Overview

URLdompeterapp.com/16/
IP 79.141.162.99 (United States)
ASN#202015 HZ Hosting Ltd
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-26 09:27:10 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (21)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
img-getpocket.cdn.mozilla.net (6) 1631 No data No data 34.120.237.76
browser.events.data.microsoft.com (2) 290 No data No data 20.42.73.25
ocsp.digicert.com (4) 86 No data No data 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
ajax.aspnetcdn.com (1) 693 No data No data 152.199.19.160
www.microsoft.com (4) 302 No data No data 23.38.201.156
store-images.s-microsoft.com (1) 5954 No data No data 23.38.201.128
edgestoreweb.azureedge.net (4) 104772 No data No data 13.107.246.53
dompeterapp.com (1) 0 No data No data 79.141.162.99 Unknown ranking
r3.o.lencr.org (4) 344 No data No data 23.36.77.32
mem.gfx.ms (4) 3475 No data No data 13.107.246.53
browser.pipe.aria.microsoft.com (2) 93 No data No data 20.42.73.25
firefox.settings.services.mozilla.com (2) 867 No data No data 34.102.187.140
statics-marketingsites-neu-ms-com.akamaized.net (1) 27382 No data No data 23.36.76.155
cloopjake.com (1) 0 No data No data 104.21.71.60 Unknown ranking
c.s-microsoft.com (2) 10166 No data No data 23.38.201.156
login.live.com (1) 79 No data No data 40.126.32.135
contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
js.monitor.azure.com (1) 3838 No data No data 13.107.213.53
microsoftedge.microsoft.com (9) 76444 No data No data 13.107.6.158
logincdn.msauth.net (1) 2330 No data No data 192.229.221.185

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 2 dompeterapp.com/16/ Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 79.141.162.99
Date UQ / IDS / BL URL IP
2023-03-28 21:00:59 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-22 18:01:09 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-12 22:07:14 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-11 19:59:40 +0000 0 - 0 - 1 dompeterapp.com/16/ 79.141.162.99
2023-03-09 04:17:54 +0000 0 - 0 - 1 dompeterapp.com/25/ 79.141.162.99


Last 5 reports on ASN: HZ Hosting Ltd
Date UQ / IDS / BL URL IP
2023-03-29 16:58:11 +0000 0 - 2 - 0 decentralizedapps.work.gd/ 79.141.173.181
2023-03-29 15:38:44 +0000 0 - 2 - 0 cozytech.biz/metric?mid=90f06&rid=mntz_inject (...) 79.141.160.71
2023-03-29 10:40:32 +0000 0 - 0 - 2 loungesrc.net/ 79.141.160.87
2023-03-28 21:00:59 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-22 18:01:09 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99


Last 5 reports on domain: dompeterapp.com
Date UQ / IDS / BL URL IP
2023-03-28 21:00:59 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-22 18:01:09 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-12 22:07:14 +0000 0 - 0 - 2 dompeterapp.com/16 79.141.162.99
2023-03-11 19:59:40 +0000 0 - 0 - 1 dompeterapp.com/16/ 79.141.162.99
2023-03-09 04:17:54 +0000 0 - 0 - 1 dompeterapp.com/25/ 79.141.162.99


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-22 20:39:33 +0000 0 - 0 - 2 dompeterapp.com/15 79.141.162.99
2022-12-06 04:57:36 +0000 0 - 0 - 1 clodrive.com/trck/?_subid=j8elf43vsmm6&source (...) 172.67.199.2
2022-12-05 07:53:31 +0000 0 - 0 - 1 dompeterapp.com/11/ 79.141.162.99
2022-12-05 07:20:52 +0000 0 - 0 - 1 dompeterapp.com/16/ 79.141.162.99
2022-12-05 07:20:05 +0000 0 - 0 - 1 dompeterapp.com/16/?_subid=jpuiov3tpejf 79.141.162.99

JavaScript

Executed Scripts (27)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (53)


Request Response
                                        
                                            GET /16/ HTTP/1.1 
Host: dompeterapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         79.141.162.99
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.10.3 (Ubuntu)
Date: Sat, 26 Nov 2022 09:26:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, private, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 0
Location: https://cloopjake.com/trck/?rdr=https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11103
Expires: Sat, 26 Nov 2022 12:32:02 GMT
Date: Sat, 26 Nov 2022 09:26:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3720
Cache-Control: max-age=93975
Date: Sat, 26 Nov 2022 09:26:59 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:33:14 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 09:19:13 GMT
cache-control: public,max-age=3600
age: 466
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2403
Expires: Sat, 26 Nov 2022 10:07:02 GMT
Date: Sat, 26 Nov 2022 09:26:59 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: oL6t/6f6FEhaXevTD/FRzaidt648t3cEUanDWxji+pwiiM5Ev65AIBs78+E1lCu+XUOfGBuNksE=
x-amz-request-id: E9EMFBCNET95SW3H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 08:41:08 GMT
age: 2751
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 26 Nov 2022 09:26:59 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155035
Date: Sat, 26 Nov 2022 09:26:59 GMT
Etag: "6381967e-116"
Expires: Mon, 28 Nov 2022 04:30:54 GMT
Last-Modified: Sat, 26 Nov 2022 04:30:54 GMT
Server: nginx
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=155035
Date: Sat, 26 Nov 2022 09:27:00 GMT
Etag: "6381967e-116"
Expires: Mon, 28 Nov 2022 04:30:55 GMT
Last-Modified: Sat, 26 Nov 2022 04:30:54 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 09:11:12 GMT
cache-control: public,max-age=3600
age: 948
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3518
Cache-Control: max-age=88709
Date: Sat, 26 Nov 2022 09:27:00 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 10:05:29 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ajax/jquery/jquery-1.9.0.min.js HTTP/1.1 
Host: ajax.aspnetcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         152.199.19.160
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 10303618
cache-control: public,max-age=31536000
date: Sat, 26 Nov 2022 09:27:00 GMT
etag: "533edcbcc33d21:0"
last-modified: Mon, 31 Oct 2016 23:11:01 GMT
server: ECAcc (ska/F6CE)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 41697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32132)
Size:   41697
Md5:    7c29149c66233696139a5cf590c9ca00
Sha1:   1018cdb56d97c82c07e547cab9231f7cdc2a1dc8
Sha256: 63e718bd3bb4e717edb381fe8b68226403e86dbb3bb1d7ae1aa1e691b9259216
                                        
                                            GET /statics/override.css HTTP/1.1 
Host: statics-marketingsites-neu-ms-com.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Last-Modified: Tue, 11 Jun 2019 23:22:13 GMT
ETag: 0x8D6EEC3A2D67C35
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7502d9a5-901e-0068-28c4-66545b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 473
Unused62: 8096267
Date: Sat, 26 Nov 2022 09:27:00 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (342), with CRLF line terminators
Size:   473
Md5:    a40589609d8e75c109e93abbff0dcf60
Sha1:   76ae9c943d54022e24b90467713a73a431eddd6d
Sha256: 2c959c2618be84448b26de18639db8a66126449c6ebb29f4f6d33e00adb5b069
                                        
                                            GET /trck/?rdr=https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap HTTP/1.1 
Host: cloopjake.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         104.21.71.60
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Sat, 26 Nov 2022 09:27:00 GMT
location: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b1tUIWKai7yeqZDhWFgtv6SuzjvuiFiYGbX1MY6atytBds3%2B4v8RKVX79WGZ%2Fk4tDL7zRrIvCmQ3wYOPMjfAkI9hNUYz42thmnpQp0MavnbRg1%2Bc7skErj1wlg%2BmBIVE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770195f14fae0b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced\012- data
Size:   4054
Md5:    9f14c20150a003d7ce4de57c298f0fba
Sha1:   daa53cf17cc45878a1b153f3c3bf47dc9669d78f
Sha256: 112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960
                                        
                                            GET /onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/79-4cdd0a/33-ae3d41/a5-4bf7a2/13-8e1ceb/81-32f0c0/5c-b7b685/6f-d7d610/ef-a24652?ver=2.0&_cf=02242021_3231 HTTP/1.1 
Host: www.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         23.38.201.156
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
last-modified: Tue, 15 Nov 2022 20:24:46 GMT
x-activity-id: dde950d7-71ff-4b5c-b3c7-79d8c3b97bd6
ms-cv: oRoE4eNYbECD9lie.0
x-appversion: 1.0.8335.36378
x-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2022-10-28T03:12:36.0000000Z}
ms-operation-id: a8448f896f24c445966ef58e69b443c6
p3p: CP="CAO CONi OTR OUR DEM ONL"
x-content-type-options: nosniff
x-s1: 2022-11-15T20:24:46
x-s2: 2022-11-15T20:24:46
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS
x-xss-protection: 1; mode=block
content-encoding: gzip
content-length: 22647
cache-control: public, max-age=30625024
expires: Wed, 15 Nov 2023 20:24:04 GMT
date: Sat, 26 Nov 2022 09:27:00 GMT
vary: Accept-Encoding
tls_version: tls1.3
strict-transport-security: max-age=31536000
x-rtag: RT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64241)
Size:   22647
Md5:    42c9e145515c1181de810dca8de80962
Sha1:   2124aa979e0b9df035541fafa3bc29aca7bcf665
Sha256: 335cc2a8c473151675f38c33b2486bebaddce3a0e9192ac89bfa10794bada11b
                                        
                                            GET /onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/8e-e88b64/82-2a4f02/49-a00ab0/92-02e55d/7c-dcea75/75-fca72d/ed-e77ee7/d5-bf34c0/a9-078595/7a-7ea8cc/2d-40bdad/23-e8cd2b/96-eb5423/e6-6b0cce/d1-98d78a/c6-082272/a7-f7a340/1e-addbef/2e-ca165a/fc-169dd8/8e-60935c/87-fecbed/96-6ed6eb/c3-eb62e0/ad-ffd6bf/35-621acc/b0-07f293/1e-9d9d16/52-f0367f/1f-b57352/bf-517249/e1-ed258e/20-0b10e2/6b-0f1117/fb-5e9831/37-8473b9?ver=2.0&_cf=02242021_3231&iife=1 HTTP/1.1 
Host: www.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         23.38.201.156
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
last-modified: Tue, 18 Oct 2022 17:39:10 GMT
x-activity-id: b6d3ee50-fcfc-4286-8cd2-662da3f3e5fe
ms-cv: ZDzyws/2PUSznH42.0
x-appversion: 1.0.8301.38639
x-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2022-09-24T05:27:58.0000000Z}
ms-operation-id: 670cf0f0a57d4141b0bc0910055ad5ab
p3p: CP="CAO CONi OTR OUR DEM ONL"
x-content-type-options: nosniff
x-s1: 2022-10-18T17:39:10
x-s2: 2022-10-18T17:39:10
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS
x-xss-protection: 1; mode=block
content-encoding: gzip
content-length: 35604
cache-control: public, max-age=28195876
expires: Wed, 18 Oct 2023 17:38:16 GMT
date: Sat, 26 Nov 2022 09:27:00 GMT
vary: Accept-Encoding
tls_version: tls1.3
strict-transport-security: max-age=31536000
x-rtag: RT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (42133)
Size:   35604
Md5:    aece1107107ca4280de0d98c1855bdbb
Sha1:   b84a2a75eef1fb21dc5dcb1866ec232c0323befa
Sha256: 4f747d96a6976d859279fa30bdc58af942826d562ba3cb14eb0243995fc9ce68
                                        
                                            GET /mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff HTTP/1.1 
Host: www.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://www.microsoft.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.38.201.156
HTTP/2 200 OK
content-type: application/font-woff
                                        
last-modified: Tue, 14 Jun 2022 13:23:15 GMT
x-activity-id: 433fff9c-ac1c-4827-bb3b-a2ca5fa6dd83
ms-cv: /0+3RKV7ykuNLoKI.0
x-appversion: 1.0.8167.41521
x-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odnortheurope, dt: 2018-05-03T20:14:23.4188992Z, bt: 2022-05-13T07:04:02.0000000Z}
ms-operation-id: 2f08fc2d143919438bfe914fdfecfc02
p3p: CP="CAO CONi OTR OUR DEM ONL"
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS
x-xss-protection: 1; mode=block
content-length: 26288
cache-control: public, max-age=17294182
expires: Wed, 14 Jun 2023 13:23:22 GMT
date: Sat, 26 Nov 2022 09:27:00 GMT
tls_version: tls1.3
strict-transport-security: max-age=31536000
x-rtag: RT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 26288, version 0.0\012- data
Size:   26288
Md5:    d0263dc03be4c393a90bda733c57d6db
Sha1:   8a032b6deab53a33234c735133b48518f8643b92
Sha256: 22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12
                                        
                                            GET /static/fonts/segoe-ui/west-european/Semibold/latest.woff2 HTTP/1.1 
Host: c.s-microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://www.microsoft.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.38.201.156
HTTP/2 200 OK
content-type: font/woff2
                                        
content-length: 29388
last-modified: Fri, 10 Jan 2020 19:09:43 GMT
accept-ranges: bytes
etag: "5b68d583e9c7d51:0"
cache-control: public, max-age=520176
expires: Fri, 02 Dec 2022 09:56:37 GMT
date: Sat, 26 Nov 2022 09:27:01 GMT
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 29388, version 0.0\012- data
Size:   29388
Md5:    6e75a94d5f7170a1ab532d32c2a35755
Sha1:   9c1b6fff544089941bbeddbcf529c3f0b46d853a
Sha256: d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f
                                        
                                            GET /static/fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1 
Host: c.s-microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://www.microsoft.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.38.201.156
HTTP/2 200 OK
content-type: font/woff2
                                        
content-length: 34052
last-modified: Fri, 10 Jan 2020 19:09:43 GMT
accept-ranges: bytes
etag: "588d483e9c7d51:0"
cache-control: public, max-age=217251
expires: Mon, 28 Nov 2022 21:47:52 GMT
date: Sat, 26 Nov 2022 09:27:01 GMT
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 34052, version 0.0\012- data
Size:   34052
Md5:    36397a3bc139c6e9f81d383f060f080a
Sha1:   3f4f86c10920d4ed345f4858b6cde9f93e1aeb81
Sha256: 4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b
                                        
                                            GET /image/apps.25928.56b4c97f-a1d6-4fa3-9bec-d01f7df56ec7.6a70d781-59b8-4eba-8999-e300d5992e0e.a48640a0-ef1a-4f6d-8d3d-42727ab512ac?mode=scale&h=100&q=90&w=100 HTTP/1.1 
Host: store-images.s-microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.201.128
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: public, max-age=7776000, s-maxage=7776000
Last-Modified: Fri, 10 Jun 2022 16:19:25 GMT
Accept-Ranges: none
ETag: W/"AEDtkTaSXr0f6XqZ3tv8DSD6LaXe7tQgMHg4REE0QUZDRkNDMTU2MkE"
MS-CV: 2jd8WMhatUyH7n6G.0
Access-Control-Expose-Headers: MS-CV
Content-Length: 5026
Date: Sat, 26 Nov 2022 09:27:01 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   5026
Md5:    ee2a4e9c74d50ccb1a377bbd73559dce
Sha1:   9d6f8787e0373de27e1e3f215768b154be0aec91
Sha256: d2d1940ad87dcc2e4cfa21f8401daea927bfc8b5c05529aae6981eeea39d221d
                                        
                                            GET /scripts/c/ms.shared.analytics.mectrl-3.2.6.gbl.min.js HTTP/1.1 
Host: js.monitor.azure.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         13.107.213.53
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: public, max-age=31536000, immutable, no-transform
content-encoding: br
content-md5: RlzwH95FOkmm6gksZWAC+w==
last-modified: Thu, 18 Aug 2022 21:40:45 GMT
etag: 0x8DA81624EF9033C
x-cache: TCP_HIT
x-ms-request-id: e858fbc0-201e-0048-4300-01138b000000
x-ms-version: 2009-09-19
x-ms-meta-jssdkver: 3.2.6
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 05duBYwAAAAAN+S7PZPFdTJw4Lz9MSqI7QU1TMDRFREdFMTgxNABmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY=
date: Sat, 26 Nov 2022 09:27:01 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65395)
Size:   168823
Md5:    e5e96964af9232ef4dd662ae22b796b4
Sha1:   dd60e31329bf9be83a0c3ad75f02f07f48312d39
Sha256: 2ca8044f8d1f7bb97100b9fbfeb01fbae730c73efb67a8ff6480a339c73ed1db
                                        
                                            GET /scripts/me/MeControl/10.22290.5/en-US/meBoot.min.js HTTP/1.1 
Host: mem.gfx.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: br
last-modified: Wed, 02 Nov 2022 22:23:16 GMT
etag: "1d8ef44604cb8a1"
x-cache: TCP_HIT
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 05duBYwAAAAAvh1RQ/Di6Tqw/WaAFnd/RQU1TMDRFREdFMTkxMwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   129838
Md5:    423104887a90ee49814ee8a837d8c2a3
Sha1:   68e84e606dbc9458572dda75f96bd7695acd8f7b
Sha256: 22ebd386299f3fb5ce755665d265e241c73b7215bb1cb50506c0fe728fbf07e8
                                        
                                            GET /store/buy/cartcount HTTP/1.1 
Host: www.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.38.201.156
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
pragma: no-cache
content-encoding: gzip
x-activity-id: 9af88c2f-dcdd-471e-93f9-5874a8c2e84b
ms-cv: A5CZNTBYu0GL8T21.0
x-appversion: 1.0.8347.41441
x-az: {did:9a8cd53207774949b337f7edab013e9f, rid: 6, sn: storeexp-neu-prod, dt: 2022-11-11T20:41:42.0561837Z, bt: 2022-11-08T23:01:22.0000000Z}
ms-operation-id: a7b35b04b2884c45a10a6ab0a1f36d74
p3p: CP="CAO CONi OTR OUR DEM ONL"
x-content-type-options: nosniff
access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS
x-xss-protection: 1; mode=block
content-length: 489
x-edgeconnect-midmile-rtt: 0, 18
x-edgeconnect-origin-mex-latency: 115, 115
cache-control: max-age=83292
expires: Sun, 27 Nov 2022 08:35:13 GMT
date: Sat, 26 Nov 2022 09:27:01 GMT
vary: Accept-Encoding
tls_version: tls1.3
strict-transport-security: max-age=31536000
x-rtag: Str
set-cookie: ak_bmsc=8C4F47A9BC5788EEF652269F526232A3~000000000000000000000000000000~YAAQJ08kFzG5WrCEAQAAgPlCsxGENz1Q3yOrtaq27+gQ2tbDzhFuHWAuf2Lqtmlb9UqziE4FCkM4bnPoN1tunY/1aHWkylf5KerbZvsM/ZdnxQbkBOVvHKreztu5Ocu1T7MnUwkeWiHgstV8a5Tbo8/U5z3LdrHkBrD1w+vADu0/IvU664lchq8iY6TwT5TY1NK03J3zKj84V4xRVi3QjWUVJMVMLVFxvUXGQoe95n+wyZERe4OiCIgAT5ypuuK7h2xwseIk5m1qst9ix3BER2iwPMxQyWnfN78kcg/miOOlkXsFGh/GyyBIsvHhJU/UMQCbqh2cXmTMx8c7HoBNo0w5c5HTurFJmLxkJwCt/zwhuTQi1k7r68XZ1Mbc2V9SOoqvmU31gYWVLTjJ; Domain=.microsoft.com; Path=/; Expires=Sat, 26 Nov 2022 11:27:01 GMT; Max-Age=7200; HttpOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   489
Md5:    bcdd127d7988dcedf4b2866d037bd952
Sha1:   5536e8863fabbf3c651c19e5b42d7a51bf5b2b9b
Sha256: f9c56fb14488610fc4ee470e86f54bd1e9609907a3cb2bec2cc42cd78cb00679
                                        
                                            GET /edgestoreweb/js/vendor14de0aba14f8d8f698a7d.js HTTP/1.1 
Host: edgestoreweb.azureedge.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=15552000
content-encoding: br
content-md5: lZuaif3iBcbKbsAJiJmfAQ==
last-modified: Fri, 25 Nov 2022 06:56:34 GMT
etag: 0x8DACEB2308F0D4A
x-cache: TCP_HIT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 8368cbda-301e-00a0-7f74-016152000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 05NuBYwAAAAATBHhr8Cy6Tb9bBRw9EXOPQU1TMDRFREdFMTkxNQAwNDQyYmMwMS0yZGVmLTQ2ODktYTI4Yy01NjU5MDgyNWJhZGU=
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   266738
Md5:    12303d68661b48cf485665fd6d760ee5
Sha1:   4d74e6fc4ac14a5bd8b7f12295e9c8dbc8d82e34
Sha256: 05cc6f18acb9b82c657f52580c439d863a08a0ea7af3239fd35a1f61a52008be
                                        
                                            GET /scripts/me/MeControl/10.22290.5/en-US/meCore.min.js HTTP/1.1 
Host: mem.gfx.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: br
last-modified: Wed, 02 Nov 2022 22:23:24 GMT
etag: "1d8ef446512a7ad"
x-cache: TCP_HIT
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 05duBYwAAAAAgLorTmz7PQrjUpvtXuj8PQU1TMDRFREdFMTkxMwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=
date: Sat, 26 Nov 2022 09:27:01 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (34247), with CRLF, LF line terminators
Size:   15974
Md5:    576b11fee0cb9118aa0780f899b82b40
Sha1:   0a8a3db152093b0e99e49d70ef45b78c35e022a1
Sha256: 0cec3c9e1af5d4851f5379d37185d84f4d1b5c9226d3726e4fea043f6110a56c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2; ak_bmsc=8C4F47A9BC5788EEF652269F526232A3~000000000000000000000000000000~YAAQJ08kFzG5WrCEAQAAgPlCsxGENz1Q3yOrtaq27+gQ2tbDzhFuHWAuf2Lqtmlb9UqziE4FCkM4bnPoN1tunY/1aHWkylf5KerbZvsM/ZdnxQbkBOVvHKreztu5Ocu1T7MnUwkeWiHgstV8a5Tbo8/U5z3LdrHkBrD1w+vADu0/IvU664lchq8iY6TwT5TY1NK03J3zKj84V4xRVi3QjWUVJMVMLVFxvUXGQoe95n+wyZERe4OiCIgAT5ypuuK7h2xwseIk5m1qst9ix3BER2iwPMxQyWnfN78kcg/miOOlkXsFGh/GyyBIsvHhJU/UMQCbqh2cXmTMx8c7HoBNo0w5c5HTurFJmLxkJwCt/zwhuTQi1k7r68XZ1Mbc2V9SOoqvmU31gYWVLTjJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: image/x-icon
                                        
cache-control: public, max-age=300
content-length: 1150
last-modified: Fri, 21 Oct 2022 06:46:56 GMT
accept-ranges: bytes
etag: "1d8e518e916f47e"
ms-cv: pZxW5a0cGUqPs0WI.0
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DBAFEE9919014B09969ECD7766CCE9B8 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:01 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    c31f21550fe41b47cc0775fefd023205
Sha1:   239a8cef4a782fa47f4b733f715747a7a0174327
Sha256: 54d502bf879cb1e12d4a7122d2dc71633ac2afd930a9f3748135a88b4641cc9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9246
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 09:27:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9246
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 09:27:01 GMT
Connection: keep-alive

                                        
                                            GET /me.srf?wa=wsignin1.0&wreply=https%3A%2F%2Fmicrosoftedge.microsoft.com&uaid=e68f4ff0-aa7c-4670-37cf-7f80ba1af3ff&partnerId=edgestoreweb HTTP/1.1 
Host: login.live.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         40.126.32.135
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Encoding: gzip
Expires: Sat, 26 Nov 2022 09:26:01 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://acctcdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnvzeuno.azureedge.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: R3_BL2
x-ms-request-id: 566ad609-3c53-457a-8336-e70fd5d580f4
PPServer: PPV: 30 H: BL02PFBCF034669 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=e68f4ff0aa7c467037cf7f80ba1af3ff; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly MSPRequ=id=N&lt=1669454821&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly OParams=11O.DZ!pXT71ypaFQ9uBWc7vKhP7SPyfzdnLKPNmJJNSOoA3zvjI4*5pgtA7I7aT9M*zdT*fE2hFXCTQPKKMw4j1*2vH1VdlWrVWyf!7UK6Nz5M3jHTp!HozGTKub6WrZ4VFSaq6WIgruO51JHmPM2szcl6cfBvG9A1u*IELPk9UkRifF2MKtzNYYP*nfdmNyjA*SO5*0YgFf1J0qcnI85f83IZ3LHaPg2WzPTVmA*ANEsKh4ZljaUa8wn27lQS!1WtmMuSYRAct3Rm9ClUmFy!VB0E$; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Sat, 26 Nov 2022 09:27:01 GMT
Content-Length: 4862


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (10752)
Size:   4862
Md5:    18989a43563bf63da4b1b1db6c9de2d0
Sha1:   f5786b577d8d5bd82b0bc0e2f42cc373131a732d
Sha256: 7c9c70db72c66c7430245715a8c4f05d4aa49a48c68507d0cd624f951288fd52
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 42205
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9049
Md5:    c8dc4b8a7e9f7f4f84f0da568b43392b
Sha1:   3d32bff85cb7ec118c4496d0c3802829fdc9af3b
Sha256: 4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LDrq5UcFhG63XFZhmeS5Z_mEkwrvuQ2bLfT8hV9I3E1s1lJLZF5Dww==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
age: 42037
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8913
Md5:    5088223f5973e3cd56f03f50a1e84b79
Sha1:   0b6c9b51d10762a4747286ab5b1c2354fa39c622
Sha256: 8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:13:26 GMT
age: 8016
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3502
Md5:    a783df85f30f9c555f9df6b99f61744d
Sha1:   61f9bed607e81606be78285596acdc5e0e4f4994
Sha256: 19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88ca6be9-2485-4243-a3fe-1e61449736dd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6431
x-amzn-requestid: 0daa58b7-3fd8-463f-85f5-6f84fdb17661
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVOBEpEIAMF87A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381358c-3f8b9c18598ba2532518668d;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PuOd4PnHQfvwM2zDA15uprEEgoy7BfUUgjvkrf89DYmN43XfEfyJvg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:49:35 GMT
age: 41847
etag: "6a2f4d4bfec41d16fa84b0a9b0b13f7dcff2be3d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6431
Md5:    801dd70f0c591086062e2a9054f78efc
Sha1:   6a2f4d4bfec41d16fa84b0a9b0b13f7dcff2be3d
Sha256: ba28f27ea906aaa6db1fbdca53ecbd4366b99d2696fb888e47b731e21c0f82da
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 41277
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9914
Md5:    3b1c6878914466cfece680fa7cb73502
Sha1:   47fac81a2dd809df5c42ca1362f71d553572d2b1
Sha256: 6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 15754
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    841a4b110022a99ddea6f7bf66df0fa1
Sha1:   126771b86638108050cf57c0d12faa27f80f0edb
Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
                                        
                                            GET /16.000/content/js/MeControl_GO_wC8TuKKkgsOmYJN749A2.js HTTP/1.1 
Host: logincdn.msauth.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.live.com/
Origin: https://login.live.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         192.229.221.185
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 2000411
cache-control: public, max-age=31536000
content-md5: KPq1c+IXrD9W30CH+BCXQA==
date: Sat, 26 Nov 2022 09:27:02 GMT
etag: 0x8DABC92025440BE
last-modified: Wed, 02 Nov 2022 05:20:51 GMT
server: ECAcc (ska/F7A5)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 042879c8-d01e-0021-6347-ef5ed9000000
x-ms-version: 2009-09-19
content-length: 6045
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17261), with no line terminators
Size:   6045
Md5:    28fab573e217ac3f56df4087f8109740
Sha1:   d54367cd2964cf5d5105fad5bfc0ae4879fb8d05
Sha256: 6f2a90cf278452c8bf1fe7aba312140cac96b6a4afcfe718126036a7b76841ca
                                        
                                            POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-CJS-1.2.2&x-apikey=d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360 HTTP/1.1 
Host: browser.pipe.aria.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1010
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         20.42.73.25
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1289
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Sat, 26 Nov 2022 09:27:02 GMT

                                        
                                            POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-JS-1.8.6&content-encoding=base64&x-apikey=225704764c804c94911a89e2f005a8c7-bc3a19c7-eaf6-4346-823a-c88981efd3fb-7097&client-time-epoch-millis=1669454822326&time-delta-to-apply-millis=use-collector-delta HTTP/1.1 
Host: browser.pipe.aria.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 47800
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         20.42.73.25
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 1060
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Sat, 26 Nov 2022 09:27:02 GMT

                                        
                                            OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 
Host: browser.events.data.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
Referer: https://microsoftedge.microsoft.com/
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         20.42.73.25
HTTP/1.1 200 OK
                                        
Cache-Control: public, 3600
Content-Length: 0
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://microsoftedge.microsoft.com
Date: Sat, 26 Nov 2022 09:27:03 GMT

                                        
                                            POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 
Host: browser.events.data.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Client-Id: NO_AUTH
client-version: 1DS-Web-JS-3.2.6
apikey: b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888
upload-time: 1669454822909
time-delta-to-apply-millis: use-collector-delta
cache-control: no-cache, no-store
content-type: application/x-json-stream
Content-Length: 19281
Origin: https://microsoftedge.microsoft.com
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2; ak_bmsc=8C4F47A9BC5788EEF652269F526232A3~000000000000000000000000000000~YAAQJ08kFzG5WrCEAQAAgPlCsxGENz1Q3yOrtaq27+gQ2tbDzhFuHWAuf2Lqtmlb9UqziE4FCkM4bnPoN1tunY/1aHWkylf5KerbZvsM/ZdnxQbkBOVvHKreztu5Ocu1T7MnUwkeWiHgstV8a5Tbo8/U5z3LdrHkBrD1w+vADu0/IvU664lchq8iY6TwT5TY1NK03J3zKj84V4xRVi3QjWUVJMVMLVFxvUXGQoe95n+wyZERe4OiCIgAT5ypuuK7h2xwseIk5m1qst9ix3BER2iwPMxQyWnfN78kcg/miOOlkXsFGh/GyyBIsvHhJU/UMQCbqh2cXmTMx8c7HoBNo0w5c5HTurFJmLxkJwCt/zwhuTQi1k7r68XZ1Mbc2V9SOoqvmU31gYWVLTjJ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         20.42.73.25
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 208
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
Set-Cookie: MS0=7198e3c8e040494da4ae9bdb5d0db9cb; Domain=.microsoft.com; Expires=Sat, 26 Nov 2022 09:57:04 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1431
Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://microsoftedge.microsoft.com
Access-Control-Expose-Headers: time-delta-millis
Date: Sat, 26 Nov 2022 09:27:03 GMT


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   208
Md5:    5d84ef45fa57871670c02ece44ca173b
Sha1:   11d0328a876371362025869a59e6cca91ffa6565
Sha256: 742c8867dab1fb8cbec64623477fd6606d6f62dbb88eb10e123223573cf68d02
                                        
                                            GET /edgestoreweb/js/build-7b60f693b349bad4c82e.js HTTP/1.1 
Host: edgestoreweb.azureedge.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=15552000
content-encoding: br
content-md5: 2dHxgB2Y1lq8Q/3bCmbABA==
last-modified: Mon, 21 Nov 2022 08:08:13 GMT
etag: 0x8DACB97894E6051
x-cache: TCP_HIT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ed17cc74-901e-000c-7468-0140c5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 05NuBYwAAAAAyj6FBJaeLTKhTRdv1NVGPQU1TMDRFREdFMTkxNQAwNDQyYmMwMS0yZGVmLTQ2ODktYTI4Yy01NjU5MDgyNWJhZGU=
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /me/mecache?partner=edgestoreweb&wreply=https%3A%2F%2Fmicrosoftedge.microsoft.com%2Faddons%2Fdetail%2Fmulti-highlight%2Fliopeljgfbgjainhelaiggjebemkclap HTTP/1.1 
Host: mem.gfx.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: public, no-transform, max-age=7200
content-encoding: br
expires: Sat, 26 Nov 2022 10:58:26 GMT
x-cache: TCP_HIT
x-content-type-options: nosniff
content-security-policy: frame-ancestors https://microsoftedge.microsoft.com;
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 05tuBYwAAAACfgTM53S5fRZKkLzvNSiRtQU1TMDRFREdFMTkwOQBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=
date: Sat, 26 Nov 2022 09:27:01 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /addons/getproductdetailsbycrxid/liopeljgfbgjainhelaiggjebemkclap?hl=en-US&gl=NO HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
MS-CV: 62e72889-f905-42aa-8d50-c9c334f6955b
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: br
vary: Accept-Encoding
ms-cv: 62e72889-f905-42aa-8d50-c9c334f6955b
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'strict-dynamic' 'nonce-U2ATUGWdNRCbhoCnk4u8Wcb0YOw/T4FctaHyl6n2ccQ=' 'unsafe-inline';object-src 'self';base-uri 'self';
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B5F221B25A7141AD81A35FD8A54114C6 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Assets/Locales/NativeLocales.json HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
MS-CV: 86773d53-66a8-4ee6-bc20-e534d3a3471f
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: application/json
                                        
cache-control: public, max-age=43200
content-encoding: br
last-modified: Fri, 21 Oct 2022 06:46:56 GMT
accept-ranges: bytes
etag: "1d8e518e916fdc4"
vary: Accept-Encoding
ms-cv: 86773d53-66a8-4ee6-bc20-e534d3a3471f
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 33468D479381427A81F31985AC76DD4C Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Assets/Regions/NativeRegions-en-US.json HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
MS-CV: 5a0c7da4-930c-429c-a030-1a20fca4c08e
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: application/json
                                        
cache-control: public, max-age=43200
content-encoding: br
last-modified: Fri, 21 Oct 2022 06:46:56 GMT
accept-ranges: bytes
etag: "1d8e518e916e56f"
vary: Accept-Encoding
ms-cv: 5a0c7da4-930c-429c-a030-1a20fca4c08e
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B913D3E89DE04781A222077E671914B3 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Assets/Strings/en-US/strings.json HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
MS-CV: c7e74918-022f-4eab-84cd-5d7c9b8f31cc
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: application/json
                                        
cache-control: public, max-age=300
content-encoding: br
last-modified: Fri, 21 Oct 2022 06:46:58 GMT
accept-ranges: bytes
etag: "1d8e518ea493cc6"
vary: Accept-Encoding
ms-cv: c7e74918-022f-4eab-84cd-5d7c9b8f31cc
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 08F95E4B88B74A58AF8DB99713E559F8 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /edgestoreweb/js/vendor3251469b173d334c4d38e.js HTTP/1.1 
Host: edgestoreweb.azureedge.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=15552000
content-encoding: br
content-md5: hiwB+9PHurwnuQsfo9jGEw==
last-modified: Mon, 21 Nov 2022 08:08:14 GMT
etag: 0x8DACB978A774C86
x-cache: TCP_HIT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: df65159d-901e-002e-1802-012ef3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 05NuBYwAAAAAfsBQz1gcOTL7iS5irS/ofQU1TMDRFREdFMTkxNQAwNDQyYmMwMS0yZGVmLTQ2ODktYTI4Yy01NjU5MDgyNWJhZGU=
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /edgestoreweb/js/vendor2b1edd69ba9ed7e7fae13.js HTTP/1.1 
Host: edgestoreweb.azureedge.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: max-age=15552000
content-encoding: br
content-md5: LlfFPrb7M/TQnUSatv8Vqw==
last-modified: Fri, 25 Nov 2022 06:56:33 GMT
etag: 0x8DACEB23061C249
x-cache: TCP_HIT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 715b7bc4-e01e-008b-2b67-0115ea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 05NuBYwAAAAC36lS+qVqjR4AL89/+peJtQU1TMDRFREdFMTkxNQAwNDQyYmMwMS0yZGVmLTQ2ODktYTI4Yy01NjU5MDgyNWJhZGU=
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Assets/Regions/NativeRegions-en-US.json HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
MS-CV: 56979d0a-3248-4447-bdfb-2f409bf2f4df
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: application/json
                                        
cache-control: public, max-age=43200
content-encoding: br
last-modified: Fri, 21 Oct 2022 06:46:56 GMT
accept-ranges: bytes
etag: "1d8e518e916e56f"
vary: Accept-Encoding
ms-cv: 56979d0a-3248-4447-bdfb-2f409bf2f4df
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A08739766B774067BC3A5B89C78B7377 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /addons/getrelatedextensionslist/0RDCKCZ3X8K3?hl=en-US&gl=NO&noItems=10&pgNo=1&IncludeExtensionDetailsFields=false HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
MS-CV: f4cde783-6e2a-44c6-9425-70205f00e7fa
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: br
vary: Accept-Encoding
ms-cv: f4cde783-6e2a-44c6-9425-70205f00e7fa
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'strict-dynamic' 'nonce-bv2z2ymsDPqkkK7KldBjOvhWhljrJJ1Q5kVP44mxkMc=' 'unsafe-inline';object-src 'self';base-uri 'self';
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B067FD2BB61F4A2E905597AEC2B2C7E4 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:01Z
date: Sat, 26 Nov 2022 09:27:01 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: br
vary: Accept-Encoding
ms-cv: xUBNNXzMykeM2/rz.0
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'strict-dynamic' 'nonce-7xsbOc6iPYM8w7y9+3PIk4LxgNyWIhCo/uxZ78QbnUk=' 'unsafe-inline';object-src 'self';base-uri 'self';
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F40411AE471342F58D09326D613EC0C4 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:00Z
date: Sat, 26 Nov 2022 09:26:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /addons/css/site.css HTTP/1.1 
Host: microsoftedge.microsoft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/addons/detail/multi-highlight/liopeljgfbgjainhelaiggjebemkclap
Cookie: MC1=GUID=c9b37f725aa54aca920642aafbd273a6&HASH=c9b3&LV=202205&V=4&LU=1652916118807; display-culture=en-US; MUID=5cc6c626cac748aeaf2c0657a97a57b2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         13.107.6.158
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=300
content-encoding: br
last-modified: Fri, 21 Oct 2022 06:46:56 GMT
accept-ranges: bytes
etag: "1d8e518e916eccc"
vary: Accept-Encoding
ms-cv: IoO+LFyjHkuImg+S.0
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6C837665D7CB46C59551110F2F87F8F1 Ref B: SVG20EDGE0413 Ref C: 2022-11-26T09:27:00Z
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /meversion?partner=Edgestoreweb&market=en-us&uhf=1 HTTP/1.1 
Host: mem.gfx.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://microsoftedge.microsoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, no-transform, max-age=7200
content-encoding: br
expires: Sat, 26 Nov 2022 11:26:43 GMT
x-cache: TCP_HIT
x-content-type-options: nosniff
access-control-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; includeSubDomains
x-azure-ref: 05NuBYwAAAACTyM8bSihaTJR4aKVdxQWOQU1TMDRFREdFMTkwOQBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE=
date: Sat, 26 Nov 2022 09:27:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---