george-login.buzz/sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/?
188.114.97.1301 Moved Permanently 0 B URL HTTP/1.1 george-login.buzz/sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/?
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/? HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 07 Feb 2023 18:14:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 07 Feb 2023 19:14:56 GMT
Location: https://george-login.buzz/sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/?
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=64eUI8Vpow9a5dNfyMFPG7BQUqYGFz9oHTqhNdiz8BtWvimSG1WVHeFPc20wJY6hQCd6Tw4BqH%2B1tyhI22%2F5AbY1V2ulAVv51RV0AKNMD1RixuUlKoQhqRucGHM%2FiexaWluZ9A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795e1bab6ba6b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3628
Expires: Tue, 07 Feb 2023 19:15:24 GMT
Date: Tue, 07 Feb 2023 18:14:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21034
Expires: Wed, 08 Feb 2023 00:05:30 GMT
Date: Tue, 07 Feb 2023 18:14:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 17:36:32 GMT
content-type: application/json
age: 2304
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17608
Expires: Tue, 07 Feb 2023 23:08:24 GMT
Date: Tue, 07 Feb 2023 18:14:56 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 135f723f88e7081420634bfae8997846
85994ff219033239c13c23d67ed223c6e3afdf94
ec436dbee8b17c199c7a4c5ffe1a663a88785b32b864d78309352345bdf1dff9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4039
Cache-Control: max-age=93190
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 18:14:56 GMT
Etag: "63e14e5f-117"
Expires: Wed, 08 Feb 2023 20:08:06 GMT
Last-Modified: Mon, 06 Feb 2023 19:00:47 GMT
Server: ECS (amb/6B75)
X-Cache: HIT
Content-Length: 279
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IX6ungDaordinjOf5tZlOcdgHKgkgVZyr0+UYneYmTS6K+U3hxa+J7vYMKb55zDhbIRg13OxTLk=
x-amz-request-id: 44D5YSB1RJRDVW9T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 17:45:39 GMT
age: 1757
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 18:14:56 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 135f723f88e7081420634bfae8997846
85994ff219033239c13c23d67ed223c6e3afdf94
ec436dbee8b17c199c7a4c5ffe1a663a88785b32b864d78309352345bdf1dff9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4039
Cache-Control: max-age=93190
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 18:14:56 GMT
Etag: "63e14e5f-117"
Expires: Wed, 08 Feb 2023 20:08:06 GMT
Last-Modified: Mon, 06 Feb 2023 19:00:47 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
www.bing.com/th?id=OHR.MedievalLabro_ROW3784079838_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
13.107.21.200200 OK 194 kB URL HTTP/2 www.bing.com/th?id=OHR.MedievalLabro_ROW3784079838_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size 194 kB (194263 bytes)
Hash fabbb7df369a4f65a067c13639a4038c
225c8beeae7fb4d2cc195e4aedba8b406b99706b
eca1c1b25bb6721232170f5e963d4499b2b45b86fa2fb90b0c5f7952e2116b83
GET /th?id=OHR.MedievalLabro_ROW3784079838_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 194263
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5AB01A2CD8344C2992D52B9FE467FDFF Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
95.101.10.98200 OK 5 B URL HTTP/2 r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
IP 95.101.10.98:0
ASN #20940 Akamai International B.V.
File type very short file (no magic)
Hash e5aa921deb86f8138026bb9c240820fb
966bbc10109a3d130ab5acbc2d202b1b26379afe
18b848a269a2d23ead68930fee1552542e8bd30c65f5d374d3ebea036c903381
GET /rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-length: 5
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: 5aqSHeuG+BOAJrucJAgg+w==
last-modified: Wed, 17 Aug 2022 06:39:21 GMT
etag: 0x8DA801B37C8EF2D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 22883801-601e-00b8-3ee2-f72cf3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=93224
expires: Wed, 08 Feb 2023 20:08:41 GMT
date: Tue, 07 Feb 2023 18:14:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.5e0a655f.1675793697.5e14ae3
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
95.101.10.98200 OK 1.8 kB URL HTTP/2 r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
IP 95.101.10.98:0
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1766), with no line terminators
Hash 946b8d209533755165d5d0fe8d795f22
37bb4a7589a53831778e8162296bf9d72477144e
d9233990059b3f88531f67b1c4725ef4f28f46564ae7e511472f48e2a84f9f1d
GET /rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-length: 1766
content-type: image/svg+xml
content-md5: lGuNIJUzdVFl1dD+jXlfIg==
last-modified: Wed, 17 Aug 2022 05:49:33 GMT
etag: 0x8DA801442F5D6E9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b8b3b751-a01e-00d5-2e8a-3998b8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=257657
expires: Fri, 10 Feb 2023 17:49:14 GMT
date: Tue, 07 Feb 2023 18:14:57 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.5e0a655f.1675793697.5e14ae5
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
13.107.21.200200 OK 4.3 kB URL HTTP/2 www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 30967b1b52cb6df18a8af8fcc04f83c9
aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=15552000
content-length: 4286
content-type: image/x-icon
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-/7geeYa9AjTqJ6NSFUBbPHMm4kUYG2CkAMAPBU/HAOo='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 29EAF8ACBD7E4CCBAA354F60B499BFFF Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/
13.107.21.200200 OK 157 kB IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49935), with CRLF, LF line terminators
Size 157 kB (157047 bytes)
Hash 2c8c1085035583c7b0e71b8b33258aea
4efff4120aebbf0b662a68c01392ad72d59e4f4a
7d5fae6ad4a814d37faada57e9ac86b1aa7d6c153316253dcaaf169ea68281ea
GET / HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; domain=.bing.com; path=/; HttpOnly
MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:56 GMT; path=/; HttpOnly
SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; domain=.bing.com; expires=Sun, 03-Mar-2024 18:14:56 GMT; path=/; secure; SameSite=None
_SS=SID=0DD07224C238659624F06095C3CD64FD; domain=.bing.com; path=/; secure; SameSite=None
ULC=; domain=.bing.com; expires=Mon, 06-Feb-2023 18:14:56 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; domain=.bing.com; expires=Sun, 03-Mar-2024 18:14:56 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A58F2E63AF9444338A29357408B98841 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:56Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
13.107.21.200200 OK 6.7 kB URL HTTP/2 www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (17343), with no line terminators
Hash 204bb375b5117b07884a137329e07bab
e87cb497b3b6e3c43a8abfa85ff1289e2d842308
030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1
GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: b9ef9644-001e-00e3-6204-3a15c8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: E2883413BC694A8F902BD57EB89E6815 Ref B: AM3EDGE0615 Ref C: 2023-02-07T07:40:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: AC1281C91F824F84A67388039B0AB267 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/lsp.aspx?
13.107.21.200204 No Content 0 B URL HTTP/2 www.bing.com/fd/ls/lsp.aspx?
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx? HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D24B7D9553764B9A9BCFF4A8D59260EE Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:77,%22CT%22:79,%22IL%22:2}}&P=SERP&DA=DUBE01
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:77,%22CT%22:79,%22IL%22:2}}&P=SERP&DA=DUBE01
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:77,%22CT%22:79,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1265D0BBD60748EF8653FFD0C8CEC89F Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/hp/api/model
13.107.21.200200 OK 7.3 kB URL HTTP/2 www.bing.com/hp/api/model
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (22744), with no line terminators
Hash d52824872af0d5e8e8604e94c068e3d8
524350d3e4e888146ce52a29566b5f9b80a15180
ed3dfa8ae441af71d77eef82dbee8524655acf73935e76f14be2db98200989e7
GET /hp/api/model HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 7252
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; HttpOnly
ULC=; domain=.bing.com; expires=Mon, 06-Feb-2023 18:14:57 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; domain=.bing.com; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2D73B85C167249F49A6E66EAD388D2FD Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221280%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%22939%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A911%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748120%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221280%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%22939%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A911%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748120%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.Init%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22Base%22%2C%22FID%22%3A%22CI%22%7D%2C%7B%22width%22%3A%221280%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRW%22%7D%2C%7B%22height%22%3A%22939%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%22M%22%2C%22FID%22%3A%22BRH%22%7D%2C%7B%22RawDPR%22%3A%221.0%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%221.0%22%2C%22FID%22%3A%22DPR%22%7D%2C%7B%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793747922%2C%22Name%22%3A%220%22%2C%22FID%22%3A%22DM%22%7D%2C%7B%22comp%22%3A%22loaded%22%2C%22time%22%3A911%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748120%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8E59BD849F2A4D05810E4F43837BA403 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=9AF7339101CB41FF9344E12B30D7A17D&
13.107.21.200200 OK 16 kB URL HTTP/2 www.bing.com/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=9AF7339101CB41FF9344E12B30D7A17D&
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (28929), with CRLF, LF line terminators
Hash f0da75f441341c9600a103556705bf8d
c68a6ef39c80e2116b22b6347865da4361d810a2
73015102d228985b83b596593108c20a0e032f71ebf3c56ee296bce06f266f63
GET /images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=9AF7339101CB41FF9344E12B30D7A17D& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 16049
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; HttpOnly
SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; domain=.bing.com; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: ACB3B04B8B2A4497BB7A64BF8867528A Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E38610B7B0C94C1587D95E12FE63273E Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748121%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748121%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748121%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 904FA97F6E674E56B9DC80E8A79BE686 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A913%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A913%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A913%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F3757977EC4B4C27A448DE65F5CD9581 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A913%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A913%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A913%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748122%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 41CBE722038E45A8A2F4ED8CC54F134B Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/vs/ec/start.mp3
13.107.21.200206 Partial Content 32 kB URL HTTP/2 www.bing.com/vs/ec/start.mp3
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash f139839a0b2291e7e31f2589454e470f
754ac75088a1b1c586acbe6751e52a1835a4e428
a8b226c9281cae3e162006c9d509f5bfc649724876ca81a95a48e7f1fa9886ef
GET /vs/ec/start.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 31561
content-type: audio/mpeg
content-range: bytes 0-31560/31561
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-28pEwDovvjLPWtFUmeF2jmd4M/p77uqZHZaDyxU7260='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 3147DD9FE0DA48D1996B395BF6FAE1BA Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/vs/ec/stop.mp3
13.107.21.200206 Partial Content 35 kB URL HTTP/2 www.bing.com/vs/ec/stop.mp3
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 475028300cc8c44e7a4db97079bfca2b
09b8d7346324c456fcea95fa4826fc94686ce52c
45c8123c99a15aef1762667d2fbc2de1937449d20610023a21e47b313e3b7ee4
GET /vs/ec/stop.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 35386
content-type: audio/mpeg
content-range: bytes 0-35385/35386
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-CH6pKNDh2lOR196nQDUQsTfHkrR/tcNt+izzlF5T5A4='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 1B264606C3524B1DB1ED4DEE2CAB90E3 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A970%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748179%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A970%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748179%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A970%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748179%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 03367043B5D54A2B9570CE70F5DE1435 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A970%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748179%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A970%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748179%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A970%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748179%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0D3F3F862B1742A9947D836ED0B8FEBC Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748121%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748121%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A912%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748121%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8123D761E6424E769DDD74230F7F2EA3 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 17:51:19 GMT
age: 1418
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A991%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748200%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A991%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748200%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A991%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748200%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BA658DAADAA8466DB11F96AA80CE350A Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9AF7339101CB41FF9344E12B30D7A17D&IID=Bnp
13.107.21.200200 OK 8.6 kB URL HTTP/2 www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9AF7339101CB41FF9344E12B30D7A17D&IID=Bnp
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (13622)
Hash cbee5532a9029e2ccf3715dc16b041f2
232a9b557dd961ca0ba17b0fa022f04972430923
b7bc46e4b84919e08887955e6d07e08c7260a0bce154bda48efd759345d322cb
GET /notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=9AF7339101CB41FF9344E12B30D7A17D&IID=Bnp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 8643
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2BB62379DF37459BB22AE8F734328EE5 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
www.bing.com/rp/QVXspp3oaMgMqbxnY2UzWAvA_fw.png
13.107.21.200200 OK 8.2 kB URL HTTP/2 www.bing.com/rp/QVXspp3oaMgMqbxnY2UzWAvA_fw.png
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 842 x 92, 8-bit colormap, non-interlaced\012- data
Hash 8bd7d77e15f40db33699c4fbdfffc4f6
4155eca69de868c80ca9bc67636533580bc0fdfc
bf55a186672fb35fb3d7140bea6535ce6cae36e99c3663b0f2c58e647e781d89
GET /rp/QVXspp3oaMgMqbxnY2UzWAvA_fw.png HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8174
content-type: image/png
content-md5: i9fXfhX0DbM2mcT73//E9g==
last-modified: Wed, 17 Aug 2022 05:56:45 GMT
etag: 0x8DA8015448B04FC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 166d0ce1-401e-004b-0204-3a8b66000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: C5B827AAA4DE47EFB06325A94074FF64 Ref B: AM3EDGE1012 Ref C: 2023-02-07T13:24:59Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 0A303E49135E4E34A26EDB0239FE76C7 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7441
Expires: Tue, 07 Feb 2023 20:18:58 GMT
Date: Tue, 07 Feb 2023 18:14:57 GMT
Connection: keep-alive
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748292%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748292%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D9AF7339101CB41FF9344E12B30D7A17D%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748292%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A45D6423BCB1482BAB7B8DB8DD376266 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
13.107.21.200200 OK 3.2 kB URL HTTP/2 www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (14757), with no line terminators
Hash b9353ca1f6993837a4a522e6074bfbcf
e9d8a5379c7759aa70c017c7a53af6ccbe55156b
4b9147aa37c9ae9083384fa8809e74a318c8a31ed0b8811ebc4ba49178c71428
GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 3165
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B455E9465F734DD4B54FBFEC70821CFF Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793748388%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675793748388%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675793748397%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675793748397%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675793748587%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e29520b85446f389326bf9681c13f0%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675793748613%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e29520b85446f389326bf9681c13f0%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675793748613%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1415%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748623%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793748388%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675793748388%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675793748397%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675793748397%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675793748587%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e29520b85446f389326bf9681c13f0%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675793748613%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e29520b85446f389326bf9681c13f0%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675793748613%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1415%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748623%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675793748388%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675793748388%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675793748397%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675793748397%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675793748587%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e29520b85446f389326bf9681c13f0%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675793748613%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e29520b85446f389326bf9681c13f0%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675793748613%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1415%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748623%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CAF0A2056371496FB5099AB8DB15D2D3 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1417%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748628%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1417%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748628%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1417%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748628%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5C14A34127E74CD1A22BA8597B9A0D59 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/rewardsapp/ncheader?ver=33965297&IID=SERP.5019&IG=9AF7339101CB41FF9344E12B30D7A17D
13.107.21.200200 OK 135 B URL HTTP/2 www.bing.com/rewardsapp/ncheader?ver=33965297&IID=SERP.5019&IG=9AF7339101CB41FF9344E12B30D7A17D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with no line terminators
Hash 220681134a8094ce652f9fe8016037a5
a771c8027c266aded9f60f97965d2f9bf4f67af8
8af854ff412f28bd161367c8e5b1a5469e03363a5ad11c14634b6abc38388b9e
POST /rewardsapp/ncheader?ver=33965297&IID=SERP.5019&IG=9AF7339101CB41FF9344E12B30D7A17D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 135
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E0E51CAC59D94490A09828E014D039E9 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.83.217.74101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.83.217.74:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 51pezKon+xlt/xnf1J3DMw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ar9FRaJgAaj7/6++UBbWU89WRHI=
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1450%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748661%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1450%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748661%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1450%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748661%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 57ED7AEDB6944B86A9BE5808F23E8D46 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A19%2C%22time%22%3A1460%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675793748670%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A19%2C%22time%22%3A1460%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675793748670%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A19%2C%22time%22%3A1460%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675793748670%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6DC228BD41434BB598315A496866A1E3 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/rewardsapp/reportActivity?IG=9AF7339101CB41FF9344E12B30D7A17D&IID=SERP.5028&&src=hp
13.107.21.200200 OK 611 B URL HTTP/2 www.bing.com/rewardsapp/reportActivity?IG=9AF7339101CB41FF9344E12B30D7A17D&IID=SERP.5028&&src=hp
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (1266)
Hash 34c46a38dc360dac5308e14204751f0b
0abdf18cbe1453b546934ec47626dc4065bc0104
d5e8ac1ed56036753527cc58f7561ffce423a8be09c5d3edee1e1e1e6b59125c
POST /rewardsapp/reportActivity?IG=9AF7339101CB41FF9344E12B30D7A17D&IID=SERP.5028&&src=hp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=7&ihpd=7&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=7&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:12:47.2171616+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390365&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 611
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:57 GMT; path=/; HttpOnly
_RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; domain=.bing.com; expires=Wed, 07-Feb-2024 18:14:57 GMT; path=/; secure; SameSite=None
_SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7EC6198AD52E4916AC193CB0BB6AF502 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:57Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=79391686-8746-4e81-91a2-0fee1242c096&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%229AF7339101CB41FF9344E12B30D7A17D%22%7d
40.126.32.137200 OK 682 B URL HTTP/1.1 login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=79391686-8746-4e81-91a2-0fee1242c096&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%229AF7339101CB41FF9344E12B30D7A17D%22%7d
IP 40.126.32.137:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (627), with CRLF line terminators
Hash d8332011dd8c513758fd80b86c764987
e728e755d4868492c127cf9a9f1e8aa072f3a737
77466e260d81b020c20cd4fa84db83f719de1a1c758f1fc63c34402379b3d164
GET /common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=79391686-8746-4e81-91a2-0fee1242c096&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%229AF7339101CB41FF9344E12B30D7A17D%22%7d HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: brcap=0; MSFPC=GUID=27491a5fca0c436896bdbf20a1588da0&HASH=2749&LV=202205&V=4&LU=1652883922743; ESTSSSOTILES=1; AADSSOTILES=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr8W-rAK6uwyAXpRGOKyfIpUuCg5l0M6vrP-EcaffVlSAQsa0FCUDP-DhTZVcTm9-Zg-2nBUxdnxfUXFbhcH4odCdNn1huyTCnK6uVOTUZOi8gAA; fpc=AhlNv9DeZPhHvlVnFmLXVtGCeMQLAwAAAIaKdNsOAAAA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: cb0c8a13-eb6f-4e94-b712-b294280b5c00
x-ms-ests-server: 2.1.14526.6 - WEULR2 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.AQUAMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrM2zT8PnSyjn0s-mht0xMFKNwxwUHVHHvTiETJAH57xglqVJ5gR6uCZbKYCJQNXn1iXAL1XmliuNqx8ZgnepOJ9RpuHv0d5byngqc4gp4kBUgAA; expires=Thu, 09-Mar-2023 18:14:57 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AhlNv9DeZPhHvlVnFmLXVtGCeMQLAQAAALKLdNsOAAAA; expires=Thu, 09-Mar-2023 18:14:57 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrmiLkv8rZQK03Hfx8QxEPCV3gmDesZAFdsIv1rWu-rAr4L9JVMuhpfMq0m6DcIKACbjkPGb6vwC5nfBOAj9cRDvJqpk2f5wJu3U4tmxmdI2flpUiD8LAr-fRKtft1LCL2hQUXfE9RSH9XZeld6O2vVfwVRFGIUS7sTn5DvJCESv0gAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 07 Feb 2023 18:14:57 GMT
Content-Length: 682
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675793748771%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675793748771%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675793748771%2C%22Name%22%3A%22AnimationLoad%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 784794EBD03B4F48956448384F33448D Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:57 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/orgid/idtoken/conditional
13.107.21.200200 OK 1 B URL HTTP/2 www.bing.com/orgid/idtoken/conditional
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4
POST /orgid/idtoken/conditional HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 708
Origin: https://login.microsoftonline.com
Connection: keep-alive
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 1
content-type: text/html
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:58 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0186405F46204476B9B3814B0CBA806F Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
95.101.10.202200 OK 4.6 kB URL HTTP/2 assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
IP 95.101.10.202:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13100)
Hash efeffb4eda40b16e38658170c235b5a3
e078e0d6863751d2a6701ca0330c9d12ca1df7f9
2da59d63f7bf73a152fb1d90b28ce1b92dac8e30c61b832cd085e6a7b4a452b9
GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1
Host: assets.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Origin: https://www.bing.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 4555
content-md5: 7+/7TtpAsW44ZYFwwjW1ow==
last-modified: Thu, 02 Feb 2023 23:27:13 GMT
etag: 0x8DB057503C0C11B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 03055453-201e-0008-525e-377614000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Tue, 07 Feb 2023 18:14:58 GMT
akamai-request-bc: [a=95.101.10.198,b=762437680,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.10.198
akamai-request-id: 2d71e030
access-control-allow-credentials: true
access-control-allow-origin: https://www.bing.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2
www2.bing.com/ipv6test/test
13.107.21.200200 OK 64 B URL HTTP/2 www2.bing.com/ipv6test/test
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 1bf1ff302246bc930c733c405f985472
de1fb6765de8bd2d9d98507705e24d51d2bd335c
c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
GET /ipv6test/test HTTP/1.1
Host: www2.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675797348827
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:58 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6012B6E70B064B6693AAF1CBFD7816DC Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
www.bing.com/ipv6test/test?FORM=MONITR
13.107.21.200200 OK 64 B URL HTTP/2 www.bing.com/ipv6test/test?FORM=MONITR
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 1bf1ff302246bc930c733c405f985472
de1fb6765de8bd2d9d98507705e24d51d2bd335c
c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
GET /ipv6test/test?FORM=MONITR HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675797348827
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:58 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1216AA17FC1F440F8694FBF782A6A537 Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1661%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748872%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
13.107.21.200200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1661%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748872%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=9AF7339101CB41FF9344E12B30D7A17D&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1661%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675793748872%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0DD07224C238659624F06095C3CD64FD; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675797348827
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8CEAB7F7A38E4B5F83AB097A10E044FB Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:57 GMT
content-length: 0
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1675793697&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
40.126.32.135302 Found 0 B URL HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1675793697&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
IP 40.126.32.135:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.srf?wa=wsignin1.0&rpsnv=11&ct=1675793697&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: Tue, 07 Feb 2023 18:13:58 GMT
Location: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: R3_BL2
x-ms-request-id: 4960352a-6ee4-4d52-b27c-9a9c935d1371
PPServer: PPV: 30 H: BL02EPF0000676C V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=a272cbdd1bc44485ba833cfeee3ea6af; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=264960<=1675793698&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Tue, 07 Feb 2023 18:14:58 GMT
Content-Length: 0
www.bing.com/secure/Passport.aspx?popup=1&ssl=1
13.107.21.200200 OK 184 B URL HTTP/2 www.bing.com/secure/Passport.aspx?popup=1&ssl=1
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c692cf35c4d3ad00b5a49bdf3cd2363c
eb9c1fb3345378800f697c7c92519c5188dd9f5a
fa404c029e5e3109f687ed6e12018f34e43ecb2ef8991172af7bd9fc220562fe
GET /secure/Passport.aspx?popup=1&ssl=1 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Connection: keep-alive
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675797348827&t=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 184
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; expires=Sun, 03-Mar-2024 18:14:58 GMT; path=/; HttpOnly
_EDGE_S=SID=1A81C4F37AA268D31C3ED6427B5769FB; domain=.bing.com; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 17A56CC92F414E4F9DDC5C70490D797B Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:57 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/lsp.aspx
13.107.21.200204 No Content 0 B URL HTTP/2 www.bing.com/fd/ls/lsp.aspx
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/xml
Content-Length: 10314
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1930D01A25FA6AB939FBC2AB240F6BA3; MUIDB=1930D01A25FA6AB939FBC2AB240F6BA3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=7E8ACF2656F540F4B1A18A4B12A06B54&dmnchg=1; SRCHUSR=DOB=20230207&T=1675791575000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=8&ihpd=8&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T18:14:57.9828169+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63811390496&HV=1675793626&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=1A81C4F37AA268D31C3ED6427B5769FB; _SS=SID=0DD07224C238659624F06095C3CD64FD&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675797348827&t=4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2FCD9A24D8E749EAB467E63F1B4444BF Ref B: OSL30EDGE0519 Ref C: 2023-02-07T18:14:58Z
date: Tue, 07 Feb 2023 18:14:58 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 18:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 18:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 18:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 18:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 18:14:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 714723c38877e0d1655c7118a88ec064
809a42ce7c76cea0ce16af8172d852723c3a5f02
6bad7253694d155de31a8f5a3c635545a39aac340ca49d1bc10efb6739d4a356
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8981
x-amzn-requestid: 0054e925-c381-4737-bd92-32b2af3a604e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQHRFoAMFw6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-45ea5ee33d07326c593d21d3;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ixAMZh_xOYWVESJ0jOEPOXZ4GQBDUZZsh26yEDYfl8APcBF2x2sZYg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:02:54 GMT
age: 72725
etag: "809a42ce7c76cea0ce16af8172d852723c3a5f02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 284a62b098827c448218892eb5a732f9
6679d1ff8f2986b6103e94a54632892e2280b149
17332bece792a4e8d571b5161145ef2105abc513e140c738885899401b9c8d14
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14943
x-amzn-requestid: 1145ff12-5237-426c-8efc-c25c1061bcce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2GpMFTEIAMFxgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df1e3a-528eb972059e86c33334fedd;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 03:10:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XB1GsXLS_Aa3zg9mCPkwinizqk9hZOQel0Ag7Vp0yopIvahzXstoVA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 03:43:13 GMT
age: 52306
etag: "6679d1ff8f2986b6103e94a54632892e2280b149"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b0935816ca54d5d20a9fffa5531e0d
bd8374980c16b7d5a28e55b8bef2215713b1ebb2
4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13390
x-amzn-requestid: e7653b49-3160-42e3-8292-8ae32604f775
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc8KEoPoAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0eb4-68fd76a95ffa656318bedff6;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KaitXsesZ9mJducJ54ChzQGfb-2-hEN4W_QojGMKXYEji4xsjNdWCA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 09:07:41 GMT
age: 32838
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ovhdLaEGaDSC8X0F9VamLw0KyBPWkxfYg5pssOT8NOZP4IBtNk6Gfw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
age: 73180
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92008e687831334af1cdbf4b8a57579f
e6ff750f12836637adf5b253d64c2102fdf3c180
39af3e630e0271b54139849c1b596efbdc69a23ce943e5330341d49f77798c7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7183
x-amzn-requestid: 02695a8d-2ab8-4d77-bfbe-f99418d8ef00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78YOGsyoAMF5wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17434-2614cef4059e7fd5009cb46d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:42:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qbUWAiTEzfmIOkYgKdBEYxEnRky5wA7ajMWumei7fXeIqLN9B-riBw==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:27 GMT
age: 73172
etag: "e6ff750f12836637adf5b253d64c2102fdf3c180"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a24cf7b2db6d65c3fe5daf78b3309ced
a3653a9a7baea412808dd91572ff21e1a505c26f
f55ee98bab5ce53d6acc1cac7f54f089b42d5f2ffbe750d869c4f4a7bc26f715
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13230
x-amzn-requestid: 8171829a-cf6d-4c33-99a1-f3cef7cd4475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiTH8GoAMFYLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1597a0f06ef3db2534a101aa;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MmO3oxbCoPs-WdN8SL9AuudkfErRRcTp6mkr2LRIfS6YPVe6UGBDFQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 03:01:24 GMT
age: 54815
etag: "a3653a9a7baea412808dd91572ff21e1a505c26f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
george-login.buzz/sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/?
188.114.96.1302 Found 0 B URL HTTP/2 george-login.buzz/sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/?
IP 188.114.96.1:0
Analyzer Verdict Alert fortinet Phishing
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/51c5f9ea7b6a8ecc9a52e4e51ce201b5/login/? HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 07 Feb 2023 18:14:56 GMT
content-type: text/html; charset=UTF-8
location: https://www.bing.com
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SnHLpcTZLG6OSQ4Qmqd5%2Be06BGS6kEBtO4rAI7QsqWhLbO8G5FfKuK%2FTJ%2BO7MJisDkViHZCv53JLSMfLZ8TaqG1q7%2FrHluyYbIOJnKXHn4Mu%2FZs0iNHZ8QIujkJADRUx593JHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795e1bad2b57b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2