5RKtc1ORqMLlnw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1658%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1658%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1658%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1818%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693218%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1818%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693218%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1818%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693218%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22time%22%3A1845%2C%22T%22%3A%22CI.Error%22%2C%22TS%22%3A1701540693244%2C%22Name%22%3A%22ImportedWidgetModuleErrorEvent%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22time%22%3A1845%2C%22T%22%3A%22CI.Error%22%2C%22TS%22%3A1701540693244%2C%22Name%22%3A%22ImportedWidgetModuleErrorEvent%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22time%22%3A1845%2C%22T%22%3A%22CI.Error%22%2C%22TS%22%3A1701540693244%2C%22Name%22%3A%22ImportedWidgetModuleErrorEvent%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1871%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1871%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1871%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET r.bing.com/rp/VbSztIaSY8XAi9dm3h6m51N3zH8.gz.css
200 OK 610 B URL GET HTTP/3 r.bing.com/rp/VbSztIaSY8XAi9dm3h6m51N3zH8.gz.css
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (610), with no line terminators
Hash f8a63d56887d438392803b9f90b4c119
993bd8b5eb0db6170ea2b61b39f89fad9bfeb5b5
ef156b16fdcf73f670e7d402d4e7980f6558609a39195729f7a144f2d7329bf3
GET /rp/VbSztIaSY8XAi9dm3h6m51N3zH8.gz.css HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 323
content-type: text/css; charset=utf-8
content-encoding: gzip
content-md5: laLCKUkbFiJ5cNd0Ixnxvg==
last-modified: Mon, 01 May 2023 19:00:38 GMT
etag: 0x8DB4A765A118ADC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: cf0ba25a-601e-002b-400b-209aea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: public, no-transform, max-age=244085
expires: Tue, 05 Dec 2023 13:59:34 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540689.106bef8
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1701540694239%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1701540694239%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1701540694239%2C%22Name%22%3A%22AnimationLoad%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1870%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1870%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1870%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693270%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A2153%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693552%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A2153%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693552%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A2153%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693552%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.4f97543030c272d9180faef5cb08ca55%26pid%3dWdp&ehk=7BOxt717ayMIa8Y%2f1SPDK2rmiJ98mI07ZVil1%2bAg%2b1Y%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.1 kB URL GET HTTP/3 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.4f97543030c272d9180faef5cb08ca55%26pid%3dWdp&ehk=7BOxt717ayMIa8Y%2f1SPDK2rmiJ98mI07ZVil1%2bAg%2b1Y%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash c031421b193406bcafbd9f6120c87328
e239561602ccf3a81bdec548463d47a3dfa4c997
de43eabaefd1cc127dd312e00080e9b60914fa904c262c692c0414d6eb897ede
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.4f97543030c272d9180faef5cb08ca55%26pid%3dWdp&ehk=7BOxt717ayMIa8Y%2f1SPDK2rmiJ98mI07ZVil1%2bAg%2b1Y%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3117
cache-control: public, max-age=2479829
date: Sat, 02 Dec 2023 18:11:28 GMT
x-cache: TCP_MEM_HIT from a23-36-79-15.deploy.akamaitechnologies.com (AkamaiGHost/11.3.2.1-52518411) (-)
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540688.106b336
x-check-cacheable: YES
GET r.bing.com/rp/W8bLYGpay8IFp3H_SrUDKaBAn30.gz.js
200 OK 2.7 kB URL GET HTTP/3 r.bing.com/rp/W8bLYGpay8IFp3H_SrUDKaBAn30.gz.js
IP
ASN #20940 Akamai International B.V.
Requested by https://free.1260628466.workers.dev/
Certificate IssuerMicrosoft Corporation
Subjectr.bing.com
Fingerprint23:E0:B1:D9:C5:02:8F:FE:35:CB:2A:E6:86:20:A8:83:F8:82:34:9B
ValidityWed, 18 Oct 2023 20:32:40 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (2813), with no line terminators
Hash dbc3c5c35e93739458f91cf44c6a0c9e
40401ef46d66a932084653cf0c24e12d5b74bf99
832a658d91eb40b707041a71fc0145441987ba4798065444085ed05163f32e78
GET /rp/W8bLYGpay8IFp3H_SrUDKaBAn30.gz.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://free.1260628466.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 1143
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: LKnj6r8gi/vMGaxQh/fz4g==
last-modified: Thu, 09 Nov 2023 08:38:10 GMT
etag: 0x8DBE0FF346B8A16
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 279630d7-f01e-00f2-37ba-23e26f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=259864
expires: Tue, 05 Dec 2023 18:22:33 GMT
date: Sat, 02 Dec 2023 18:11:29 GMT
vary: Accept-Encoding
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.0f4f2417.1701540689.106bf5e
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1854%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693253%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1854%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693253%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmomentsintime%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1854%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693253%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1854%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693253%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1854%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693253%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1854%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693253%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A16%2C%22time%22%3A1965%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1701540693365%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A16%2C%22time%22%3A1965%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1701540693365%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A16%2C%22time%22%3A1965%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1701540693365%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.1260628466.workers.dev/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=87E20653A1B94544B3330D8DE7885A32&
200 OK 48 kB URL GET HTTP/3 free.1260628466.workers.dev/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=87E20653A1B94544B3330D8DE7885A32&
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type HTML document, ASCII text, with very long lines (29136), with CRLF, LF line terminators
Hash a72ba825528b179d81070136c36922d3
d8ad9c5b25245fca649fe965b7560955d64f8b38
b8c9a4f90abafc9ce9e0fe7889c21a06c95d35af61eadb16678054aa00784eeb
GET /images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=87E20653A1B94544B3330D8DE7885A32& HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
Content-type: application/json
DNT: 1
Connection: keep-alive
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: text/html; charset=utf-8
cf-ray: 82f5885398227128-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=01D974F41F0F6EA12047672F1E186FE4; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=116F4E34CD604CE8B148F8C11DAA58FB&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_SS=SID=01D974F41F0F6EA12047672F1E186FE4; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5c0a655f.1701540687.53888603
x-eventid: 656b734f68df4c368529ab4d3475cc2a
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PtbJYacxap6yGOIpDROjgje0aVdF9y5uSIF599fG3pWxIhKqtO5%2BwKV0l7BGF67mR1NSD5eOSmAFoXrh9eaWNE8lbP7CHx24gdy38ZwxyLz7Anzf6ixdzIbH5K1pe1J%2F%2FHIo5NJoKgaSXiuU18U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1722%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693122%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1722%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693122%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1722%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693122%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Write%20step-by-step%20instructions%20to%20make%20pizza%20crust%20and%20give%20me%20the%20ingredient%20list%5C%22%2C%5C%22chipIndex%5C%22%3A0%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540693282%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%2C%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1909%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693308%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Write%20step-by-step%20instructions%20to%20make%20pizza%20crust%20and%20give%20me%20the%20ingredient%20list%5C%22%2C%5C%22chipIndex%5C%22%3A0%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540693282%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%2C%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1909%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693308%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Write%20step-by-step%20instructions%20to%20make%20pizza%20crust%20and%20give%20me%20the%20ingredient%20list%5C%22%2C%5C%22chipIndex%5C%22%3A0%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540693282%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%2C%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1909%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693308%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A2168%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693567%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A2168%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693567%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A2168%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693567%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1819%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693219%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1819%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693219%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1819%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693219%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1658%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1658%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodexnudge%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1658%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1946%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693345%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1946%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693345%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1946%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693345%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chips%5C%22%3A%5B%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DWrite%2520step-by-step%2520instructions%2520to%2520make%2520pizza%2520crust%2520and%2520give%2520me%2520the%2520ingredient%2520list%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Write%20step-by-step%20instructions%20to%20make%20pizza%20crust%20and%20give%20me%20the%20ingredient%20list%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DGive%2520me%2520a%2520list%2520of%2520new%2520hobbies%2520I%2520could%2520pursue%2520with%2520limited%2520free%2520time%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Give%20me%20a%20list%20of%20new%20hobbies%20I%20could%20pursue%20with%20limited%20free%20time%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DCreate%2520a%2520slogan%2520for%2520a%2520new%2520social%2520media%2520platform%2520that%2520specializes%2520in%2520sarcasm%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Create%20a%20slogan%20for%20a%20new%20social%20media%20platform%20that%20specializes%20in%20sarcasm%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DWrite%2520a%2520poem%2520with%2520vivid%2520imagery%2520that%2520doesn%2527t%2520rhyme%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Write%20a%20poem%20with%20vivid%20imagery%20that%20doesn%27t%20rhyme%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%5D%2C%5C%22chipsCount%5C%22%3A4%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540693263%2C%22Name%22%3A%22QueryRendered%22%2C%22FID%22%3A%22Codex%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chips%5C%22%3A%5B%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DWrite%2520step-by-step%2520instructions%2520to%2520make%2520pizza%2520crust%2520and%2520give%2520me%2520the%2520ingredient%2520list%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Write%20step-by-step%20instructions%20to%20make%20pizza%20crust%20and%20give%20me%20the%20ingredient%20list%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DGive%2520me%2520a%2520list%2520of%2520new%2520hobbies%2520I%2520could%2520pursue%2520with%2520limited%2520free%2520time%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Give%20me%20a%20list%20of%20new%20hobbies%20I%20could%20pursue%20with%20limited%20free%20time%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DCreate%2520a%2520slogan%2520for%2520a%2520new%2520social%2520media%2520platform%2520that%2520specializes%2520in%2520sarcasm%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Create%20a%20slogan%20for%20a%20new%20social%20media%20platform%20that%20specializes%20in%20sarcasm%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DWrite%2520a%2520poem%2520with%2520vivid%2520imagery%2520that%2520doesn%2527t%2520rhyme%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Write%20a%20poem%20with%20vivid%20imagery%20that%20doesn%27t%20rhyme%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%5D%2C%5C%22chipsCount%5C%22%3A4%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540693263%2C%22Name%22%3A%22QueryRendered%22%2C%22FID%22%3A%22Codex%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chips%5C%22%3A%5B%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DWrite%2520step-by-step%2520instructions%2520to%2520make%2520pizza%2520crust%2520and%2520give%2520me%2520the%2520ingredient%2520list%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Write%20step-by-step%20instructions%20to%20make%20pizza%20crust%20and%20give%20me%20the%20ingredient%20list%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DGive%2520me%2520a%2520list%2520of%2520new%2520hobbies%2520I%2520could%2520pursue%2520with%2520limited%2520free%2520time%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Give%20me%20a%20list%20of%20new%20hobbies%20I%20could%20pursue%20with%20limited%20free%20time%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DCreate%2520a%2520slogan%2520for%2520a%2520new%2520social%2520media%2520platform%2520that%2520specializes%2520in%2520sarcasm%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Create%20a%20slogan%20for%20a%20new%20social%20media%20platform%20that%20specializes%20in%20sarcasm%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%2C%7B%5C%22clickThroughUrl%5C%22%3A%5C%22https%3A%2F%2Fwww.bing.com%2Fsearch%3Fiscopilotedu%3D1%26sendquery%3D1%26q%3DWrite%2520a%2520poem%2520with%2520vivid%2520imagery%2520that%2520doesn%2527t%2520rhyme%5C%22%2C%5C%22fullText%5C%22%3Anull%2C%5C%22imageUrl%5C%22%3Anull%2C%5C%22modifiedBy%5C%22%3Anull%2C%5C%22modifiedTimestamp%5C%22%3A0%2C%5C%22prompt%5C%22%3A%5C%22%5C%22%2C%5C%22promptIconUrl%5C%22%3Anull%2C%5C%22promptSubtitle%5C%22%3Anull%2C%5C%22query%5C%22%3A%5C%22Write%20a%20poem%20with%20vivid%20imagery%20that%20doesn%27t%20rhyme%5C%22%2C%5C%22response%5C%22%3Anull%2C%5C%22type%5C%22%3A0%2C%5C%22category%5C%22%3Anull%7D%5D%2C%5C%22chipsCount%5C%22%3A4%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540693263%2C%22Name%22%3A%22QueryRendered%22%2C%22FID%22%3A%22Codex%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22rms-answers-HomepageVNext-PeregrineWidgets%22%2C%22error%22%3A%22TypeError%3A%20error%20loading%20dynamically%20imported%20module%22%2C%22time%22%3A1819%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693219%2C%22Name%22%3A%22ImportError%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22rms-answers-HomepageVNext-PeregrineWidgets%22%2C%22error%22%3A%22TypeError%3A%20error%20loading%20dynamically%20imported%20module%22%2C%22time%22%3A1819%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693219%2C%22Name%22%3A%22ImportError%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22rms-answers-HomepageVNext-PeregrineWidgets%22%2C%22error%22%3A%22TypeError%3A%20error%20loading%20dynamically%20imported%20module%22%2C%22time%22%3A1819%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693219%2C%22Name%22%3A%22ImportError%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A1657%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A1657%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A1657%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693057%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1732%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693131%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1732%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693131%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D87E20653A1B94544B3330D8DE7885A32%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1732%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693131%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540693627%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1701540693628%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1701540693646%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1701540693646%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1701540693962%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%22656b734ee4f548af9c7259a84ace9d28%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1701540694009%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%22656b734ee4f548af9c7259a84ace9d28%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1701540694010%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22T%22%3A%22CI.Mobile_Icon_V1_Shown%22%2C%22TS%22%3A1701540694126%2C%22Name%22%3A%22shown%22%2C%22FID%22%3A%22Show%22%7D%2C%7B%22T%22%3A%22CI.ASBundleLoad%22%2C%22TS%22%3A1701540694210%2C%22Name%22%3A%22AutoSuggestBootstrap%22%2C%22FID%22%3A%22AS%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22IsRewardUser%22%3A%22%22%2C%22IsAutoOpenFlyout%22%3A%22%22%2C%22SuppressionReason%22%3A%22NoTrigger%3APathIsNotSerp%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AutoOpenFlyoutFired%22%2C%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1701540694237%2C%22Name%22%3A%22AutoOpenFlyoutFired%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540693627%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1701540693628%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1701540693646%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1701540693646%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1701540693962%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%22656b734ee4f548af9c7259a84ace9d28%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1701540694009%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%22656b734ee4f548af9c7259a84ace9d28%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1701540694010%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22T%22%3A%22CI.Mobile_Icon_V1_Shown%22%2C%22TS%22%3A1701540694126%2C%22Name%22%3A%22shown%22%2C%22FID%22%3A%22Show%22%7D%2C%7B%22T%22%3A%22CI.ASBundleLoad%22%2C%22TS%22%3A1701540694210%2C%22Name%22%3A%22AutoSuggestBootstrap%22%2C%22FID%22%3A%22AS%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22IsRewardUser%22%3A%22%22%2C%22IsAutoOpenFlyout%22%3A%22%22%2C%22SuppressionReason%22%3A%22NoTrigger%3APathIsNotSerp%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AutoOpenFlyoutFired%22%2C%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1701540694237%2C%22Name%22%3A%22AutoOpenFlyoutFired%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1701540693627%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1701540693628%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1701540693646%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1701540693646%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1701540693962%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%22656b734ee4f548af9c7259a84ace9d28%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1701540694009%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%22656b734ee4f548af9c7259a84ace9d28%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1701540694010%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22T%22%3A%22CI.Mobile_Icon_V1_Shown%22%2C%22TS%22%3A1701540694126%2C%22Name%22%3A%22shown%22%2C%22FID%22%3A%22Show%22%7D%2C%7B%22T%22%3A%22CI.ASBundleLoad%22%2C%22TS%22%3A1701540694210%2C%22Name%22%3A%22AutoSuggestBootstrap%22%2C%22FID%22%3A%22AS%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22IsRewardUser%22%3A%22%22%2C%22IsAutoOpenFlyout%22%3A%22%22%2C%22SuppressionReason%22%3A%22NoTrigger%3APathIsNotSerp%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AutoOpenFlyoutFired%22%2C%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1701540694237%2C%22Name%22%3A%22AutoOpenFlyoutFired%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.1260628466.workers.dev/hp/api/v1/codexnudge?format=json&
200 OK 1.7 kB URL GET HTTP/3 free.1260628466.workers.dev/hp/api/v1/codexnudge?format=json&
IP
Requested by https://free.1260628466.workers.dev/
Certificate IssuerGoogle Trust Services LLC
Subject1260628466.workers.dev
Fingerprint89:36:37:5F:B0:EB:0C:94:C9:C9:35:53:9C:6F:45:3A:45:FD:F9:B4
ValidityWed, 01 Nov 2023 03:45:17 GMT - Tue, 30 Jan 2024 03:45:16 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1867), with no line terminators
Hash 180b96b2ed13efd550968f7789e874e0
947c2992b8764e394d0c53c5d4fcb7ced0e59fca
258312d39a3cef7a70b4b35b7123408cdc6c14824246b86b53734e2ca947a7a3
GET /hp/api/v1/codexnudge?format=json& HTTP/1.1
Host: free.1260628466.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://free.1260628466.workers.dev/
Content-type: application/json
DNT: 1
Connection: keep-alive
Cookie: MUIDB=392FE21D2959657609D0F1C628366424
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 18:11:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 82f5885398257128-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUID=392FE21D2959657609D0F1C628366424; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_EDGE_S=SID=13E5C857873E6BD712BADB8C862D6A56; domain=.bing.com; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=8CC27B74F625451DAE2EF28D5A5F0EF2&dmnchg=1; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20231202; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 26-Dec-2024 18:11:27 GMT; path=/; secure; SameSite=None
_SS=SID=13E5C857873E6BD712BADB8C862D6A56; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cdn-traceid: 0.5c0a655f.1701540687.53888609
x-eventid: 656b734f0e344aa1be9e697aefda6bd4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qDUHrKqZ0dMzS969jNxXvyLL5SWw1C24xSF4PvIEmPMGnbJ6FkTIhA%2Blhui2BxGMo4TYKM%2Bvv0wGJZPzcpdThyd9qWsUPg4sSFm83EWRL8MsCk6qT2olUjHNEHGlR%2BqhOdQOUs%2Fhnth5Zxk%2FNnQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A2154%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693553%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A2154%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693553%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fimagegallery%3Fformat%3Djson%26ssd%3D20231202_0800%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A2154%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693553%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22rms-answers-HomepageVNext-PeregrineWidgets%22%2C%22error%22%3A%22%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22rms-answers-HomepageVNext-PeregrineWidgets%22%2C%22error%22%3A%22%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22rms-answers-HomepageVNext-PeregrineWidgets%22%2C%22error%22%3A%22%22%2C%22time%22%3A1659%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1701540693058%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Create%20a%20slogan%20for%20a%20new%20social%20media%20platform%20that%20specializes%20in%20sarcasm%5C%22%2C%5C%22chipIndex%5C%22%3A2%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540703331%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%5D
0 B URL GET free.workers.dev/fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Create%20a%20slogan%20for%20a%20new%20social%20media%20platform%20that%20specializes%20in%20sarcasm%5C%22%2C%5C%22chipIndex%5C%22%3A2%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540703331%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%5D
IP
Requested by https://free.1260628466.workers.dev/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /fd/ls/l?IG=87E20653A1B94544B3330D8DE7885A32&CID=392FE21D2959657609D0F1C628366424&TYPE=Event.ClientInst&DATA=%5B%7B%22Namespace%22%3A%22Homepage%22%2C%22CustomData%22%3A%22%7B%5C%22chipText%5C%22%3A%5C%22Create%20a%20slogan%20for%20a%20new%20social%20media%20platform%20that%20specializes%20in%20sarcasm%5C%22%2C%5C%22chipIndex%5C%22%3A2%7D%22%2C%22T%22%3A%22CI.SystemEvent%22%2C%22TS%22%3A1701540703331%2C%22Name%22%3A%22QueryShown%22%2C%22FID%22%3A%22Codex%22%7D%5D HTTP/1.1
Host: free.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.1260628466.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
104.21.96.85
20.190.177.22
13.107.21.200
23.36.79.19
0.0.0.0