Report - nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/

Report Overview

URL

nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/
IP

45.88.108.231

ASN

#44486 SYNLINQ
Submitted

2023-01-29T21:51:12Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

2

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org (9)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3042	7977	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2372	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5856	34.160.144.191
th.bing.com (20)	4980	2019-12-09T13:09:09Z	2023-03-13T07:02:49Z	30694	83864	204.79.197.200
login.microsoftonline.com (1)	25	2017-02-19T08:06:40Z	2019-07-18T10:58:27Z	1211	2066	20.190.159.70
login.live.com (1)	79	2012-05-21T09:00:20Z	2023-03-13T05:09:29Z	640	817	20.190.159.70
nifty-margulis.45-88-108-231.plesk.page (2)	unknown	2023-01-16T23:40:02Z	2023-03-03T00:34:45Z	940	725	45.88.108.231
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
www.bing.com (83)	91	2012-05-21T17:02:58Z	2018-11-01T22:19:15Z	124710	941129	204.79.197.200
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	52.88.60.132
assets.msn.com (1)	188	2018-09-21T01:46:35Z	2023-03-13T07:40:47Z	425	5670	23.36.79.8
www2.bing.com (1)	1811	2018-06-25T01:16:21Z	2023-03-13T07:40:47Z	1415	1137	204.79.197.200
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3260	53106	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-29	medium	nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/	Phishing
2023-01-29	medium	nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (129)

URL IP Response Size

nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/

45.88.108.231

301 Moved Permanently

162

URL HTTP/1.1

nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/
IP

45.88.108.231:0
ASN

#44486 SYNLINQ

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

162
Hash

4f8e702cc244ec5d4de32740c0ecbd97

3adb1f02d5b6054de0046e367c1d687b6cdf7aff

9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/ HTTP/1.1
Host: nifty-margulis.45-88-108-231.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 29 Jan 2023 21:51:01 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

a2104f935c638b4767ca5ae0d738ef23

85c6af15af749be0ceeae6de17c36925b750f166

5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14938
Expires: Mon, 30 Jan 2023 01:59:59 GMT
Date: Sun, 29 Jan 2023 21:51:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

3eb88dea4fe00db1182370e72683c3ab

ca520abf1e91bfd2aef40c6a1270a911071e8922

d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14647
Expires: Mon, 30 Jan 2023 01:55:08 GMT
Date: Sun, 29 Jan 2023 21:51:01 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

dcd75ca6daca51c5e39d431468511793

07f76d3bf23d65c9110d810fa71a994e39e085d3

73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 21:43:09 GMT
content-type: application/json
age: 472
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

302c7548412192add063ad6c8b99cf3b

e5d178931a27db036ce8daae302594d3ff7050b8

fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7441
Expires: Sun, 29 Jan 2023 23:55:02 GMT
Date: Sun, 29 Jan 2023 21:51:01 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

7b922915ebf1fa3639b333f994c74f24

144a3f80b98fd0652d4614f24cf6cbbee40f8938

adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: iAVqOSUorLE8LNyguJtdFYFqCTGYEBU+jaGSlUUKq+6EtxuFpmSUvBsTE5/6rFVZCVTAHGon2kflbls3OU1rlg==
x-amz-request-id: CSBGNYBRNTAANPBF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 21:21:32 GMT
age: 1769
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

afd6fc986ad23d4cde992826aecbc5d0

079d70d156bd6709869e9d728b7c897407ff8967

30fee61d8a8b38d6c7a0b78bf3529217abb2de3c98a8eda09753aebe5ebe457d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30FEE61D8A8B38D6C7A0B78BF3529217ABB2DE3C98A8EDA09753AEBE5EBE457D"
Last-Modified: Fri, 27 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6308
Expires: Sun, 29 Jan 2023 23:36:09 GMT
Date: Sun, 29 Jan 2023 21:51:01 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 21:51:01 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/

45.88.108.231

302 Found

URL HTTP/2

nifty-margulis.45-88-108-231.plesk.page/ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/
IP

45.88.108.231:0
ASN

#44486 SYNLINQ

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /ics/a1b2c3/ca9200b1a8af0e188596e8c30a39b9f4/login/ HTTP/1.1
Host: nifty-margulis.45-88-108-231.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 21:51:01 GMT
content-type: text/html; charset=UTF-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
location: https://www.bing.com
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2

www.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js

United States MICROSOFT-CORP-MSN-AS-BLOCK

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

very short file (no magic)

Size

5
Hash

e5aa921deb86f8138026bb9c240820fb

966bbc10109a3d130ab5acbc2d202b1b26379afe

18b848a269a2d23ead68930fee1552542e8bd30c65f5d374d3ebea036c903381

HTTP Headers

                                        GET /rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000
content-length: 5
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: 5aqSHeuG+BOAJrucJAgg+w==
last-modified: Wed, 24 Jun 2020 04:27:46 GMT
etag: 0x8D817F6F26EBE3A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 9177ed59-701e-008c-4e94-307525000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 86B477FDFB1546BB82C9DF04C414D262 Ref B: AM3EDGE0718 Ref C: 2023-01-27T13:08:41Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 56611BE735D04042A672BC705EB18D95 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/th?id=OHR.BlackbirdDay_ROW6506162005_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50

204.79.197.200

200 OK

184348

URL HTTP/2

www.bing.com/th?id=OHR.BlackbirdDay_ROW6506162005_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data

Size

184348
Hash

4777f4f7af0638c04f33a3f886a092d3

050eb85e8ad0b38588178a99ce451e8316b23acd

9d71f2503b0fae12e9c9b8fd92b6d1e424833c23a38fff8d3e5bcec4f2197de4

HTTP Headers

                                        GET /th?id=OHR.BlackbirdDay_ROW6506162005_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 184348
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FC3FC800072F45BEBADA3F37C31E707A Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/QNuEl_z_uVdtS87gKkLRwH8hz9w.br.css

204.79.197.200

200 OK

125051

URL HTTP/2

www.bing.com/rp/QNuEl_z_uVdtS87gKkLRwH8hz9w.br.css
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

125051
Hash

1e5b897f57d15801400e9f3f5e44183a

40db8497fcffb9576d4bcee02a42d1c07f21cfdc

c6765ee42725e47da86a284de5c882194a1149bf50ee323e7eec0d2e70b6fdb8

HTTP Headers

                                        GET /rp/QNuEl_z_uVdtS87gKkLRwH8hz9w.br.css HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 125051
content-type: text/css; charset=utf-8
content-encoding: br
content-md5: HluJf1fRWAFADp8/XkQYOg==
last-modified: Fri, 27 Jan 2023 05:48:01 GMT
etag: 0x8DB002A0D0B206F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 14faa127-901e-00ce-5f50-32a6bb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 34DACC96BB9341D191BC3A0EE1764927 Ref B: AM3EDGE0910 Ref C: 2023-01-27T15:55:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 2204A8ACBA8E4CDABD9772D38F735426 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js

204.79.197.200

200 OK

6683

URL HTTP/2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (17343), with no line terminators

Size

6683
Hash

204bb375b5117b07884a137329e07bab

e87cb497b3b6e3c43a8abfa85ff1289e2d842308

030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1

HTTP Headers

                                        GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 6862e6a0-901e-0077-74de-32a2a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: DC3CBE9981244C68B6C03FA1EFD7FD8D Ref B: AM3EDGE0917 Ref C: 2023-01-28T13:04:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: A3C6BBDAED1544B1A9EA8F7E97B0BA43 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=1F0CA10CAD69494492C3543AE70ECC17&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:141,%22CT%22:147,%22IL%22:1}}&P=SERP&DA=DUBE01

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=1F0CA10CAD69494492C3543AE70ECC17&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:141,%22CT%22:147,%22IL%22:1}}&P=SERP&DA=DUBE01
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=1F0CA10CAD69494492C3543AE70ECC17&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:141,%22CT%22:147,%22IL%22:1}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9A5E26C9D96C4AC280883834CF0C634D Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/rp/uXkColSm33PJ9JCaP_qObg6pq8I.br.js

204.79.197.200

200 OK

7738

URL HTTP/2

www.bing.com/rp/uXkColSm33PJ9JCaP_qObg6pq8I.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (16998)

Size

7738
Hash

1461aa93362fef1b80553af60c6aa898

b97902a254a6df73c9f4909a3ffa8e6e0ea9abc2

c9ff8ab58772ca5afd27efbd5289c65254a7ad5ba33f57f2e868038bde436bdc

HTTP Headers

                                        GET /rp/uXkColSm33PJ9JCaP_qObg6pq8I.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 7738
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: FGGqkzYv7xuAVTr2DGqomA==
last-modified: Thu, 29 Sep 2022 19:34:29 GMT
etag: 0x8DAA251A0825C06
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: d6a2b49c-c01e-0018-684c-30a852000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 57497E4AE1C644549B25B97A4106C994 Ref B: AM3EDGE0717 Ref C: 2023-01-25T04:24:56Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: C4AF07F8671640789FCE1325FAEF08F2 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/-8B2JlFI9HgFcgp0RGJHcPQD2GM.br.js

204.79.197.200

200 OK

5105

URL HTTP/2

www.bing.com/rp/-8B2JlFI9HgFcgp0RGJHcPQD2GM.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (10033), with CRLF line terminators

Size

5105
Hash

5944b72917c24e223384062a021572b1

fbc076265148f47805720a7444624770f403d863

572f9772781fa9000c69fa2c795c97554051fcb30e4f1f60b4b44ab60a12c053

HTTP Headers

                                        GET /rp/-8B2JlFI9HgFcgp0RGJHcPQD2GM.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 5105
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: WUS3KRfCTiIzhAYqAhVysQ==
last-modified: Thu, 15 Sep 2022 21:37:18 GMT
etag: 0x8DA976276EEA14F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1e0b0797-a01e-0053-48b7-325401000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: B1F7F253DFCD4B5DB489237EAE9C5C17 Ref B: AM3EDGE0709 Ref C: 2023-01-29T19:14:28Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 229D17A14C91423C985810A33A4F5D8C Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/9NY1h-PkzBwPJlU1vCGX-aJdD0o.br.js

204.79.197.200

200 OK

123219

URL HTTP/2

www.bing.com/rp/9NY1h-PkzBwPJlU1vCGX-aJdD0o.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

123219
Hash

731b36f1f197bddbf96e0ceaa45b421f

f4d63587e3e4cc1c0f265535bc2197f9a25d0f4a

cfdfc7647c42ec1740e75feb5833682955224e0eea7723ca5a1ce2a8fa0e78c3

HTTP Headers

                                        GET /rp/9NY1h-PkzBwPJlU1vCGX-aJdD0o.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 123219
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: cxs28fGXvdv5bgzqpFtCHw==
last-modified: Fri, 27 Jan 2023 22:44:30 GMT
etag: 0x8DB00B80D8E4A86
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 0c9014b4-301e-00f8-3df6-322bcb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 48FF7E6C9ED1499E9C145D391335C826 Ref B: AM3EDGE0707 Ref C: 2023-01-28T10:32:52Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 27F448D3BF864A7DA4618B577EC5C5DD Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/T0lAQLm87gv5AUytm5v9--Y-Yj0.br.js

204.79.197.200

200 OK

201

URL HTTP/2

www.bing.com/rp/T0lAQLm87gv5AUytm5v9--Y-Yj0.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (443), with no line terminators

Size

201
Hash

046f9208750472766514a11e903356da

4f494040b9bcee0bf9014cad9b9bfdfbe63e623d

17ecbfee473322f41352e17aee210966b694d0ef40c8583ef2a4c57e9a92e974

HTTP Headers

                                        GET /rp/T0lAQLm87gv5AUytm5v9--Y-Yj0.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 201
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: BG+SCHUEcnZlFKEekDNW2g==
last-modified: Wed, 17 Aug 2022 06:00:53 GMT
etag: 0x8DA8015D8256542
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: aec1729a-d01e-00cf-0d6d-30f967000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 2CC1F2EC91524FB49D95037842874908 Ref B: AM3EDGE0719 Ref C: 2023-01-27T15:55:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: EF6697CFB1914C4D999D243BFE05D739 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/KbdNoKoTp6pcIwce8Ydw3sjeIHc.br.js

204.79.197.200

200 OK

126240

URL HTTP/2

www.bing.com/rp/KbdNoKoTp6pcIwce8Ydw3sjeIHc.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with CRLF line terminators

Size

126240
Hash

c869129706723fed30a21d508a64e9b4

29b74da0aa13a7aa5c23071ef18770dec8de2077

1016c57fe6168130abaf9cf864dccaab0b7befe05d26647a6d200a177503c99e

HTTP Headers

                                        GET /rp/KbdNoKoTp6pcIwce8Ydw3sjeIHc.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 126240
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: yGkSlwZyP+0woh1QimTptA==
last-modified: Thu, 15 Sep 2022 21:37:36 GMT
etag: 0x8DA976281A77CDD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: f127775a-701e-009b-5c55-30b630000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 1C0F81EFE2184F6595356FF577454A65 Ref B: AM3EDGE0906 Ref C: 2023-01-27T17:14:36Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 70A3438A67CD451382C988CD3AA278E4 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/hSGwh2JO2tj-l608vqtbJ2446IY.br.js

204.79.197.200

200 OK

1378

URL HTTP/2

www.bing.com/rp/hSGwh2JO2tj-l608vqtbJ2446IY.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (2965), with no line terminators

Size

1378
Hash

bdd4048816553ea40acb42eecbe9ae34

8521b087624edad8fe97ad3cbeab5b276e38e886

8d5d0a44e4879c262a56f74b9e95405556dbad6fb1e44243487645afc0c171d3

HTTP Headers

                                        GET /rp/hSGwh2JO2tj-l608vqtbJ2446IY.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 1378
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: vdQEiBZVPqQKy0Luy+muNA==
last-modified: Wed, 17 Aug 2022 06:29:55 GMT
etag: 0x8DA8019E69C3760
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 00686ce5-201e-0010-216c-30b25d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: A37BB6461BDF4957865F493333687982 Ref B: AM3EDGE0919 Ref C: 2023-01-27T17:14:38Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 69E04FF5FF964B4291FF4346A6706883 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/O7fNg96R1_CsQZshpnEC3v_JCPI.br.js

204.79.197.200

200 OK

610

URL HTTP/2

www.bing.com/rp/O7fNg96R1_CsQZshpnEC3v_JCPI.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (1228), with no line terminators

Size

610
Hash

f61da7b710063e1070d6d0a07754192c

3bb7cd83de91d7f0ac419b21a67102deffc908f2

891410ffff9045b2cd90debcc589f8ee983b7411b1f3574e9495307bdeab0f5b

HTTP Headers

                                        GET /rp/O7fNg96R1_CsQZshpnEC3v_JCPI.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 610
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: 9h2ntxAGPhBw1tCgd1QZLA==
last-modified: Wed, 17 Aug 2022 05:51:20 GMT
etag: 0x8DA801482AA2E70
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1f0968fc-c01e-0008-1150-306d3a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 937B9DADAD624AE5ACCB9F7FF2A208ED Ref B: AM3EDGE0717 Ref C: 2023-01-27T00:06:51Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: DC1F834E712E46E896B42D4C816AC5AE Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/nsroEpGNC5Bi2JavQ0PnhO3f744.br.js

204.79.197.200

200 OK

2520

URL HTTP/2

www.bing.com/rp/nsroEpGNC5Bi2JavQ0PnhO3f744.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (5793), with no line terminators

Size

2520
Hash

bfc8c6ff053ea4b31c3a687bb79279ae

9ecae812918d0b9062d896af4343e784eddfef8e

5882bad07a9180ead84df92105c64a3a49dda3c0e5778be032563c5c2c8caf05

HTTP Headers

                                        GET /rp/nsroEpGNC5Bi2JavQ0PnhO3f744.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 2520
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: v8jG/wU+pLMcOmh7t5J5rg==
last-modified: Fri, 20 Jan 2023 19:51:30 GMT
etag: 0x8DAFB1FB9EB432E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: f37fcf3c-601e-0011-70b1-32ed81000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 5ED5B1EE541A4066A13D8B01E1BB64A6 Ref B: AM3EDGE1007 Ref C: 2023-01-29T19:08:15Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 5FF4280ACA3444BFAE02D07EE19437E2 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/LXu4eYVt3NhFk3Ud9ZbhZ_PYFaA.br.js

204.79.197.200

200 OK

238

URL HTTP/2

www.bing.com/rp/LXu4eYVt3NhFk3Ud9ZbhZ_PYFaA.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (426), with no line terminators

Size

238
Hash

4137a3f03dcd7fd4b7752f70c8074495

2d7bb879856ddcd84593751df596e167f3d815a0

6558c0e3b023f49f00632f55ed2aa2bc7725fc331ade0785f959514f363441f1

HTTP Headers

                                        GET /rp/LXu4eYVt3NhFk3Ud9ZbhZ_PYFaA.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 238
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: QTej8D3Nf9S3dS9wyAdElQ==
last-modified: Tue, 16 Aug 2022 03:43:05 GMT
etag: 0x8DA7F396DA49FAB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: e9014167-f01e-0076-1e94-309763000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: D2E670CD289D4FACB1439E1F0C8BA464 Ref B: AM3EDGE0910 Ref C: 2023-01-25T11:37:56Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: C4097D26024A436D80460A3565F0B84E Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/xrUJJ8sN8ucbiFbMJle3n0IfRwU.br.js

204.79.197.200

200 OK

151

URL HTTP/2

www.bing.com/rp/xrUJJ8sN8ucbiFbMJle3n0IfRwU.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with no line terminators

Size

151
Hash

26259c75a0d0d4271c76e73c2f87917a

c6b50927cb0df2e71b8856cc2657b79f421f4705

900c34cd81e6aecd131a3eb8031a9513c5069a94deba1cfcce86cb0aada241be

HTTP Headers

                                        GET /rp/xrUJJ8sN8ucbiFbMJle3n0IfRwU.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 151
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: JiWcdaDQ1Cccduc8L4eReg==
last-modified: Wed, 17 Aug 2022 07:04:52 GMT
etag: 0x8DA801EC85E8197
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: d5480983-f01e-0095-285b-309f80000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 44C7B297F8C342FCADA7074EA922D5BB Ref B: AM3EDGE0617 Ref C: 2023-01-27T00:06:51Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 0AF7F25B432D4BF893C9943CC42486E7 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/Gyuq2bqitqDJM0BeAkbKXGlQXNw.br.js

204.79.197.200

200 OK

714

URL HTTP/2

www.bing.com/rp/Gyuq2bqitqDJM0BeAkbKXGlQXNw.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (1274), with no line terminators

Size

714
Hash

c10999430bb33502865af934d77220a4

1b2baad9baa2b6a0c933405e0246ca5c69505cdc

914aa4d773471c0c464051575f9a74a44cf5693d62411e2bf95e4f501edfecac

HTTP Headers

                                        GET /rp/Gyuq2bqitqDJM0BeAkbKXGlQXNw.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 714
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: wQmZQwuzNQKGWvk013IgpA==
last-modified: Wed, 17 Aug 2022 05:37:09 GMT
etag: 0x8DA8012871F1AB6
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: d477d985-901e-0015-4abb-326086000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: EA76B78DFEBA4B719B1CDC50DD172E4B Ref B: AM3EDGE0721 Ref C: 2023-01-28T15:47:59Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 8CA3BED88DC64EEB8FAF559FD6D728C4 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/ilbkF5vv0sk3tJ8LDY0Nm39p12g.br.js

204.79.197.200

200 OK

258

URL HTTP/2

www.bing.com/rp/ilbkF5vv0sk3tJ8LDY0Nm39p12g.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (425), with no line terminators

Size

258
Hash

98e5973bc0f7e89beda92ff046e64849

8a56e4179befd2c937b49f0b0d8d0d9b7f69d768

e888ebc827d9222c6e48eb421f0835d49fce8cbffec34da70c30df52741f5f00

HTTP Headers

                                        GET /rp/ilbkF5vv0sk3tJ8LDY0Nm39p12g.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 258
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: mOWXO8D36JvtqS/wRuZISQ==
last-modified: Wed, 17 Aug 2022 06:33:11 GMT
etag: 0x8DA801A5B2CE61F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 87845de0-601e-00b8-40c3-322cf3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: CFB941CA8C164ADA9BDE511F60BB18A1 Ref B: AM3EDGE1006 Ref C: 2023-01-28T15:48:06Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: BF4F8B55592341B8A784E80A15480387 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/n21aGRCN5EKHB3qObygw029dyNU.br.js

204.79.197.200

200 OK

806

URL HTTP/2

www.bing.com/rp/n21aGRCN5EKHB3qObygw029dyNU.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Unicode text, UTF-8 text, with very long lines (1587), with no line terminators

Size

806
Hash

851ad37bdc453dc11018b18f815be387

9f6d5a19108de44287077a8e6f2830d36f5dc8d5

3e4339186f9b62a5cf8c119c419025d8634d93724708481d03d7a4b1f40980b3

HTTP Headers

                                        GET /rp/n21aGRCN5EKHB3qObygw029dyNU.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000
content-length: 806
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: hRrTe9xFPcEQGLGPgVvjhw==
last-modified: Wed, 30 Jun 2021 06:36:05 GMT
etag: 0x8D93B91568DF318
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 2bfc194f-701e-001d-39b4-327a89000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: EEF06B02CACF4365BE25750CB5E3E250 Ref B: AM3EDGE0607 Ref C: 2023-01-29T20:35:56Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: EDE1315014474D88ABFB9B3116F3BFAD Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:02Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/mEnA5fBf4mUGnGBL55wbFSniDys.br.js

204.79.197.200

200 OK

8864

URL HTTP/2

www.bing.com/rp/mEnA5fBf4mUGnGBL55wbFSniDys.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (21616)

Size

8864
Hash

84eeaa49c503cd4eca340a927272c268

9849c0e5f05fe265069c604be79c1b1529e20f2b

411666a81d0e595fec8579cc62028548ab247df628d775bd62acd7b6085c3f38

HTTP Headers

                                        GET /rp/mEnA5fBf4mUGnGBL55wbFSniDys.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8864
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: hO6qScUDzU7KNAqScnLCaA==
last-modified: Thu, 15 Sep 2022 21:37:58 GMT
etag: 0x8DA97628EA22656
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 9e4cf5dc-f01e-002c-3ec8-329b9a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 34CE9C34D908464391D44A69AC460B05 Ref B: AM3EDGE0708 Ref C: 2023-01-28T03:49:15Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: B6C86C89E8104B20A7B56D749F4E6E66 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/MjkKTrIX9w2UKVd1W1WV1Gj2zWM.br.js

204.79.197.200

200 OK

504

URL HTTP/2

www.bing.com/rp/MjkKTrIX9w2UKVd1W1WV1Gj2zWM.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (938), with no line terminators

Size

504
Hash

605ac0925a8dc06b8bf87e50e72c599f

32390a4eb217f70d942957755b5595d468f6cd63

31a54e70b32c7ff53fab4d6c5f06cc830aba452fcd3e114c938ce33751058c72

HTTP Headers

                                        GET /rp/MjkKTrIX9w2UKVd1W1WV1Gj2zWM.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 504
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: YFrAklqNwGuL+H5Q5yxZnw==
last-modified: Wed, 17 Aug 2022 05:49:34 GMT
etag: 0x8DA801443417B4B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 39263d37-101e-0069-66b4-324e79000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 3B6967EEAB9141BD9DDB7FD109A32BAF Ref B: AM3EDGE0708 Ref C: 2023-01-29T20:35:59Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 7AA2B88BA82E4FFFB743F3ECE79B65E5 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/JXkjDPywJD9oeuWPLy7bD8Jc6mw.br.js

204.79.197.200

200 OK

278

URL HTTP/2

www.bing.com/rp/JXkjDPywJD9oeuWPLy7bD8Jc6mw.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (423), with no line terminators

Size

278
Hash

0ec6fd6c42c79b50c72ff3c4121b11de

2579230cfcb0243f687ae58f2f2edb0fc25cea6c

b83e4279b26315a76a3d2066e9748825f764a83c2c0351c74387dab5c70876ed

HTTP Headers

                                        GET /rp/JXkjDPywJD9oeuWPLy7bD8Jc6mw.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 278
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: Dsb9bELHm1DHL/PEEhsR3g==
last-modified: Wed, 17 Aug 2022 05:42:04 GMT
etag: 0x8DA801337338927
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: a0dfbae9-801e-0044-0d52-30fd0a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 9A9C30F4AFCB44F580A171FD24B8172D Ref B: AM3EDGE0721 Ref C: 2023-01-25T04:24:56Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: D23CB854B01C401BADBE55CBCBE5CC59 Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:01Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/8CgcSSLayxEVUBf0swP_bQGMId8.br.js

204.79.197.200

200 OK

156

URL HTTP/2

www.bing.com/rp/8CgcSSLayxEVUBf0swP_bQGMId8.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with no line terminators

Size

156
Hash

d00a4a9b19d6765809febdd5bf16e615

f0281c4922dacb11155017f4b303ff6d018c21df

c23431129f545615a210e57cd5f9c6964f797c068b5e30ff3c7c105e2417438e

HTTP Headers

                                        GET /rp/8CgcSSLayxEVUBf0swP_bQGMId8.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 156
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: 0ApKmxnWdlgJ/r3VvxbmFQ==
last-modified: Wed, 17 Aug 2022 05:18:49 GMT
etag: 0x8DA800FF7F6EFE0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1decd711-901e-003a-5560-306d4d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: AE781D77204C49628BF40BCA027287D2 Ref B: AM3EDGE0714 Ref C: 2023-01-28T03:11:18Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: E035FF9FC09745BB904BFF54CFF93C6B Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:02Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br.js

204.79.197.200

200 OK

368

URL HTTP/2

www.bing.com/rp/V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (576), with no line terminators

Size

368
Hash

c65d9214b64240472c6543405127cc98

57f7c143f895980804fd36bf4fee81357734658e

2d6cd78310f404d4d1d024792cbba3eedec56bdaee61f4669ce7620687572147

HTTP Headers

                                        GET /rp/V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 368
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: xl2SFLZCQEcsZUNAUSfMmA==
last-modified: Wed, 17 Aug 2022 06:06:36 GMT
etag: 0x8DA8016A4AEB24C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 5515cc91-301e-0041-374b-302fd1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 95EC23F93D7D41EB9C72FAF53BD910C2 Ref B: AM3EDGE1009 Ref C: 2023-01-25T08:59:35Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: C44F014E14EE473D82DD992196E633BB Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:02Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/C7TuoP5bfHv-CZlMHZy7yfvI4Fk.br.js

204.79.197.200

200 OK

203

URL HTTP/2

www.bing.com/rp/C7TuoP5bfHv-CZlMHZy7yfvI4Fk.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (328), with no line terminators

Size

203
Hash

408709922b53a36770fd4769bb69574a

0bb4eea0fe5b7c7bfe09994c1d9cbbc9fbc8e059

625dbbdd325592d60fde2aaaeff66aec2bf3baa8cfaa68b2128d7d72b48c93d8

HTTP Headers

                                        GET /rp/C7TuoP5bfHv-CZlMHZy7yfvI4Fk.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 203
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: QIcJkitTo2dw/Udpu2lXSg==
last-modified: Wed, 17 Aug 2022 05:25:38 GMT
etag: 0x8DA8010EBB46742
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 5e78d096-901e-00de-0f53-3063d3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 8C2D68768B0C41C7BB9EEFF367ABB640 Ref B: AM3EDGE0620 Ref C: 2023-01-26T12:53:06Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 33ECB09519CE42F9AAE160E8BB19CD5F Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:02Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/XJ8OmILbNhm0zU9tdkuGYeXVPRQ.br.js

204.79.197.200

200 OK

269

URL HTTP/2

www.bing.com/rp/XJ8OmILbNhm0zU9tdkuGYeXVPRQ.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (391), with no line terminators

Size

269
Hash

5edf23a0d0a8033bc3899a14fc856376

5c9f0e9882db3619b4cd4f6d764b8661e5d53d14

f628b6d239249f6e381bde469fba2f81987f2ddcafe94b0e2548abda749a7fed

HTTP Headers

                                        GET /rp/XJ8OmILbNhm0zU9tdkuGYeXVPRQ.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; MUIDB=0B4D4F1CB2BC6F81264D5DB4B3EB6EE0; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=B0E885580AD944E888B35A014C8BC701&dmnchg=1; SRCHUSR=DOB=20230129&T=1675027524000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63810625846&HV=1675028867; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:50:48.4042613+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=3BD684DB207469AD2D1F9673212368A1; _SS=SID=3BD684DB207469AD2D1F9673212368A1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform
content-length: 269
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: Xt8joNCoAzvDiZoU/IVjdg==
last-modified: Wed, 17 Aug 2022 06:10:20 GMT
etag: 0x8DA80172A213C93
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 7d6a7934-601e-003e-4f4e-30e04a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: A7F18DC528D6426A997B1B4C15340F4D Ref B: AM3EDGE0912 Ref C: 2023-01-25T03:31:29Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: F0F40076BC3C40C6B8BF63702A3160FC Ref B: OSL30EDGE0420 Ref C: 2023-01-29T21:51:02Z
date: Sun, 29 Jan 2023 21:51:01 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/Gw7eETSwe7GHmKwW1lRqGPQJXRo.br.js

204.79.197.200

200 OK

1171

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (52)

#1 JS:Script (size: 12933)

#2 JS:Script (size: 327395)

#3 JS:Script (size: 20)

#4 JS:Script (size: 1234)

#5 JS:Script (size: 315)

#6 JS:Script (size: 212)

#7 JS:Script (size: 42967)

#8 JS:Script (size: 576)

#9 JS:Script (size: 520)

#10 JS:Script (size: 252)

#11 JS:Script (size: 920)

#12 JS:Script (size: 2524)

#13 JS:Script (size: 19932)

#14 JS:Script (size: 1284)

#15 JS:Script (size: 1274)

#16 JS:Script (size: 0)

#17 JS:Script (size: 2965)

#18 JS:Script (size: 423)

#19 JS:Script (size: 21647)

#20 JS:Script (size: 306)

#21 JS:Script (size: 2015)

#22 JS:Script (size: 17343)

#23 JS:Script (size: 90)

#24 JS:Script (size: 13612)

#25 JS:Script (size: 358)

#26 JS:Script (size: 3278)

#27 JS:Script (size: 13338)

#28 JS:Script (size: 64)

#29 JS:Script (size: 443)

#30 JS:Script (size: 28947)

#31 JS:Script (size: 258)

#32 JS:Script (size: 457)

#33 JS:Script (size: 111889)

#34 JS:Script (size: 2678)

#35 JS:Script (size: 17026)

#36 JS:Script (size: 1228)

#37 JS:Script (size: 257)

#38 JS:Script (size: 426)

#39 JS:Script (size: 425)

#40 JS:Script (size: 89)

#41 JS:Script (size: 391)

#42 JS:Script (size: 5666)

#43 JS:Script (size: 1931)

#44 JS:Script (size: 938)

#45 JS:Script (size: 1589)

#46 JS:Script (size: 226)

#47 JS:Script (size: 328)

#48 JS:Script (size: 1051)

#49 JS:Script (size: 110)

#50 JS:Script (size: 27)

#51 JS:Script (size: 5793)

#1 JS:Eval (size: 12)

HTTP Transactions (129)

URL HTTP/1.1

IP

ASN