Report - netwerkstatistiek.info/ics/a1b2c3/df6fe3ad9f60ed9ed6b9f19fb71c2c99/login/?

Report Overview

URL

netwerkstatistiek.info/ics/a1b2c3/df6fe3ad9f60ed9ed6b9f19fb71c2c99/login/?
IP

111.90.151.165

ASN

#45839 Shinjiru Technology Sdn Bhd
Submitted

2023-02-05T11:57:03Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3246	56067	34.120.237.76
r3.o.lencr.org (6)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2028	5318	23.33.119.27
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2373	35.241.9.150
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	54.185.76.10
login.microsoftonline.com (1)	25	2017-02-19T08:06:40Z	2019-07-18T10:58:27Z	1289	2067	20.190.160.15
login.live.com (1)	79	2012-05-21T09:00:20Z	2023-03-13T05:09:29Z	640	817	40.126.31.70
www2.bing.com (1)	1811	2018-06-25T01:16:21Z	2023-03-13T07:40:47Z	1415	1137	204.79.197.200
netwerkstatistiek.info (1)	unknown	2022-12-06T17:04:30Z	2023-02-07T00:32:57Z	405	302	111.90.151.165
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5844	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
www.bing.com (30)	91	2012-05-21T17:02:58Z	2018-11-01T22:19:15Z	49049	128866	204.79.197.200
assets.msn.com (1)	188	2018-09-21T01:46:35Z	2023-03-13T07:40:47Z	425	5669	23.36.79.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-05	medium	netwerkstatistiek.info/ics/a1b2c3/df6fe3ad9f60ed9ed6b9f19fb71c2c99/login/?	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (52)

URL IP Response Size

r3.o.lencr.org/

23.33.119.27

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

1cdc095521e9ee2606059be447d1fdd5

02b5d0a5b5823e2338daf7e144700babe2a213af

8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7827
Expires: Sun, 05 Feb 2023 14:07:18 GMT
Date: Sun, 05 Feb 2023 11:56:51 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

c21ba65e44ac95470c314e068e49a9eb

17a13b13738993d889d4afa3d848dc63bf6eba64

9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11043
Expires: Sun, 05 Feb 2023 15:00:54 GMT
Date: Sun, 05 Feb 2023 11:56:51 GMT
Connection: keep-alive

netwerkstatistiek.info/ics/a1b2c3/df6fe3ad9f60ed9ed6b9f19fb71c2c99/login/?

111.90.151.165

302 Found

URL HTTP/1.1

netwerkstatistiek.info/ics/a1b2c3/df6fe3ad9f60ed9ed6b9f19fb71c2c99/login/?
IP

111.90.151.165:0
ASN

#45839 Shinjiru Technology Sdn Bhd

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /ics/a1b2c3/df6fe3ad9f60ed9ed6b9f19fb71c2c99/login/? HTTP/1.1
Host: netwerkstatistiek.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 11:56:51 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
location: https://www.bing.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

30db107dcf4380cef05efea409c2e6a3

96e6a306fbc07299aba64e5c14e2bfca35872fa9

b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 11:33:54 GMT
content-type: application/json
age: 1377
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

fb7b6b46e708ad73eaaa3c21e74569ae

950663c025acad81556af5aa3022ecc9d55097fe

763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18570
Expires: Sun, 05 Feb 2023 17:06:21 GMT
Date: Sun, 05 Feb 2023 11:56:51 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

7b922915ebf1fa3639b333f994c74f24

144a3f80b98fd0652d4614f24cf6cbbee40f8938

adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: +j0Q0AAexMinmTwBtRzmFxdYV8erJ2GV9z/pqKF6K+X/2SaKu/zj+yrBtcGEuAksfMOItDuuDJc=
x-amz-request-id: YK6T4B8V6ENMRGST
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 11:24:27 GMT
age: 1944
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 11:56:52 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico

United States MICROSOFT-CORP-MSN-AS-BLOCK

204.79.197.200

200 OK

4286

URL HTTP/2

www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data

Size

4286
Hash

30967b1b52cb6df18a8af8fcc04f83c9

aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588

439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e

HTTP Headers

                                        GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=15552000
content-length: 4286
content-type: image/x-icon
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-/7geeYa9AjTqJ6NSFUBbPHMm4kUYG2CkAMAPBU/HAOo='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 0819EB0E1F754A2F9BA78294CA458B5F Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js

204.79.197.200

200 OK

6683

URL HTTP/2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (17343), with no line terminators

Size

6683
Hash

204bb375b5117b07884a137329e07bab

e87cb497b3b6e3c43a8abfa85ff1289e2d842308

030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1

HTTP Headers

                                        GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 99ec205c-801e-009f-3216-363b37000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 73923C07823347AEB1A76BCDBEF02945 Ref B: AM3EDGE0718 Ref C: 2023-02-02T07:40:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 2AEF344E615045D8979ED9CCD7CF83C6 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/lsp.aspx?

204.79.197.200

204 No Content

URL HTTP/2

www.bing.com/fd/ls/lsp.aspx?
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /fd/ls/lsp.aspx? HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 28074B6886CD4CEB974BCF62B5536C4E Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:124,%22CT%22:126,%22IL%22:2}}&P=SERP&DA=DUBE01

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:124,%22CT%22:126,%22IL%22:2}}&P=SERP&DA=DUBE01
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:124,%22CT%22:126,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F732455DC0F7480E8ED0951CA4A2A138 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/vs/ec/stop.mp3

204.79.197.200

206 Partial Content

35386

URL HTTP/2

www.bing.com/vs/ec/stop.mp3
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data

Size

35386
Hash

475028300cc8c44e7a4db97079bfca2b

09b8d7346324c456fcea95fa4826fc94686ce52c

45c8123c99a15aef1762667d2fbc2de1937449d20610023a21e47b313e3b7ee4

HTTP Headers

                                        GET /vs/ec/stop.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 35386
content-type: audio/mpeg
content-range: bytes 0-35385/35386
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-CH6pKNDh2lOR196nQDUQsTfHkrR/tcNt+izzlF5T5A4='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 384AAA1DDB5543A5B192E69C6F2143E7 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/vs/ec/start.mp3

204.79.197.200

206 Partial Content

31561

URL HTTP/2

www.bing.com/vs/ec/start.mp3
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data

Size

31561
Hash

f139839a0b2291e7e31f2589454e470f

754ac75088a1b1c586acbe6751e52a1835a4e428

a8b226c9281cae3e162006c9d509f5bfc649724876ca81a95a48e7f1fa9886ef

HTTP Headers

                                        GET /vs/ec/start.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 31561
content-type: audio/mpeg
content-range: bytes 0-31560/31561
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-MFsF8X29WU+KWbK/aznuVIzrsp7z6FEN+vSDyByaLQE='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: C4873E6C3FCD4CE99E52945554832E03 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/hp/api/model

204.79.197.200

200 OK

7295

URL HTTP/2

www.bing.com/hp/api/model
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JSON data\012- , Unicode text, UTF-8 text, with very long lines (22784), with no line terminators

Size

7295
Hash

10fd0dd7de1af44a87c83f7117666962

d4680b473c3d162af918e1208dbcb28b132438f5

861765b8ba63d7eabcbe634db0d1c4fce3120472beadb0c04fcb6a037209ace0

HTTP Headers

                                        GET /hp/api/model HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: private
content-length: 7295
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=11561277B8CC64D1164800D8B9396557; expires=Fri, 01-Mar-2024 11:56:52 GMT; path=/; HttpOnly
ULC=; domain=.bing.com; expires=Sat, 04-Feb-2023 11:56:52 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; domain=.bing.com; expires=Fri, 01-Mar-2024 11:56:52 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 817243961C224BC683D525B96D009075 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A975%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252679%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D

URL

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A975%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252679%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

:0
ASN

#0

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A975%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252679%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

```
                                        
                                    
```

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A975%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252680%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A975%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252680%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A975%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252680%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CDF6FA46851D4A2F93F11B5FE16DD54B Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A976%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252681%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A976%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252681%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A976%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252681%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1B05FE2635254EA69E9A6E80A8838BEA Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&

204.79.197.200

200 OK

2652

URL HTTP/2

www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JSON data\012- , Unicode text, UTF-8 text, with very long lines (12695), with no line terminators

Size

2652
Hash

cb5fc4534770cd00ff3ca40dbe27b15b

b19abce52b84254132f626091526c7d488021f46

46b4dd770fb105d1dfdc011e13e0765406ae5a5f6838c9d1686b279ac6904673

HTTP Headers

                                        GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: private
content-length: 2652
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=11561277B8CC64D1164800D8B9396557; expires=Fri, 01-Mar-2024 11:56:52 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0F2E871F117443FB90FF84F81E06FF02 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1059%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252764%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1059%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252764%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1059%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252764%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FEA20B3E65FA47ADBD09B4C19E81040D Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1060%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252764%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1060%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252764%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1060%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252764%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BF2ED9160E7D40E8BA607DB80586E79A Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1078%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252783%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1078%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252783%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1078%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252783%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D1F48A1995264E76A20D03CD056086B4 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 11:49:07 GMT
age: 465
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1149%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252854%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1149%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252854%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9B953E08DF5E43E3B99554592E038A85%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1149%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252854%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 65FD90A2AE0B406A9DBB9E090E84389F Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1151%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252855%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1151%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252855%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1151%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252855%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 568E75EF2167447899D2A907A8080EB3 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.33.119.27:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

dedf9c519ac38c4bece9c5bc895787d7

4911175c3f8a435978c5301c33c7a99a5e00a1d5

bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7948
Expires: Sun, 05 Feb 2023 14:09:20 GMT
Date: Sun, 05 Feb 2023 11:56:52 GMT
Connection: keep-alive

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1153%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252858%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1153%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252858%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1153%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252858%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5F2F594AC94343ABB3E57C44F6B38FBB Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1200%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252905%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1200%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252905%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1200%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598252905%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1659D4D16F244ABA99C43E2087CD54BF Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1207%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675598252912%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1207%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675598252912%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1207%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675598252912%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: AA989C4239FF418EB086925A33C82068 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9B953E08DF5E43E3B99554592E038A85&IID=Bnp

204.79.197.200

200 OK

8641

URL HTTP/2

www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9B953E08DF5E43E3B99554592E038A85&IID=Bnp
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

HTML document, Unicode text, UTF-8 text, with very long lines (13622)

Size

8641
Hash

4198ebc48d25acd162c8a23587b3e4ad

a351bcab017e071970ff6e3b451f8cce97349e46

3f99e744fcc433e7fbe430cdb1ef2cdffa5daf39920071284e48d3516ac7869d

HTTP Headers

                                        GET /notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9B953E08DF5E43E3B99554592E038A85&IID=Bnp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 8641
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=11561277B8CC64D1164800D8B9396557; expires=Fri, 01-Mar-2024 11:56:52 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9E6E83714B984FBE8D45CE1ED7786256 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:52Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js

23.36.79.8

200 OK

4555

URL HTTP/2

assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
IP

23.36.79.8:0
ASN

#20940 Akamai International B.V.

Magic

ASCII text, with very long lines (13100)

Size

4555
Hash

efeffb4eda40b16e38658170c235b5a3

e078e0d6863751d2a6701ca0330c9d12ca1df7f9

2da59d63f7bf73a152fb1d90b28ce1b92dac8e30c61b832cd085e6a7b4a452b9

HTTP Headers

                                        GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1
Host: assets.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Origin: https://www.bing.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-length: 4555
content-md5: 7+/7TtpAsW44ZYFwwjW1ow==
last-modified: Thu, 02 Feb 2023 23:27:13 GMT
etag: 0x8DB057503C0C11B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 681d5ce9-001e-0059-3f5e-37cb93000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Sun, 05 Feb 2023 11:56:52 GMT
akamai-request-bc: [a=23.36.79.4,b=2917091908,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=2, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 23.36.79.4
akamai-request-id: addf4a44
access-control-allow-credentials: true
access-control-allow-origin: https://www.bing.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2

www.bing.com/rp/-QwZnGm8R3n8OvY3eKPUbRWqH80.png

204.79.197.200

200 OK

8130

URL HTTP/2

www.bing.com/rp/-QwZnGm8R3n8OvY3eKPUbRWqH80.png
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

PNG image data, 842 x 92, 8-bit colormap, non-interlaced\012- data

Size

8130
Hash

f2c8f15334060ab16ecc7cc605306e2a

f90c199c69bc4779fc3af63778a3d46d15aa1fcd

0555ea94ab54c7fe446ca0239526f0a6525105daab99810b2456a8ba4935c16d

HTTP Headers

                                        GET /rp/-QwZnGm8R3n8OvY3eKPUbRWqH80.png HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8130
content-type: image/png
content-md5: 8sjxUzQGCrFuzHzGBTBuKg==
last-modified: Tue, 24 Jan 2023 20:16:32 GMT
etag: 0x8DAFE47E2BBB268
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: dcd7df8d-301e-00f8-5b05-362bcb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 74EEA997151A4968BB8270FC14D27E39 Ref B: AM3EDGE0915 Ref C: 2023-02-02T10:30:55Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 36D01FEED7C64E4598208E80A64A2BE4 Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:53Z
date: Sun, 05 Feb 2023 11:56:52 GMT
X-Firefox-Spdy: h2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675598253082%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675598253083%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675598253093%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675598253093%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1429%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598253134%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D

204.79.197.200

200 OK

URL HTTP/2

www.bing.com/fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675598253082%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675598253083%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675598253093%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675598253093%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1429%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598253134%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=9B953E08DF5E43E3B99554592E038A85&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675598253082%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675598253083%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675598253093%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675598253093%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1429%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675598253134%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=11561277B8CC64D1164800D8B9396557; MUIDB=11561277B8CC64D1164800D8B9396557; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=CC6891D51D724BCE8BF4AC0833C9B273&dmnchg=1; SRCHUSR=DOB=20230205&T=1675594144000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wNVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=9&ihpd=9&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=9&l=2023-02-05T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-05T11:34:06.1855876+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811193645&HV=1675596894&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=28D11FB2D1E866F019A50D1DD01D67C6; _SS=SID=28D11FB2D1E866F019A50D1DD01D67C6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D97E582BDA4A45C69874E2FED33ED3CD Ref B: OSL30EDGE0215 Ref C: 2023-02-05T11:56:53Z
date: Sun, 05 Feb 2023 11:56:52 GMT
content-length: 0
X-Firefox-Spdy: h2

push.services.mozilla.com/

54.185.76.10

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

54.185.76.10:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: k9jAMqKRr7Sj1LaijbRnWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mbGqX3d8JEKukL1u/G/dUDRc2oI=

www.bing.com/rewardsapp/ncheader?ver=33955738&IID=SERP.5019&IG=9B953E08DF5E43E3B99554592E038A85

204.79.197.200

200 OK

135

URL HTTP/2

www.bing.com/rewardsapp/ncheader?ver=33955738&IID=SERP.5019&IG=9B953E08DF5E43E3B99554592E038A85
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

HTML document, ASCII text, with no line terminators

Size

135

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (55)

#1 JS:Script (size: 328)

#2 JS:Script (size: 951)

#3 JS:Script (size: 1051)

#4 JS:Script (size: 90)

#5 JS:Script (size: 423)

#6 JS:Script (size: 1234)

#7 JS:Script (size: 358)

#8 JS:Script (size: 20)

#9 JS:Script (size: 2688)

#10 JS:Script (size: 1931)

#11 JS:Script (size: 924)

#12 JS:Script (size: 21647)

#13 JS:Script (size: 576)

#14 JS:Script (size: 2965)

#15 JS:Script (size: 345)

#16 JS:Script (size: 89)

#17 JS:Script (size: 13338)

#18 JS:Script (size: 0)

#19 JS:Script (size: 257)

#20 JS:Script (size: 3252)

#21 JS:Script (size: 1287)

#22 JS:Script (size: 27)

#23 JS:Script (size: 315)

#24 JS:Script (size: 1589)

#25 JS:Script (size: 226)

#26 JS:Script (size: 2524)

#27 JS:Script (size: 17343)

#28 JS:Script (size: 457)

#29 JS:Script (size: 5793)

#30 JS:Script (size: 425)

#31 JS:Script (size: 110)

#32 JS:Script (size: 5666)

#33 JS:Script (size: 17026)

#34 JS:Script (size: 28947)

#35 JS:Script (size: 1228)

#36 JS:Script (size: 258)

#37 JS:Script (size: 13640)

#38 JS:Script (size: 443)

#39 JS:Script (size: 212)

#40 JS:Script (size: 938)

#41 JS:Script (size: 111908)

#42 JS:Script (size: 1274)

#43 JS:Script (size: 391)

#44 JS:Script (size: 19932)

#45 JS:Script (size: 3278)

#46 JS:Script (size: 520)

#47 JS:Script (size: 426)

#48 JS:Script (size: 2015)

#49 JS:Script (size: 64)

#50 JS:Script (size: 43522)

#51 JS:Script (size: 327869)

#52 JS:Script (size: 306)

#53 JS:Script (size: 12933)

#54 JS:Script (size: 252)

#1 JS:Eval (size: 12)

HTTP Transactions (52)