Report - alpha.grl-my.eu/win/a1b2c3/6f54b2dbc4d514a04e120f9e570db9f9/login/?

Report Overview

URL

alpha.grl-my.eu/win/a1b2c3/6f54b2dbc4d514a04e120f9e570db9f9/login/?
IP

185.38.142.61

ASN

#47674 Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA
Submitted

2023-02-08T10:08:16Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
r.bing.com (2)	1184	2020-05-07T21:02:14Z	2023-03-13T05:20:38Z	2733	3622	23.36.79.9
assets.msn.com (1)	188	2018-09-21T01:46:35Z	2023-03-13T07:40:47Z	425	5668	23.36.79.18
www2.bing.com (1)	1811	2018-06-25T01:16:21Z	2023-03-13T07:40:47Z	1415	1137	13.107.21.200
login.microsoftonline.com (1)	25	2017-02-19T08:06:40Z	2019-07-18T10:58:27Z	1289	2090	40.126.32.73
login.live.com (1)	79	2012-05-21T09:00:20Z	2023-03-13T05:09:29Z	640	817	40.126.32.132
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2366	6207	95.101.11.115
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2374	35.241.9.150
www.bing.com (37)	91	2012-05-21T17:02:58Z	2018-11-01T22:19:15Z	61451	198252	13.107.21.200
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	52.43.197.133
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3246	56066	34.120.237.76
alpha.grl-my.eu (1)	unknown	2023-02-01T06:13:40Z	2023-02-10T04:05:24Z	398	318	185.38.142.61
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5844	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-08	medium	alpha.grl-my.eu/win/a1b2c3/6f54b2dbc4d514a04e120f9e570db9f9/login/?	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (62)

URL IP Response Size

alpha.grl-my.eu/win/a1b2c3/6f54b2dbc4d514a04e120f9e570db9f9/login/?

Portugal Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA

185.38.142.61

302 Found

URL HTTP/1.1

alpha.grl-my.eu/win/a1b2c3/6f54b2dbc4d514a04e120f9e570db9f9/login/?
IP

185.38.142.61:0
ASN

#47674 Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /win/a1b2c3/6f54b2dbc4d514a04e120f9e570db9f9/login/? HTTP/1.1
Host: alpha.grl-my.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 10:08:04 GMT
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
location: https://www.bing.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

dca68db7aea32f6683ce8d542c078f04

19c495238df74fca680e21f18627ff94de5dd2e5

35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2820
Expires: Wed, 08 Feb 2023 10:55:05 GMT
Date: Wed, 08 Feb 2023 10:08:05 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

565c1bbc5c1c40be1988b3bf6fd9dc1a

cfdba5bc597130461dd67bf6cda53183be592493

60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11118
Expires: Wed, 08 Feb 2023 13:13:23 GMT
Date: Wed, 08 Feb 2023 10:08:05 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

bf0c602d32b3c14606f22a86183b5e3c

6eabd8d83475eba731968abe1a05a8bfd272f160

6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 09:34:12 GMT
content-type: application/json
age: 2033
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

cc14b0d2f7c451f6431dc87ba54d1d60

bab8bfda6fa3e2f17125353f5147211787dc25d0

b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10556
Expires: Wed, 08 Feb 2023 13:04:01 GMT
Date: Wed, 08 Feb 2023 10:08:05 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

e76071a28ee566dababb3834f46d68ed

aebb4e68c1ba2de0f90025283e8ed8470944fde0

78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: BIwyV+MCcAqAhgQfxP/XM93X65FqQtuX1MVkH6KvvBLCdX+c5A8XVXdOeC4mikeA8A6kt+/hhWE=
x-amz-request-id: 154R97AKRGDPWE88
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 09:35:53 GMT
age: 1932
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 10:08:05 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.bing.com/th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50

United States MICROSOFT-CORP-MSN-AS-BLOCK

13.107.21.200

200 OK

73647

URL HTTP/2

www.bing.com/th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data

Size

73647
Hash

4ae4572731632c549e32933fff134703

198ccd3f02f4d1fe0eb8a81911e1d5f2b4ccd46b

9af9fc03089bd0128065c3eebf398d446877ff4e19dcbeb2b9815f901d5d569a

HTTP Headers

                                        GET /th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 73647
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 128561692F254602B54D3ADC60B9CD5C Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:04 GMT
X-Firefox-Spdy: h2

r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js

23.36.79.9

200 OK

URL HTTP/2

r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
IP

23.36.79.9:0
ASN

#20940 Akamai International B.V.

Magic

very short file (no magic)

Size

21
Hash

7a27d78dc075a9bed14b88de7a235ac6

bb47edffc2c64ddc6373e89f13e2e18f0139b8ce

fb80d1c642d6ab03690c5ff8d462b352ecad7e4e6989461592b6acaafd5e9dab

HTTP Headers

                                        GET /rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
content-md5: 5aqSHeuG+BOAJrucJAgg+w==
last-modified: Wed, 17 Aug 2022 06:39:21 GMT
etag: 0x8DA801B37C8EF2D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 4b1b4056-501e-00a3-69b6-e412f0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 21
cache-control: public, no-transform, max-age=385531
expires: Sun, 12 Feb 2023 21:13:36 GMT
date: Wed, 08 Feb 2023 10:08:05 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.054f2417.1675850885.500b72af
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2

r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg

23.36.79.9

200 OK

1766

URL HTTP/2

r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
IP

23.36.79.9:0
ASN

#20940 Akamai International B.V.

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1766), with no line terminators

Size

1766
Hash

946b8d209533755165d5d0fe8d795f22

37bb4a7589a53831778e8162296bf9d72477144e

d9233990059b3f88531f67b1c4725ef4f28f46564ae7e511472f48e2a84f9f1d

HTTP Headers

                                        GET /rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        HTTP/2 200 OK
content-length: 1766
content-type: image/svg+xml
content-md5: lGuNIJUzdVFl1dD+jXlfIg==
last-modified: Wed, 17 Aug 2022 05:49:33 GMT
etag: 0x8DA801442F5D6E9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d4b31ee8-401e-0029-2cdf-fd4941000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=178754
expires: Fri, 10 Feb 2023 11:47:19 GMT
date: Wed, 08 Feb 2023 10:08:05 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.054f2417.1675850885.500b72bc
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2

www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico

13.107.21.200

200 OK

4286

URL HTTP/2

www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data

Size

4286
Hash

30967b1b52cb6df18a8af8fcc04f83c9

aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588

439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e

HTTP Headers

                                        GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=15552000
content-length: 4286
content-type: image/x-icon
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6D06FB907365467DAA3E3E97B0CC5E5A Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:04 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js

13.107.21.200

200 OK

6683

URL HTTP/2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (17343), with no line terminators

Size

6683
Hash

204bb375b5117b07884a137329e07bab

e87cb497b3b6e3c43a8abfa85ff1289e2d842308

030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1

HTTP Headers

                                        GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: b9ef9644-001e-00e3-6204-3a15c8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 4DEEF4992F2B4C229A7D7BCD67BEC4BB Ref B: AM3EDGE0909 Ref C: 2023-02-07T12:36:55Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 95F3EBD84F114E8BAA19BD08C86CE98A Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:04 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:99,%22CT%22:101,%22IL%22:2}}&P=SERP&DA=DUBE01

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:99,%22CT%22:101,%22IL%22:2}}&P=SERP&DA=DUBE01
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:99,%22CT%22:101,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9787AB32742F4FEDA8A8981F7EDB2ECB Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:04 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/lsp.aspx?

13.107.21.200

204 No Content

URL HTTP/2

www.bing.com/fd/ls/lsp.aspx?
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /fd/ls/lsp.aspx? HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: AE5504537E9C4A4FA348B95507C84F01 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:04 GMT
X-Firefox-Spdy: h2

www.bing.com/hp/api/v1/codex?format=json&

13.107.21.200

200 OK

601

URL HTTP/2

www.bing.com/hp/api/v1/codex?format=json&
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JSON data\012- , ASCII text, with very long lines (2148), with no line terminators

Size

601
Hash

c658b4f79c7ac1605c5cb4019f3cd1c3

0db3159a4ea7e2b90a486d1b6f4f01ad70bc1272

6cf73a2ce08b13aba14a2b5576aee3f0a84d4c560a4e2145d5b3f43a4d548756

HTTP Headers

                                        GET /hp/api/v1/codex?format=json& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: private
content-length: 601
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=0A55E49A8230640F2DA9F62883C565EF; expires=Mon, 04-Mar-2024 10:08:05 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0C0593132041490DB8D3DD660A85D34B Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A966%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939689%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A966%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939689%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A966%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939689%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E2E9917B617B435DB0CF77F61690B609 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221152%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22S%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%22836%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A961%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939686%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221152%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22S%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%22836%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A961%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939686%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221152%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22S%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%22836%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675850939366%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A961%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939686%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8DD065457EC940F78C5D45FE8ED39A3E Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/vs/ec/start.mp3

13.107.21.200

206 Partial Content

31561

URL HTTP/2

www.bing.com/vs/ec/start.mp3
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data

Size

31561
Hash

f139839a0b2291e7e31f2589454e470f

754ac75088a1b1c586acbe6751e52a1835a4e428

a8b226c9281cae3e162006c9d509f5bfc649724876ca81a95a48e7f1fa9886ef

HTTP Headers

                                        GET /vs/ec/start.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 31561
content-type: audio/mpeg
content-range: bytes 0-31560/31561
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BE6C2C9F27ED46558D4938E3E047EDAA Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
X-Firefox-Spdy: h2

www.bing.com/vs/ec/stop.mp3

13.107.21.200

206 Partial Content

35386

URL HTTP/2

www.bing.com/vs/ec/stop.mp3
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data

Size

35386
Hash

475028300cc8c44e7a4db97079bfca2b

09b8d7346324c456fcea95fa4826fc94686ce52c

45c8123c99a15aef1762667d2fbc2de1937449d20610023a21e47b313e3b7ee4

HTTP Headers

                                        GET /vs/ec/stop.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 35386
content-type: audio/mpeg
content-range: bytes 0-35385/35386
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3CF34E4277BC4EB59D6AF2EAF925421D Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
X-Firefox-Spdy: h2

www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&

13.107.21.200

200 OK

2904

URL HTTP/2

www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JSON data\012- , Unicode text, UTF-8 text, with very long lines (13298), with no line terminators

Size

2904
Hash

853309ff17d675a7b71bc4f17d5937ac

530c39530f5b844a7c167a4ae016219ec5adc93d

2dcc843338350d03a63e95cdff93d46e3f2fbbd290fd6774735eff4203046b03

HTTP Headers

                                        GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: private
content-length: 2904
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=0A55E49A8230640F2DA9F62883C565EF; expires=Mon, 04-Mar-2024 10:08:05 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 370E883AD51A42738A719585E31748C0 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1082%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939806%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1082%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939806%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1082%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939806%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4C8B44298FBE479C994DD2190207CF7A Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939807%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939807%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939807%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FEA0968FABF04D9FB740FDC1832C9BB9 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939807%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939807%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939807%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D92A118E5EF64717BAD347B58E501F96 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1084%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939808%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1084%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939808%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1084%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939808%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C48D59D5BAF641ADAD0757927AF9A436 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1084%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939808%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1084%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939808%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1084%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939808%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 945B08D318854C9C93B175151F9E8DBE Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1095%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939819%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1095%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939819%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1095%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939819%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BF7368A5075C44DB845B149713A9BA69 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1095%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939820%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1095%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939820%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1095%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939820%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1968907B4CE843EE8B8916E181A2CE82 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1096%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939820%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1096%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939820%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1096%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939820%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8AE00F5CC0CF42D2A4FC7292492AFB62 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1121%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939845%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1121%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939845%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1121%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939845%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 38C1A22BD0DA4E08A633E0108D3F4B11 Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:05Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 09:14:52 GMT
age: 3194
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js

23.36.79.18

200 OK

4555

URL HTTP/2

assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
IP

23.36.79.18:0
ASN

#20940 Akamai International B.V.

Magic

ASCII text, with very long lines (13100)

Size

4555
Hash

efeffb4eda40b16e38658170c235b5a3

e078e0d6863751d2a6701ca0330c9d12ca1df7f9

2da59d63f7bf73a152fb1d90b28ce1b92dac8e30c61b832cd085e6a7b4a452b9

HTTP Headers

                                        GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1
Host: assets.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Origin: https://www.bing.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-length: 4555
content-md5: 7+/7TtpAsW44ZYFwwjW1ow==
last-modified: Thu, 02 Feb 2023 23:27:13 GMT
etag: 0x8DB057503C0C11B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 681d5ce9-001e-0059-3f5e-37cb93000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Wed, 08 Feb 2023 10:08:06 GMT
akamai-request-bc: [a=23.36.79.14,b=23184657,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=3, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 23.36.79.14
akamai-request-id: 161c511
access-control-allow-credentials: true
access-control-allow-origin: https://www.bing.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

9b88bae61bca33aba8aa99f6128db8d9

a07b61fb2458917699613fcae68710941b595416

54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8121
Expires: Wed, 08 Feb 2023 12:23:27 GMT
Date: Wed, 08 Feb 2023 10:08:06 GMT
Connection: keep-alive

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1212%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939936%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1212%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939936%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D4FE01F2B35B044AE999D0F800C0DEED2%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1212%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939936%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0A55E49A8230640F2DA9F62883C565EF; MUIDB=0A55E49A8230640F2DA9F62883C565EF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=77D9372B289A460C8138573C01C834EB&dmnchg=1; SRCHUSR=DOB=20230208&T=1675850806000; SRCHHPGUSR=SRCHLANG=en&BRW=S&BRH=M&CW=1152&CH=836&SCW=1152&SCH=836&DPR=1.0&UTC=0&DM=0&WTS=63811447672&HV=1675850935; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=2&ihpd=2&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:07:53.7191549+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B; _SS=SID=3A79A3085ACB6B7A0E41B1BA5B9C6A8B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: AADF12E644994266B7361A31EEFBB7CC Ref B: OSL30EDGE0310 Ref C: 2023-02-08T10:08:06Z
date: Wed, 08 Feb 2023 10:08:05 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1213%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939937%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D

13.107.21.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=4FE01F2B35B044AE999D0F800C0DEED2&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1213%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675850939937%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (55)

#1 JS:Script (size: 1931)

#2 JS:Script (size: 28947)

#3 JS:Script (size: 258)

#4 JS:Script (size: 1274)

#5 JS:Script (size: 1051)

#6 JS:Script (size: 12933)

#7 JS:Script (size: 5666)

#8 JS:Script (size: 457)

#9 JS:Script (size: 426)

#10 JS:Script (size: 306)

#11 JS:Script (size: 226)

#12 JS:Script (size: 520)

#13 JS:Script (size: 1228)

#14 JS:Script (size: 5793)

#15 JS:Script (size: 3278)

#16 JS:Script (size: 252)

#17 JS:Script (size: 938)

#18 JS:Script (size: 1589)

#19 JS:Script (size: 391)

#20 JS:Script (size: 327869)

#21 JS:Script (size: 1234)

#22 JS:Script (size: 13338)

#23 JS:Script (size: 108360)

#24 JS:Script (size: 2524)

#25 JS:Script (size: 2015)

#26 JS:Script (size: 43484)

#27 JS:Script (size: 257)

#28 JS:Script (size: 21647)

#29 JS:Script (size: 328)

#30 JS:Script (size: 2688)

#31 JS:Script (size: 17026)

#32 JS:Script (size: 89)

#33 JS:Script (size: 423)

#34 JS:Script (size: 345)

#35 JS:Script (size: 13667)

#36 JS:Script (size: 19932)

#37 JS:Script (size: 0)

#38 JS:Script (size: 357)

#39 JS:Script (size: 3252)

#40 JS:Script (size: 212)

#41 JS:Script (size: 443)

#42 JS:Script (size: 315)

#43 JS:Script (size: 920)

#44 JS:Script (size: 924)

#45 JS:Script (size: 110)

#46 JS:Script (size: 1284)

#47 JS:Script (size: 17343)

#48 JS:Script (size: 576)

#49 JS:Script (size: 2965)

#50 JS:Script (size: 20)

#51 JS:Script (size: 90)

#52 JS:Script (size: 425)

#53 JS:Script (size: 64)

#54 JS:Script (size: 27)

#1 JS:Eval (size: 12)

HTTP Transactions (62)