george-login.buzz/sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/
301 Moved Permanently 0 B URL HTTP/1.1 george-login.buzz/sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/ HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 10:11:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 08 Feb 2023 11:11:56 GMT
Location: https://george-login.buzz/sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p6gzIJNHk8N%2FQtsgfWNPDosHWrt8OYPZabgP%2BkdyzXzyzLZak9t%2BfKKHgR7tNIdShtESOLqCwsyQnHC4G830IhhobZBqMUT7CEIVRi40vvXmOQVM1WZenaU9YT%2FSt%2FzR1Ct8Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79639582ff69b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2589
Expires: Wed, 08 Feb 2023 10:55:05 GMT
Date: Wed, 08 Feb 2023 10:11:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 458fffce762c6706dd3aa5b3db5dd204
099f210920c9672ab5b0562bffd9254408a2c6cc
1d34f2ae075f53c097c1f4b0d3cca506344b5e9a04576d7d444482aea96135fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D34F2AE075F53C097C1F4B0D3CCA506344B5E9A04576D7D444482AEA96135FB"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9113
Expires: Wed, 08 Feb 2023 12:43:49 GMT
Date: Wed, 08 Feb 2023 10:11:56 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 42 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 3489ddb1b62e0ee184b5be3e55812efd
a6de8c6164dfaf505a9168f3f5040c208a970ce1
18d160f56875e62447dd112026ff850985f97743ac08b0412b8565cd461268fc
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: zwL4IqCkLJ4L2P-k_5sysXuGb-3gRL_3boxPV4k2cRdGeU5yiuCQpQ==
content-encoding: gzip
via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 10:00:33 GMT
content-type: application/json
content-length: 41849
age: 683
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10325
Expires: Wed, 08 Feb 2023 13:04:01 GMT
Date: Wed, 08 Feb 2023 10:11:56 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: K5ljZSdOC1ZNhiaMOcqbVjqwy8wUPmbx63Asm6NrS/QsI0MLbQyOYMvp4au4q9VIqaz78jp0S/o=
x-amz-request-id: HNCF6GD44TH7R971
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 09:18:07 GMT
age: 3229
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1c52dabc9b7c1a8f3f8ce08ac1d02ad6
7662bc87359916db9e78f22d2a9edc2955273261
c33bf2063fdc7d675337478243448d7c4ec7d7377b04ba0e48b3d36ba3f8573a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3985
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:11:56 GMT
Etag: "63e29fe4-117"
Last-Modified: Wed, 08 Feb 2023 09:05:31 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10887
Expires: Wed, 08 Feb 2023 13:13:23 GMT
Date: Wed, 08 Feb 2023 10:11:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 09:34:12 GMT
content-type: application/json
age: 2264
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 10:11:56 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1c52dabc9b7c1a8f3f8ce08ac1d02ad6
7662bc87359916db9e78f22d2a9edc2955273261
c33bf2063fdc7d675337478243448d7c4ec7d7377b04ba0e48b3d36ba3f8573a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3985
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:11:56 GMT
Etag: "63e29fe4-117"
Last-Modified: Wed, 08 Feb 2023 09:05:31 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
www.bing.com/th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
200 OK 74 kB URL HTTP/2 www.bing.com/th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Hash 4ae4572731632c549e32933fff134703
198ccd3f02f4d1fe0eb8a81911e1d5f2b4ccd46b
9af9fc03089bd0128065c3eebf398d446877ff4e19dcbeb2b9815f901d5d569a
GET /th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 73647
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8209CDE6290049A0A7193BF7BA09C70A Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
200 OK 21 B URL HTTP/2 r.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
IP
ASN #20940 Akamai International B.V.
File type very short file (no magic)
Hash 7a27d78dc075a9bed14b88de7a235ac6
bb47edffc2c64ddc6373e89f13e2e18f0139b8ce
fb80d1c642d6ab03690c5ff8d462b352ecad7e4e6989461592b6acaafd5e9dab
GET /rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
content-md5: 5aqSHeuG+BOAJrucJAgg+w==
last-modified: Wed, 17 Aug 2022 06:39:21 GMT
etag: 0x8DA801B37C8EF2D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 4b1b4056-501e-00a3-69b6-e412f0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 21
cache-control: public, no-transform, max-age=385300
expires: Sun, 12 Feb 2023 21:13:36 GMT
date: Wed, 08 Feb 2023 10:11:56 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.054f2417.1675851116.501606d5
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
200 OK 1.8 kB URL HTTP/2 r.bing.com/rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1766), with no line terminators
Hash 946b8d209533755165d5d0fe8d795f22
37bb4a7589a53831778e8162296bf9d72477144e
d9233990059b3f88531f67b1c4725ef4f28f46564ae7e511472f48e2a84f9f1d
GET /rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg HTTP/1.1
Host: r.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-length: 1766
content-type: image/svg+xml
content-md5: lGuNIJUzdVFl1dD+jXlfIg==
last-modified: Wed, 17 Aug 2022 05:49:33 GMT
etag: 0x8DA801442F5D6E9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d4b31ee8-401e-0029-2cdf-fd4941000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=178523
expires: Fri, 10 Feb 2023 11:47:19 GMT
date: Wed, 08 Feb 2023 10:11:56 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.054f2417.1675851116.501606e7
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2
www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
200 OK 6.7 kB URL HTTP/2 www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (17343), with no line terminators
Hash 204bb375b5117b07884a137329e07bab
e87cb497b3b6e3c43a8abfa85ff1289e2d842308
030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1
GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: b9ef9644-001e-00e3-6204-3a15c8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: E2883413BC694A8F902BD57EB89E6815 Ref B: AM3EDGE0615 Ref C: 2023-02-07T07:40:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 3ACEB5EFD55245908DA2DCA02329FB6B Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/lsp.aspx?
204 No Content 0 B URL HTTP/2 www.bing.com/fd/ls/lsp.aspx?
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx? HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: AC7A3F7ADDAD407991CD0060F4A7DB16 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:66,%22CT%22:68,%22IL%22:2}}&P=SERP&DA=DUBE01
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:66,%22CT%22:68,%22IL%22:2}}&P=SERP&DA=DUBE01
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:66,%22CT%22:68,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4D24463B611B446B96EB6AE171C64F5E Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7891
Expires: Wed, 08 Feb 2023 12:23:27 GMT
Date: Wed, 08 Feb 2023 10:11:56 GMT
Connection: keep-alive
www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
200 OK 4.3 kB URL HTTP/2 www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 30967b1b52cb6df18a8af8fcc04f83c9
aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=15552000
content-length: 4286
content-type: image/x-icon
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-/7geeYa9AjTqJ6NSFUBbPHMm4kUYG2CkAMAPBU/HAOo='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 7FD06ACC05FB404E870A266462891C2B Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ccea102d392ddcfb99024041654130a0
3b7c7c9b548e6040beba05c8d86e321afba6424e
e8351949e83b0d93dc2a36bbfa987d0728345182eac7242f0a1e3921924b6a9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4842
Cache-Control: max-age=115441
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:11:56 GMT
Etag: "63e28273-1d7"
Expires: Thu, 09 Feb 2023 18:15:57 GMT
Last-Modified: Tue, 07 Feb 2023 16:55:15 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Tue, 07 Feb 2023 11:47:25 GMT
Age: 80671
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
200 OK 8 B URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
IP
Hash 29fc57841962e407cb50c1be60284bf7
ce968a77e2996da5eee8925182318f171ccdce47
ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1
Host: shavar.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Date: Wed, 08 Feb 2023 10:11:56 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close
www.bing.com/hp/api/v1/codex?format=json&
200 OK 601 B URL HTTP/2 www.bing.com/hp/api/v1/codex?format=json&
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (2148), with no line terminators
Hash c658b4f79c7ac1605c5cb4019f3cd1c3
0db3159a4ea7e2b90a486d1b6f4f01ad70bc1272
6cf73a2ce08b13aba14a2b5576aee3f0a84d4c560a4e2145d5b3f43a4d548756
GET /hp/api/v1/codex?format=json& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 601
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2C861FBF0F134F5B8DDC8907772870FE Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=BBCBB96234FF4A44AA3F508F6E3A6F93&
200 OK 16 kB URL HTTP/2 www.bing.com/images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=BBCBB96234FF4A44AA3F508F6E3A6F93&
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (28929), with CRLF, LF line terminators
Hash 218891b79c98101f46317a8aae73fe04
fb6f90f58c95b5cbc2ef9deb97b0f185d908d63b
f2f459871dda8d39a51475e1e5854aa3abbdac7ca07805f8f51d0a09630c4ec4
GET /images/sbi?mmasync=1&ptn=Homepage&IID=SBI&IG=BBCBB96234FF4A44AA3F508F6E3A6F93& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 16047
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; HttpOnly
SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C65E90F4BFB84B8F800715BBE579BE11 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/hp/api/model
200 OK 4.7 kB URL HTTP/2 www.bing.com/hp/api/model
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18752), with no line terminators
Hash 15c8394a6cee492c3a5f5b0390441f7f
cc7b68c96a3644b5aebd7e4c6415220cd8527556
c2c9d306d454db49ad020a8fc2e096f4fccce251497d28f65b146159de4133ac
GET /hp/api/model HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 4676
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; HttpOnly
ULC=; domain=.bing.com; expires=Tue, 07-Feb-2023 10:11:56 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E4E2A2E049F94C7F97D282320D61DD89 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pjxbfR+fkf1kDM1vv6x1rA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 01qALjlMpKuEj2k7wYP9lDLUkZs=
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A1070%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170863%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A1070%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170863%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22micComponent%22%3A%22rendered%22%2C%22time%22%3A1070%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170863%2C%22Name%22%3A%22speech%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1AECD0B0B677427E9C586680BFBA14DD Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170863%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170863%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170863%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DD3F2F7C1A804CA1B6B2364A4781C06B Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1073%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1073%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1073%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FB5665F27FC840B78E5F7A85CAB15AA3 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1073%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170865%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1073%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170865%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1073%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170865%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 76D08EC13DEF4AE9806C654640F50654 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4E04D31A63784C9FB3B7363C071844FA Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/vs/ec/start.mp3
206 Partial Content 32 kB URL HTTP/2 www.bing.com/vs/ec/start.mp3
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash f139839a0b2291e7e31f2589454e470f
754ac75088a1b1c586acbe6751e52a1835a4e428
a8b226c9281cae3e162006c9d509f5bfc649724876ca81a95a48e7f1fa9886ef
GET /vs/ec/start.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 31561
content-type: audio/mpeg
content-range: bytes 0-31560/31561
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-28pEwDovvjLPWtFUmeF2jmd4M/p77uqZHZaDyxU7260='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 54DB1E9A80D64EB1A90CFF12EF6D8075 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/vs/ec/stop.mp3
206 Partial Content 35 kB URL HTTP/2 www.bing.com/vs/ec/stop.mp3
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 475028300cc8c44e7a4db97079bfca2b
09b8d7346324c456fcea95fa4826fc94686ce52c
45c8123c99a15aef1762667d2fbc2de1937449d20610023a21e47b313e3b7ee4
GET /vs/ec/stop.mp3 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=15552000
content-length: 35386
content-type: audio/mpeg
content-range: bytes 0-35385/35386
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-CH6pKNDh2lOR196nQDUQsTfHkrR/tcNt+izzlF5T5A4='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: F2802A3076004AEDAAEC5BA48E809BE5 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1072%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170864%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9C9D95C8BCFE4C02889CBACCD9764FBB Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 09:51:20 GMT
age: 1237
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1156%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170948%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1156%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170948%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1156%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170948%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 39742D1D298A4FAD87AA62E3813EBA8A Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1155%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170946%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1155%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170946%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1155%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170946%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F88A32BDD6D042989E9FCF0A5D596C63 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1156%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170948%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1156%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170948%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1156%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851170948%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: ABFBBF0B603B4CC686787BDA351E8D0B Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
200 OK 2.8 kB URL HTTP/2 www.bing.com/hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&&
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (13202), with no line terminators
Hash de31c6636d05df699f6402adefa75ad9
99ab8eeb94b7284fc66397c9b09e006247398ece
5a7e036d67a86f1dfa3eecf481b6f5810e15753f2636599d8f213df567e6a34e
GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 2815
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FC75209672674381A2C45C02CE4D9AB0 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1231%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171024%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1231%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171024%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3DBBCBB96234FF4A44AA3F508F6E3A6F93%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1231%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171024%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 66C6AF76FF9D4E7791CE556FFF4B8A85 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1231%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171023%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1231%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171023%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1231%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171023%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 604CD4624FD1477B8CEDC1945C76D9C0 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1297%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171090%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1297%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171090%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1297%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171090%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1E76CDF8D0BD4F658E431E1D2351728E Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d6aed5df29d057fbe750d49c42b27b87%26pid%3dWdp&ehk=vjpeOjtJloZK7sdFn5M30agZFlUZZxfF3xeMwnz1%2bv0%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 5.0 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d6aed5df29d057fbe750d49c42b27b87%26pid%3dWdp&ehk=vjpeOjtJloZK7sdFn5M30agZFlUZZxfF3xeMwnz1%2bv0%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 11a23e58c43272f454473f8de4fc365c
1a95cdafbfd8cb6e2a141cd4670a900d6581b100
34b56bb13088b71b9b1d3ca61bd2c01296e842101475b11f60e320f9d179dc64
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d6aed5df29d057fbe750d49c42b27b87%26pid%3dWdp&ehk=vjpeOjtJloZK7sdFn5M30agZFlUZZxfF3xeMwnz1%2bv0%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 4989
cache-control: public, max-age=2585911
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8ce
x-check-cacheable: YES
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1304%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171096%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1304%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171096%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1304%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171096%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5D96480C52A04A34BAEB5E85FDA90818 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6fc3b38eb4aa179119da4acb9c63ffd6%26pid%3dWdp&ehk=z1TCjC93v4U8uncEwoDD4nXNwoHMJHvYWSwK9bZIPfM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 4.9 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6fc3b38eb4aa179119da4acb9c63ffd6%26pid%3dWdp&ehk=z1TCjC93v4U8uncEwoDD4nXNwoHMJHvYWSwK9bZIPfM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash c44543399e77683867533557d74ef580
60f10feca873ca3f8bcec56f598bc72b0bb0b6ca
d1a7923f09b8b41b2d9adc37f4e10ae6daa470d7f08401716a22ad58509e3f22
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6fc3b38eb4aa179119da4acb9c63ffd6%26pid%3dWdp&ehk=z1TCjC93v4U8uncEwoDD4nXNwoHMJHvYWSwK9bZIPfM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 4946
cache-control: public, max-age=2573325
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8cd
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.86f13ccb6547fbd29bc021322314e4d0%26pid%3dWdp&ehk=ZZF0dIELETYp5qwNiSJfNw9wV8GWrUdlTiGVwS6nnLo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.9 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.86f13ccb6547fbd29bc021322314e4d0%26pid%3dWdp&ehk=ZZF0dIELETYp5qwNiSJfNw9wV8GWrUdlTiGVwS6nnLo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 46f675f748e9ede6107bb2aa693d7e91
06b586510dad0baf1a1fdc816c739b228c011bab
a3ad4ca6bf28a811d23b8d750d5936993d956f27f712aadc41a10d510d36b3ac
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.86f13ccb6547fbd29bc021322314e4d0%26pid%3dWdp&ehk=ZZF0dIELETYp5qwNiSJfNw9wV8GWrUdlTiGVwS6nnLo%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3867
cache-control: public, max-age=2579810
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8cc
x-check-cacheable: YES
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1319%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171111%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1319%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171111%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1319%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171111%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F6A82D77988546BE83802EC1DFED27F6 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=BBCBB96234FF4A44AA3F508F6E3A6F93&IID=Bnp
200 OK 8.9 kB URL HTTP/2 www.bing.com/notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=BBCBB96234FF4A44AA3F508F6E3A6F93&IID=Bnp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, Unicode text, UTF-8 text, with very long lines (13649)
Hash b33bad9e50003d6bd2dd3df2397c35d3
9d55a922606a6d2084ca3cebbb940b6bd1c345e6
a179f8ab8911bd00e1c59d835b58863c908fd8a0b908abd64480e2e0513986f2
GET /notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=BBCBB96234FF4A44AA3F508F6E3A6F93&IID=Bnp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 8948
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:57 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DA87D34B854347798CFD611DF73A5363 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.093ff82fbfe646508bf049e433a9a4db%26pid%3dWdp&ehk=MQRlVJ2S8oSV9911Vi78QAHamT6mQdPQ87oaiQNyIzs%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.7 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.093ff82fbfe646508bf049e433a9a4db%26pid%3dWdp&ehk=MQRlVJ2S8oSV9911Vi78QAHamT6mQdPQ87oaiQNyIzs%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash c8b204e573cf85451cd0f9423be7b95c
b54d8613aec0d5a5f03de7e42fa749c6d5831e36
52b2cbf12fd81bc82093b4ab7090d3a3069039364ddf0b15f8d7534d770bce11
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.093ff82fbfe646508bf049e433a9a4db%26pid%3dWdp&ehk=MQRlVJ2S8oSV9911Vi78QAHamT6mQdPQ87oaiQNyIzs%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3706
cache-control: public, max-age=2580836
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8cf
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6fdf393b83803767b8a87fbf694d92f3%26pid%3dWdp&ehk=ixaQ%2fVUBhb5b2MDVqIBQ5XTaL4fPrjcqFL7pEkxcrsg%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.9 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6fdf393b83803767b8a87fbf694d92f3%26pid%3dWdp&ehk=ixaQ%2fVUBhb5b2MDVqIBQ5XTaL4fPrjcqFL7pEkxcrsg%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 4b1a483464ec75e7b0201ee960e17452
23b166dacb4107f6ac47af709f86b445111c646b
63eb30845c2a1039193266c1786ffa2a219793edb7d2930a971cca4c972c1bf1
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.6fdf393b83803767b8a87fbf694d92f3%26pid%3dWdp&ehk=ixaQ%2fVUBhb5b2MDVqIBQ5XTaL4fPrjcqFL7pEkxcrsg%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2910
cache-control: public, max-age=2590354
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8d1
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d73a2bea71e9775f90bf2695c32a491c%26pid%3dWdp&ehk=l040LnG4nAUYmz8ZnxqQguHXy%2bDE7RO7Hy%2bKMUFbyJk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.4 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d73a2bea71e9775f90bf2695c32a491c%26pid%3dWdp&ehk=l040LnG4nAUYmz8ZnxqQguHXy%2bDE7RO7Hy%2bKMUFbyJk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 0243a976478b42aa5b6ac501604fe905
5f89fcb284a7cdbec90235abe761a68eb0dfeda1
34fc3bfb31b04ce3f65f4e5972021e07115776fa4edfcead44ed860f7c669c1f
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d73a2bea71e9775f90bf2695c32a491c%26pid%3dWdp&ehk=l040LnG4nAUYmz8ZnxqQguHXy%2bDE7RO7Hy%2bKMUFbyJk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3388
cache-control: public, max-age=2580041
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8d0
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2e3de30bb4251ebbeee1af99e8750205%26pid%3dWdp&ehk=Ok45G2Ih%2by59kRJh8oEsYlKJJ6apsqdM8c8y%2fQAbheM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.9 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2e3de30bb4251ebbeee1af99e8750205%26pid%3dWdp&ehk=Ok45G2Ih%2by59kRJh8oEsYlKJJ6apsqdM8c8y%2fQAbheM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 5e5aa26307e5e0e44fed88b9a978604d
538e20637a9c5996371b61bd2c92406991185b3b
b5a59931e6fb80d6f1e30c41b84ff953ee4c7bc3e6d8f1abb031edb46b6888ca
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.2e3de30bb4251ebbeee1af99e8750205%26pid%3dWdp&ehk=Ok45G2Ih%2by59kRJh8oEsYlKJJ6apsqdM8c8y%2fQAbheM%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2908
cache-control: public, max-age=2583079
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8d7
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.494d31c49e770bc688a82b536ac45fdb%26pid%3dWdp&ehk=Yg6X6gOvRFaQbjN5M3oTlANKs6SNmQ55MS%2f176Ecb84%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.9 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.494d31c49e770bc688a82b536ac45fdb%26pid%3dWdp&ehk=Yg6X6gOvRFaQbjN5M3oTlANKs6SNmQ55MS%2f176Ecb84%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 89696fec6ca58f348d4198e7c9812322
d3b07f0d759df54df7f1edf5ba1162dc3aa9fbcd
31d19cdfcc879605756905c574d1c89fdce0cffa18d07b70222509a835568196
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.494d31c49e770bc688a82b536ac45fdb%26pid%3dWdp&ehk=Yg6X6gOvRFaQbjN5M3oTlANKs6SNmQ55MS%2f176Ecb84%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2863
cache-control: public, max-age=2553624
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8cb
x-check-cacheable: YES
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675808113340%22
200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675808113340%22
IP
File type JSON data\012- , ASCII text, with very long lines (21681), with no line terminators
Hash 55012e1b3af0fc95bfadb44668f148e8
606062404e89594c099a810cd299f1b105194bdc
0c2a171c78600c8a574746fc2d040e22284325bd944e38e8fd9e3f6f19ef1eeb
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221675808113340%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21681
via: 1.1 google
date: Wed, 08 Feb 2023 09:17:16 GMT
age: 3281
last-modified: Tue, 07 Feb 2023 22:15:13 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.818d207ca3b3d5cbb21ac09c36e669fb%26pid%3dWdp&ehk=l%2f6vNfdpsP3lOZreLCsg8u%2fUU%2fFVf80XcSoNEVMXarc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 1.8 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.818d207ca3b3d5cbb21ac09c36e669fb%26pid%3dWdp&ehk=l%2f6vNfdpsP3lOZreLCsg8u%2fUU%2fFVf80XcSoNEVMXarc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 65c197d46608d7edae6f7a10b7c25821
6da3bf1d79684527efb45e44f6e4398ff5179afa
53cc9a33f8375a5305645eb30d0ae3dfc1a6aeef3a9c395416a8a54d769b9719
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.818d207ca3b3d5cbb21ac09c36e669fb%26pid%3dWdp&ehk=l%2f6vNfdpsP3lOZreLCsg8u%2fUU%2fFVf80XcSoNEVMXarc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 1815
cache-control: public, max-age=2587423
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8dc
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.569bb9495fc912734c9d3d0cc580e5da%26pid%3dWdp&ehk=YrduUMlDazya07b9JiJFRaQQnNL%2bQgYnr%2fahYkS3HnQ%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 619 B URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.569bb9495fc912734c9d3d0cc580e5da%26pid%3dWdp&ehk=YrduUMlDazya07b9JiJFRaQQnNL%2bQgYnr%2fahYkS3HnQ%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 782faa5c6b048af63f63b8cecbac1a2e
1484e0fdaa7647ee44ba5100c06055855221fbf8
ed981a65611d3da6d6929748027576ad7c276185785a6cb8ef4850b3962fd863
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.569bb9495fc912734c9d3d0cc580e5da%26pid%3dWdp&ehk=YrduUMlDazya07b9JiJFRaQQnNL%2bQgYnr%2fahYkS3HnQ%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 619
cache-control: public, max-age=2588391
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8db
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.ce18e95327e99bc596da8d893ed8bb51%26pid%3dWdp&ehk=PGAVNzuNwkQ8DQWCckawJtylZqWB6MVqiskGPBvoDe4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 1.7 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.ce18e95327e99bc596da8d893ed8bb51%26pid%3dWdp&ehk=PGAVNzuNwkQ8DQWCckawJtylZqWB6MVqiskGPBvoDe4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash fed05b80148c151491629822efbaa857
e7f947d5f6ba2f35fbf03f3e32b2c54d2b8f9fc0
8f4f2d4bd8d115792a03be85e9dcf1434dc5a05b5202c9f26d9b2df486a085e5
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.ce18e95327e99bc596da8d893ed8bb51%26pid%3dWdp&ehk=PGAVNzuNwkQ8DQWCckawJtylZqWB6MVqiskGPBvoDe4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 1732
cache-control: public, max-age=2584537
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8e1
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.9f0fe07de861068af1dc52f444fb5d90%26pid%3dWdp&ehk=6lYK7jA0jGiSvWoHCcClMy9l0WhYBbkS%2fw4Gl8weiq4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.2 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.9f0fe07de861068af1dc52f444fb5d90%26pid%3dWdp&ehk=6lYK7jA0jGiSvWoHCcClMy9l0WhYBbkS%2fw4Gl8weiq4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 39c2f5471dc2f9bca1da97725011eca2
94f5ad5bc935957c012566828aac7b88fa418784
e4047c193d992fb9bb1a021e2012e020ab52ecc983201ce9f6dbb80f922e3851
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.9f0fe07de861068af1dc52f444fb5d90%26pid%3dWdp&ehk=6lYK7jA0jGiSvWoHCcClMy9l0WhYBbkS%2fw4Gl8weiq4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2241
cache-control: public, max-age=2586899
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8e5
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d023dde7b0e755b74d74bf749a431536%26pid%3dWdp&ehk=Mjkzs0pj%2boGjDnnY6%2fJzHaRlUMYvxQqIny3LoEpurI4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.5 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d023dde7b0e755b74d74bf749a431536%26pid%3dWdp&ehk=Mjkzs0pj%2boGjDnnY6%2fJzHaRlUMYvxQqIny3LoEpurI4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 739e077323a24b41ed70d0c759d40942
ac0f583f896ae70f05993816587b3517b18de424
a84b2478139b9ecf3c7bb4fb52c864ce5ed86ed8cd3982fb03ed770b53383958
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.d023dde7b0e755b74d74bf749a431536%26pid%3dWdp&ehk=Mjkzs0pj%2boGjDnnY6%2fJzHaRlUMYvxQqIny3LoEpurI4%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3465
cache-control: public, max-age=2584787
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8e4
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fimg-s-msn-com.akamaized.net%2ftenant%2famp%2fentityid%2fAA17eVQR.img&ehk=O8%2b0iAM4QTK7NsMCE5cYiXXj1EM4rjPgb79UXie%2fMMk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 3.2 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fimg-s-msn-com.akamaized.net%2ftenant%2famp%2fentityid%2fAA17eVQR.img&ehk=O8%2b0iAM4QTK7NsMCE5cYiXXj1EM4rjPgb79UXie%2fMMk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 070dacfa2344ff2ae3deb66937bb1265
608ffb65dd6e0a59b85f602205a7799ae0e0a17c
f450eb685958c3a0c1e846b4f90a480b2dc31fdfbdf14ac4bf984cbc1c4f2779
GET /th?u=https%3a%2f%2fimg-s-msn-com.akamaized.net%2ftenant%2famp%2fentityid%2fAA17eVQR.img&ehk=O8%2b0iAM4QTK7NsMCE5cYiXXj1EM4rjPgb79UXie%2fMMk%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3158
cache-control: public, max-age=2591849
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8e3
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.972377c64f394d0996940f4d55f8fc6c%26pid%3dWdp&ehk=pWOygDOdNiOb7lQMHC7GePAlaW%2bUz6BerQUJYH6%2bjcc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 2.4 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.972377c64f394d0996940f4d55f8fc6c%26pid%3dWdp&ehk=pWOygDOdNiOb7lQMHC7GePAlaW%2bUz6BerQUJYH6%2bjcc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash 838cff10b1521da941168b530f19f2af
323b46f3fe20e5b4ddb542ceecf202194196cc7c
a3f71f02d5f44bd32e76808b670974c19f707f9bcd2298f4cd2a71a2f4fb3967
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.972377c64f394d0996940f4d55f8fc6c%26pid%3dWdp&ehk=pWOygDOdNiOb7lQMHC7GePAlaW%2bUz6BerQUJYH6%2bjcc%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2423
cache-control: public, max-age=2583831
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8f5
x-check-cacheable: YES
X-Firefox-Spdy: h2
th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.765613374ff67bbe4e5c964110bba62b%26pid%3dWdp&ehk=UhHEI7LkQnOsmVnJ3FBniX9V2klfG8ryAJDeIzj8808%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
200 OK 4.8 kB URL HTTP/2 th.bing.com/th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.765613374ff67bbe4e5c964110bba62b%26pid%3dWdp&ehk=UhHEI7LkQnOsmVnJ3FBniX9V2klfG8ryAJDeIzj8808%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 186x88, components 3\012- data
Hash a2bda93ccc8b44815fd32a00bd24a8d9
e6d6e8d4ae04e183a4221ac4eea3accbabb1c69d
c11e044f6e118ba890b8fea0a4d578c91ddbdccd251673d52412426373a50cd5
GET /th?u=https%3a%2f%2fth.bing.com%2fth%3fid%3dORMS.765613374ff67bbe4e5c964110bba62b%26pid%3dWdp&ehk=UhHEI7LkQnOsmVnJ3FBniX9V2klfG8ryAJDeIzj8808%3d&w=186&h=88&c=8&rs=2&o=6&pid=WP0 HTTP/1.1
Host: th.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 4812
cache-control: public, max-age=2546023
date: Wed, 08 Feb 2023 10:11:57 GMT
x-cache: TCP_MEM_HIT from a95-101-10-196.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.c40a655f.1675851117.6ce8f6
x-check-cacheable: YES
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1364%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171157%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1364%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171157%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1364%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171157%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C27CF5D13F2040E4BBD95BD165329947 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bing.com/rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png
200 OK 8.2 kB URL HTTP/2 www.bing.com/rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 842 x 92, 8-bit colormap, non-interlaced\012- data
Hash 83c9af188daea75971437f3f67daa05f
b5fa68ab362fe36afb52342fcf0d0f548a13da76
96054ad091360d568c6d01633833ac8988981696e14b1ec230e96a2457884990
GET /rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8244
content-type: image/png
content-md5: g8mvGI2up1lxQ38/Z9qgXw==
last-modified: Tue, 24 Jan 2023 20:16:32 GMT
etag: 0x8DAFE47E28F035A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 57ca4fdd-d01e-00df-7502-3a3c0f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 2E8F1113FB324A478A520B9CAE2F280E Ref B: AM3EDGE0713 Ref C: 2023-02-07T07:53:50Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 85D621D587A5435DA58A312E9A8A623B Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1379%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675851171170%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1379%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675851171170%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A17%2C%22time%22%3A1379%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675851171170%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6FF5A8D7724D4D3B940B4E314C4A589E Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
content-length: 0
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675773437082&_since=%221666204638208%22
200 OK 29 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675773437082&_since=%221666204638208%22
IP
File type JSON data\012- , ASCII text, with very long lines (29137), with no line terminators
Hash 27dd1297c6266a7456f0ff3dba62f141
53994ca0a94ecbc35dfa12a3ea47c36f7aeb1a01
2f635d6800b663f8d80ec42481dae02446308fcc1876690b097f7028049dfa7c
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675773437082&_since=%221666204638208%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 29137
via: 1.1 google
date: Wed, 08 Feb 2023 09:58:19 GMT
age: 818
last-modified: Tue, 07 Feb 2023 12:37:17 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
200 OK 4.6 kB URL HTTP/2 assets.msn.com/bundles/v1/bingHomepage/latest/widget-initializer.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13100)
Hash efeffb4eda40b16e38658170c235b5a3
e078e0d6863751d2a6701ca0330c9d12ca1df7f9
2da59d63f7bf73a152fb1d90b28ce1b92dac8e30c61b832cd085e6a7b4a452b9
GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1
Host: assets.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Origin: https://www.bing.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 4555
content-md5: 7+/7TtpAsW44ZYFwwjW1ow==
last-modified: Thu, 02 Feb 2023 23:27:13 GMT
etag: 0x8DB057503C0C11B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 03055453-201e-0008-525e-377614000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Wed, 08 Feb 2023 10:11:57 GMT
akamai-request-bc: [a=95.101.10.166,b=2585700658,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0 , cdntime; dur=1
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.10.166
akamai-request-id: 9a1ea932
access-control-allow-credentials: true
access-control-allow-origin: https://www.bing.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: YKWGC+sVa1o+o0Dd2h0APQX0cToxOXAx1AMK3osjd39w962v2os4UUtyd0dVV3yTddGjgf7gSfw=
x-amz-request-id: TMTQ9R7Y3RZHQ1FX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 09:45:55 GMT
age: 1562
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675851171210%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675851171210%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675851171223%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675851171223%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1533%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171325%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675851171210%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675851171210%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675851171223%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675851171223%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1533%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171325%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675851171210%2C%22Name%22%3A%22BottomBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675851171210%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675851171223%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263245%22%7D%2C%7B%22ID%22%3A%2263245%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675851171223%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1533%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675851171325%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 49D7AE286613488C8F25E74A19B8523F Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
content-length: 0
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 09:36:37 GMT
content-type: application/json
age: 2120
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89ab7a8f2f51b53ecef0795c64f31534
7d86d1d99955320b9ec97f9819ef6ca8e0409a29
25f11a6100923f5f64e4b6069edfbba73d4188e6698fc6777b00c2d997020dc7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F11A6100923F5F64E4B6069EDFBBA73D4188E6698FC6777B00C2D997020DC7"
Last-Modified: Tue, 07 Feb 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4220
Expires: Wed, 08 Feb 2023 11:22:17 GMT
Date: Wed, 08 Feb 2023 10:11:57 GMT
Connection: keep-alive
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
200 OK 807 kB URL HTTP/2 firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
IP
Size 807 kB (807180 bytes)
Hash 914be443bdfbe8a1c3ded61e1c114bd6
4fe7c5ff83f6a29e6699f4cebc17550891504661
41b036d0c889509d547296b238027a063c313261ad52d5f7bb81922011791857
GET /staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dguZsNlgt0E45bClSnS3eklmiykznZzPHsVWHNdaaMzEAaRGO4cZgbeZnkXLWgpuuMWxb90zRhY=
x-amz-request-id: 7YF2ZWT19PGFW512
x-amz-version-id: K1ODzappZsD35qeu0OM5zvs_BP1eybj7
accept-ranges: bytes
server: AmazonS3
content-length: 807180
via: 1.1 google
date: Sat, 04 Feb 2023 15:34:39 GMT
age: 326238
last-modified: Tue, 10 Jan 2023 12:38:46 GMT
etag: "914be443bdfbe8a1c3ded61e1c114bd6"
content-type: application/octet-stream
cache-control: public,max-age=604800
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/rewardsapp/ncheader?ver=34018894&IID=SERP.5019&IG=BBCBB96234FF4A44AA3F508F6E3A6F93
200 OK 135 B URL HTTP/2 www.bing.com/rewardsapp/ncheader?ver=34018894&IID=SERP.5019&IG=BBCBB96234FF4A44AA3F508F6E3A6F93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with no line terminators
Hash 220681134a8094ce652f9fe8016037a5
a771c8027c266aded9f60f97965d2f9bf4f67af8
8af854ff412f28bd161367c8e5b1a5469e03363a5ad11c14634b6abc38388b9e
POST /rewardsapp/ncheader?ver=34018894&IID=SERP.5019&IG=BBCBB96234FF4A44AA3F508F6E3A6F93 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 135
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:57 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 06CE1710B52B427092A49803C75C2FD5 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
www.bing.com/rewardsapp/reportActivity?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&IID=SERP.5028&&src=hp
200 OK 608 B URL HTTP/2 www.bing.com/rewardsapp/reportActivity?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&IID=SERP.5028&&src=hp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (1266)
Hash 45adf0f0920c6d507770c26dfe841ec5
a1b2c157c3d3bb40662d4ce519e1b53985372da1
ac97c9d83e5254f85fde82f9b708b4de9de91fc432eb3bd6a2444659fdfffc20
POST /rewardsapp/reportActivity?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&IID=SERP.5028&&src=hp HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 608
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:57 GMT; path=/; HttpOnly
_RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:11:57.6673201+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; domain=.bing.com; expires=Thu, 08-Feb-2024 10:11:57 GMT; path=/; secure; SameSite=None
_SS=SID=243C762655D36C013E44649454266DDF&R=0&RB=0&GB=0&RG=200&RP=0; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FEDBD6F2F8144C99919BFA60392464A4 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
www.bing.com/ipv6test/test?FORM=MONITR
200 OK 64 B URL HTTP/2 www.bing.com/ipv6test/test?FORM=MONITR
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 1bf1ff302246bc930c733c405f985472
de1fb6765de8bd2d9d98507705e24d51d2bd335c
c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
GET /ipv6test/test?FORM=MONITR HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0; ipv6=hit=1675854771533
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:57 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 18F940D7E96646BFA2EC8DC25DD30CB4 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675799860323&_since=%221666279968541%22
200 OK 78 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675799860323&_since=%221666279968541%22
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 599e4b408d1ad854cb9be1385bf41b9a
32ffd647953aa074c42ee4bc0c449860156bb920
f6315e550e8b98dcd2b48f5fce2028ed7dafdc977e6d5e333de71c73080af38b
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675799860323&_since=%221666279968541%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 77652
via: 1.1 google
date: Wed, 08 Feb 2023 10:01:09 GMT
age: 648
last-modified: Tue, 07 Feb 2023 19:57:40 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www2.bing.com/ipv6test/test
200 OK 64 B URL HTTP/2 www2.bing.com/ipv6test/test
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 1bf1ff302246bc930c733c405f985472
de1fb6765de8bd2d9d98507705e24d51d2bd335c
c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
GET /ipv6test/test HTTP/1.1
Host: www2.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:57 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 53B316D5A99D4BD09CE8961C4FC23012 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675851171459%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e3756c0968438fb896c7f69cbc8566%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675851171478%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e3756c0968438fb896c7f69cbc8566%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675851171478%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675851171591%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
200 OK 0 B URL HTTP/2 www.bing.com/fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675851171459%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e3756c0968438fb896c7f69cbc8566%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675851171478%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e3756c0968438fb896c7f69cbc8566%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675851171478%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675851171591%2C%22Name%22%3A%22AnimationLoad%22%7D%5D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fd/ls/l?IG=BBCBB96234FF4A44AA3F508F6E3A6F93&CID=185F2CAA406A649E305B3E18419F657E&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675851171459%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e3756c0968438fb896c7f69cbc8566%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675851171478%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e3756c0968438fb896c7f69cbc8566%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675851171478%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675851171591%2C%22Name%22%3A%22AnimationLoad%22%7D%5D HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF&R=0&RB=0&GB=0&RG=200&RP=0; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0&WTS=63811447916; ipv6=hit=1675854771533; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:11:57.6673201+00:00&rwred=0&wls=&lka=0&lkt=0&TH=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F100C5D87E29444EBF5637B8C5E85E61 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
content-length: 0
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
IP
File type JSON data\012- , ASCII text, with very long lines (1718), with no line terminators
Hash fb8364b979ee4d6ab16983257209c5aa
e7749d6314f37c996014ed25444215c50d585634
4ae5e5eea70f358d81e21e3861a48532d484b883a30041c4abaf709457ac4cc4
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1718
via: 1.1 google
date: Wed, 08 Feb 2023 09:43:48 GMT
age: 1689
last-modified: Tue, 07 Feb 2023 16:36:46 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=da51865d-1312-4034-9be0-871d65dd97b5&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%22BBCBB96234FF4A44AA3F508F6E3A6F93%22%7d
200 OK 681 B URL HTTP/1.1 login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=da51865d-1312-4034-9be0-871d65dd97b5&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%22BBCBB96234FF4A44AA3F508F6E3A6F93%22%7d
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (627), with CRLF line terminators
Hash e2aadac7bcba53d9982549354fa92bdf
a45c3f65a232e4d65ad3421628072405c7685cee
6add06d615c3458a3a079f1b474a1cde16a29e6e0de2aa8f85bd401277cabe32
GET /common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=da51865d-1312-4034-9be0-871d65dd97b5&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%22BBCBB96234FF4A44AA3F508F6E3A6F93%22%7d HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: brcap=0; MSFPC=GUID=27491a5fca0c436896bdbf20a1588da0&HASH=2749&LV=202205&V=4&LU=1652883922743; ESTSSSOTILES=1; AADSSOTILES=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: eb1d4473-fa62-4e64-ae60-05571c0a1000
x-ms-ests-server: 2.1.14601.8 - WEULR1 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.AXMAMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrITYMav4hsiI87i7H1q9sRPlsGmHo9TgOyIGHG82Eq6jKiI4eBBcYejPMbfuHCFWcmZwWpPXO2gbCszZIleeUufUQX1_YcRDrhDYwqVosu_UgAA; expires=Fri, 10-Mar-2023 10:11:57 GMT; path=/; secure; HttpOnly; SameSite=None
fpc=AhNUHr0afiVKlW7wGN0CPheCeMQLAQAAAG1sddsOAAAA; expires=Fri, 10-Mar-2023 10:11:57 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrZ0EMZ_o6_3dyv47kBJMHPMFW-Ac1fj0iMGQeQTDq9RABi1fr8ZOwyK1irAgOT0-RbmInKqGvn-HHMhrUgzZx5wSo8x_nviHJyiU4TUDuQ-xmSnZIAQnq0zFvgaxbwd93Znd9B0yD2LyNIjgDwRLjNVG7IPmdajNJwm9AF9YdyfwgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Wed, 08 Feb 2023 10:11:57 GMT
Content-Length: 681
firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
200 OK 1.3 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
IP
File type JSON data\012- , ASCII text, with very long lines (1251), with no line terminators
Hash 84877e5233cbfb37ee8e3a229a105c5a
1de2638f59470efebfeb21250ec19dcc6f2092cf
d3a86e1ca60b2a4b4ffc1fb159f17bf8e590072e2f8f141087cb42c3c612b1eb
GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1251
via: 1.1 google
date: Wed, 08 Feb 2023 09:53:26 GMT
age: 1111
last-modified: Tue, 07 Feb 2023 16:36:45 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1675734066429&_since=%221662044085942%22
200 OK 5.6 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1675734066429&_since=%221662044085942%22
IP
File type JSON data\012- , ASCII text, with very long lines (5628), with no line terminators
Hash ba20fa4a4d0b101ba8c0184be4ab1114
f6babf918e8cd29dd4bae3b5cd1333d408671840
889093cfc512eaefd30a50503286ec7a6d0e46adbd05feeb71a0cb254ad5fefe
GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1675734066429&_since=%221662044085942%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 5628
via: 1.1 google
date: Wed, 08 Feb 2023 09:55:04 GMT
age: 1013
last-modified: Tue, 07 Feb 2023 01:41:06 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/orgid/idtoken/conditional
200 OK 1 B URL HTTP/2 www.bing.com/orgid/idtoken/conditional
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4
POST /orgid/idtoken/conditional HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 708
Origin: https://login.microsoftonline.com
Connection: keep-alive
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF&R=0&RB=0&GB=0&RG=200&RP=0; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0&WTS=63811447916; ipv6=hit=1675854771533&t=4; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:11:57.6673201+00:00&rwred=0&wls=&lka=0&lkt=0&TH=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 1
content-type: text/html
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:57 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 900B748D47054E5DABB5C8682056C6A8 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1675851116&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
302 Found 0 B URL HTTP/1.1 login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1675851116&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.srf?wa=wsignin1.0&rpsnv=11&ct=1675851116&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: Wed, 08 Feb 2023 10:10:57 GMT
Location: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: R3_BL2
x-ms-request-id: 53f18c0e-9269-40f3-a4bb-f8a10bb17295
PPServer: PPV: 30 H: BL02EPF00006854 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=82b25db4fdda4ea1ac5894b4745e0c0d; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=264960<=1675851117&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Wed, 08 Feb 2023 10:11:57 GMT
Content-Length: 0
www.bing.com/secure/Passport.aspx?popup=1&ssl=1
200 OK 184 B URL HTTP/2 www.bing.com/secure/Passport.aspx?popup=1&ssl=1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c692cf35c4d3ad00b5a49bdf3cd2363c
eb9c1fb3345378800f697c7c92519c5188dd9f5a
fa404c029e5e3109f687ed6e12018f34e43ecb2ef8991172af7bd9fc220562fe
GET /secure/Passport.aspx?popup=1&ssl=1 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Connection: keep-alive
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF&R=0&RB=0&GB=0&RG=200&RP=0; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0&WTS=63811447916; ipv6=hit=1675854771533&t=4; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:11:57.6673201+00:00&rwred=0&wls=&lka=0&lkt=0&TH=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-length: 184
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:58 GMT; path=/; HttpOnly
_EDGE_S=SID=1C0EBBB89C6C607D3DA9A90A9D996178; domain=.bing.com; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9B22A1EBDE4E46139740E599369571A3 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:57Z
date: Wed, 08 Feb 2023 10:11:57 GMT
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
200 OK 681 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
IP
File type JSON data\012- , ASCII text, with very long lines (681), with no line terminators
Hash 49248eff154dc4c57a2941a8ea08b148
f1c61090e04394494721aa17ddb4814293e66e89
674b33af069dc532553d499551583e97162232c880bb2f47bfe3787aeba2640c
GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 681
via: 1.1 google
date: Wed, 08 Feb 2023 09:52:40 GMT
age: 1158
last-modified: Mon, 06 Feb 2023 16:36:54 GMT
etag: "1675701414813"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
200 OK 932 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
IP
File type JSON data\012- , ASCII text, with very long lines (932), with no line terminators
Hash 22ad217b8542124e6c8821717559faf6
4330760a23c61ac654d088a592408e3b5c3b0bc5
a003887785e0e602be4c05929a584b7f3f1f79f27460e7eb35a4998663c5436b
GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 932
via: 1.1 google
date: Wed, 08 Feb 2023 09:22:12 GMT
age: 2986
last-modified: Sun, 05 Feb 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
200 OK 1.5 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
IP
File type JSON data\012- , ASCII text, with very long lines (1505), with no line terminators
Hash 5fbaf2b7815ccde4e006732f60cf45c3
358f788e1494eb1777de83a84aa1e831c6189ec9
d95422b3bbfa32ed668a90e5db3f3dd703e46d69e169e82a1e014b64b6b2d703
GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1505
via: 1.1 google
date: Wed, 08 Feb 2023 09:22:12 GMT
age: 2986
last-modified: Sat, 04 Feb 2023 16:36:45 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1675468864323&_since=%221666483264567%22
200 OK 52 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1675468864323&_since=%221666483264567%22
IP
File type JSON data\012- , ASCII text, with very long lines (52267), with no line terminators
Hash 06e189dc52881e7f5616b0214ff59542
16bd38b5d24dbc7fb6d44561cad597d6f555cf52
3b59d876391dc2db99e43edcffa3ed5a184468b0c937ef6293fc392ed7426df8
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1675468864323&_since=%221666483264567%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 52267
via: 1.1 google
date: Wed, 08 Feb 2023 09:58:20 GMT
age: 818
last-modified: Sat, 04 Feb 2023 00:01:04 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22
200 OK 2.1 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22
IP
File type JSON data\012- , ASCII text, with very long lines (2144), with no line terminators
Hash 5cfd74fcbede0ee061689b95c597b11b
75d870f627cdc06f4cb7fa47751ae56c740da850
c68708f43d2bf28e3d619542c6fd7ab408f034a7f87de731ed11356efc4453eb
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 2144
via: 1.1 google
date: Wed, 08 Feb 2023 09:42:47 GMT
age: 1751
last-modified: Thu, 02 Feb 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1675353179510&_since=%221661199949574%22
200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1675353179510&_since=%221661199949574%22
IP
File type JSON data\012- , ASCII text, with very long lines (22471), with no line terminators
Hash 86e5267005f7001a7a7fb7f25d7e02b9
67ea12312364541e026dfd85800ce5f4280601c5
9c469d6cd61cb4f4e3f06e980f86f3ee16cb4ec776ed105998810bcabbe12969
GET /v1/buckets/main/collections/search-config/changeset?_expected=1675353179510&_since=%221661199949574%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 22471
via: 1.1 google
date: Wed, 08 Feb 2023 09:20:56 GMT
age: 3062
last-modified: Thu, 02 Feb 2023 15:52:59 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22
IP
File type JSON data\012- , ASCII text, with very long lines (1742), with no line terminators
Hash 22092e301760ed865af6ece6eb04b1be
557b52e40ec2d8f2fe080580a1858c8666791bf2
12afba8f5929ab372e9cffbbe57e8bb562c60fc0a98b751c69de1adc04fb4aea
GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1742
via: 1.1 google
date: Wed, 08 Feb 2023 09:27:01 GMT
age: 2697
last-modified: Wed, 01 Feb 2023 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.bing.com/fd/ls/lsp.aspx
204 No Content 0 B URL HTTP/2 www.bing.com/fd/ls/lsp.aspx
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fd/ls/lsp.aspx HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/xml
Content-Length: 10398
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=185F2CAA406A649E305B3E18419F657E; MUIDB=185F2CAA406A649E305B3E18419F657E; _EDGE_S=SID=1C0EBBB89C6C607D3DA9A90A9D996178; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; SRCHUSR=DOB=20230208&T=1675851116000; _SS=SID=243C762655D36C013E44649454266DDF&R=0&RB=0&GB=0&RG=200&RP=0; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=892&SCW=1280&SCH=892&DPR=1.0&UTC=0&DM=0&WTS=63811447916; ipv6=hit=1675854771533&t=4; _RwBf=ilt=1&ihpd=1&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2023-02-08T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-08T10:11:57.6673201+00:00&rwred=0&wls=&lka=0&lkt=0&TH=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 86379C01B07E40649C1B8DC61B58F3E8 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:58Z
date: Wed, 08 Feb 2023 10:11:58 GMT
X-Firefox-Spdy: h2
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Tue, 07 Feb 2023 11:47:25 GMT
Age: 80673
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14650
Expires: Wed, 08 Feb 2023 14:16:09 GMT
Date: Wed, 08 Feb 2023 10:11:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14650
Expires: Wed, 08 Feb 2023 14:16:09 GMT
Date: Wed, 08 Feb 2023 10:11:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14650
Expires: Wed, 08 Feb 2023 14:16:09 GMT
Date: Wed, 08 Feb 2023 10:11:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14650
Expires: Wed, 08 Feb 2023 14:16:09 GMT
Date: Wed, 08 Feb 2023 10:11:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa6c416b3a87ded887c9dcf7c51e5dd0
45f4ef9e68591c00669043abe96959bead8f17ae
9e10394b387916e40c44d4e02fbc1ea72214d870df189ce16d24015de00682bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11205
x-amzn-requestid: abdf9c40-a2b7-49ae-bea1-ff5abfcea781
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvszZFOZoAMFkNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc8e7b-6e508da05ff6f33e691de130;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 04:33:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hLrbI5Acy2RBlg7VqGE2b83zuqgt-bx0kD0nlH8uYaJ8tii2FqMLfw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 14:35:27 GMT
age: 70592
etag: "45f4ef9e68591c00669043abe96959bead8f17ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25fb37d8b072e47aae74933481fb9418
b073d213a6a7939efed7ee5ef62a5548e00082bc
59a9c61013b3a4faab6f1c578f45bb87397d2f9e7975ae58e53e2c4e4a791da2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6177
x-amzn-requestid: 1b73f423-5a28-48f6-9ad1-9e42c38bebc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f-tCnF09IAMFt4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e28edd-294711995de49ebb380b4ca2;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 17:48:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zr0wkfqHvE3x4qvNObXp9uIF_oXpoZuHKgyboR5ezBuiHDdxFPpswA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 18:09:39 GMT
age: 57740
etag: "b073d213a6a7939efed7ee5ef62a5548e00082bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f31c82179856e39ee5fc43d7f0b685
5b37f807a19ffc80c0b9334e6d24d5bb717496ce
c099c91c6f2125a8a89ee6e9dc0e37e2c2c9914adadb2c8b77795063baa62037
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6805
x-amzn-requestid: 9f067f0c-2991-41ae-8dd0-5719a5438abc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PHwEn4IAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c564-730d01807c13643373d64897;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eSU1CSydRTodwnN5DNTXbYD3d3kYFCHiCvPRq5DZTTDSTH2L-GV_1g==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:19:17 GMT
age: 42762
etag: "5b37f807a19ffc80c0b9334e6d24d5bb717496ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb0e725719ac378134b01b6473a6581
a8a1780c88e8ae219048bed28ecfbd8019d9af35
187d4e83edc0af857334f84bd6853234193d4654d06c43367f39b4e125defe08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6679
x-amzn-requestid: 97c19ad5-c127-4dc1-b529-1eca84645316
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f59MzHgloAMFwow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a8b8-79d6b8d31b69153d4929b7b7;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x_tr-xummuF51PvAM4y3DgvLWuJOwxgquKO8baQfcoN6ta5M3ll7ug==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 06:25:01 GMT
age: 13618
etag: "a8a1780c88e8ae219048bed28ecfbd8019d9af35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 726928e5de19ef978faebbe933c34008
bdaba3ed0c7efb65de88af96063d830683c8499b
c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xU_uVO78ZQRKon3Cz-fVcHJuPEMMgzDsVuY8BXoKL6ntJwkl-SLeQA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:03 GMT
age: 44996
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5129898de057eb92808f18d120eb7a70
eb0a900843beac5c4ee46686b89b3e8b8d77f80f
7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7847
x-amzn-requestid: 60759e32-ac58-4dda-8ea3-fd80413c0deb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkkEpMoAMFnGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c483-61b8715a0da73f4526215649;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TCX7ZFhV73kN0UBshXeb0qdSkY-8qdeNN6EgioqOUmSAnraEhAohMQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:11 GMT
age: 44988
etag: "eb0a900843beac5c4ee46686b89b3e8b8d77f80f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
george-login.buzz/sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/
302 Found 0 B URL HTTP/2 george-login.buzz/sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.buzz domain
GET /sparkat/a1b2c3/e221ae1b05c16a47846a896e2926fc12/login/ HTTP/1.1
Host: george-login.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 08 Feb 2023 10:11:56 GMT
content-type: text/html; charset=UTF-8
location: https://www.bing.com
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KiCGemMYQvAKN%2Fi%2BgDyi2roFpxJL%2BazfvgRp5feR%2BlN2mtC6W7o276hXHTRBzaWXBBMPZrr1VJSztxN8%2BFb1HtSMO2oqKTT1AsH%2BJ2GDALhkMD6i0mO2tKzypYjYlpwXOJCj6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 796395848ddfb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.bing.com/
200 OK 0 B IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET / HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: SUID=M; domain=.bing.com; expires=Wed, 08-Feb-2023 22:11:56 GMT; path=/; secure; HttpOnly; SameSite=None
MUID=185F2CAA406A649E305B3E18419F657E; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
MUIDB=185F2CAA406A649E305B3E18419F657E; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; HttpOnly
_EDGE_S=F=1&SID=243C762655D36C013E44649454266DDF; domain=.bing.com; path=/; HttpOnly
_EDGE_V=1; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; HttpOnly
SRCHD=AF=NOFORM; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
SRCHUID=V=2&GUID=9825218140C84499A4DE170781C5E525&dmnchg=1; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
SRCHUSR=DOB=20230208; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
_SS=SID=243C762655D36C013E44649454266DDF; domain=.bing.com; path=/; secure; SameSite=None
ULC=; domain=.bing.com; expires=Tue, 07-Feb-2023 10:11:56 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wOFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; domain=.bing.com; expires=Mon, 04-Mar-2024 10:11:56 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8B29214C871E4981AB82A8A2687D3AE3 Ref B: OSL30EDGE0507 Ref C: 2023-02-08T10:11:56Z
date: Wed, 08 Feb 2023 10:11:56 GMT
X-Firefox-Spdy: h2
104.21.7.103
34.160.144.191
95.101.10.170
40.126.31.70
93.184.220.29