Overview

URLgeorge-login.buzz/sparkat/a1b2c3/5982cc3a813cc018766e30b83f866fd9/login/?
IP 188.114.96.1 (Colombia)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-07 22:08:54 UTC
StatusLoading report..
IDS alerts1
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2023-02-07 04:09:08 UTC 23.36.77.32
www.bing.com (32) 91 2013-06-14 19:00:40 UTC 2018-11-01 21:19:15 UTC 204.79.197.200
r.bing.com (1) 1184 2020-05-07 19:02:14 UTC 2023-02-06 17:14:14 UTC 95.101.10.122
assets.msn.com (1) 188 2018-09-20 23:46:35 UTC 2023-02-07 17:13:21 UTC 95.101.10.192
login.microsoftonline.com (1) 25 No data No data 20.190.159.19
login.live.com (1) 79 2012-05-21 07:00:20 UTC 2023-02-07 17:12:07 UTC 40.126.32.137
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-07 13:17:44 UTC 34.120.237.76
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-07 04:09:37 UTC 35.241.9.150
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2023-02-07 13:24:55 UTC 93.184.220.29
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-07 04:14:22 UTC 34.117.237.239
www2.bing.com (1) 1811 2015-10-25 19:49:43 UTC 2023-02-07 17:19:17 UTC 204.79.197.200
george-login.buzz (2) 0 2023-02-02 12:07:00 UTC 2023-02-03 00:46:26 UTC 188.114.96.1 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-07 04:10:04 UTC 34.160.144.191
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-07 04:09:08 UTC 54.149.38.208

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-07 22:09:34 UTC 2 Client IP  188.114.96.1 ET INFO HTTP Request to a *.buzz domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-07 2 george-login.buzz/sparkat/a1b2c3/5982cc3a813cc018766e30b83f866fd9/login/? Malware
2023-02-07 2 george-login.buzz/sparkat/a1b2c3/5982cc3a813cc018766e30b83f866fd9/login/? Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 188.114.96.1
Date UQ / IDS / BL URL IP
2023-03-30 15:34:11 +0000 0 - 0 - 2 lblbcsz0picmntvjf.lspower.xyz/ 188.114.96.1
2023-03-30 15:26:40 +0000 0 - 0 - 1 fw8milbpw1l8yapqaachtnr24es.richardl.xyz/usps (...) 188.114.96.1
2023-03-30 15:24:33 +0000 0 - 0 - 1 bdp50nxyg.richardl.xyz/usps/verification.html 188.114.96.1
2023-03-30 15:19:58 +0000 0 - 0 - 2 l9lcfly.lspower.xyz/usps/verification.html 188.114.96.1
2023-03-30 15:19:27 +0000 0 - 0 - 1 ul39p7civfi8cczb3uuy.richardl.xyz/usps/verifi (...) 188.114.96.1


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-30 15:34:11 +0000 0 - 0 - 2 lblbcsz0picmntvjf.lspower.xyz/ 188.114.96.1
2023-03-30 15:33:59 +0000 0 - 0 - 1 chitterchatter.co.uk/webmailupdate.html 104.21.41.5
2023-03-30 15:33:46 +0000 0 - 0 - 2 sqqxcipyr5i0ubaia7pkbfbzz2lus.lspower.xyz/ 104.21.64.71
2023-03-30 15:33:40 +0000 0 - 0 - 22 tvwaacdsqk21u2k.lspower.xyz/ 188.114.97.1
2023-03-30 15:33:09 +0000 0 - 0 - 1 7qmpcygbysi3lbrb.richardl.xyz/usps/verificati (...) 188.114.97.1


Last 5 reports on domain: george-login.buzz
Date UQ / IDS / BL URL IP
2023-02-09 02:40:24 +0000 0 - 1 - 4 george-login.buzz/sparkat/a1b2c3/cf7aaf1cd77e (...) 188.114.96.1
2023-02-09 02:33:40 +0000 0 - 2 - 8 george-login.buzz/sparkat/a1b2c3/cf7aaf1cd77e (...) 188.114.97.1
2023-02-08 18:13:05 +0000 0 - 1 - 4 george-login.buzz/sparkat/a1b2c3/e3eff93e2844 (...) 188.114.96.1
2023-02-08 18:13:03 +0000 0 - 1 - 4 george-login.buzz/sparkat/a1b2c3/26e9432540c0 (...) 188.114.97.1
2023-02-08 18:02:15 +0000 0 - 2 - 8 george-login.buzz/sparkat/a1b2c3/e3eff93e2844 (...) 188.114.97.1


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-11 07:04:46 +0000 0 - 0 - 1 terramarbrands.com/online/d7568ad4b236f68bfc4 (...) 162.241.103.53
2022-12-11 07:04:13 +0000 0 - 0 - 1 terramarbrands.com/online/7db0f2ac51edad7b651 (...) 162.241.103.53
2022-12-11 07:03:09 +0000 0 - 0 - 1 terramarbrands.com/online/1a5dfcee7fa0591b8dc (...) 162.241.103.53
2022-12-11 07:02:07 +0000 0 - 0 - 1 terramarbrands.com/online/9969d9a3c616c047dfa (...) 162.241.103.53
2022-12-11 03:15:29 +0000 0 - 0 - 2 terramarbrands.com/online/29c729c8cbc540a142d (...) 162.241.103.53

JavaScript

Executed Scripts (54)

Executed Evals (1)
#1 JavaScript::Eval (size: 12) - SHA256: a388b58969a035c3bdc32559771bea9f089868ba4723c7456f5e61ab00d8ccae
u =>
    import (u)

Executed Writes (0)


HTTP Transactions (61)


Request Response
                                        
                                            GET /sparkat/a1b2c3/5982cc3a813cc018766e30b83f866fd9/login/? HTTP/1.1 
Host: george-login.buzz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         188.114.96.1
HTTP/1.1 301 Moved Permanently
                                        
Date: Tue, 07 Feb 2023 22:08:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 07 Feb 2023 23:08:43 GMT
Location: https://george-login.buzz/sparkat/a1b2c3/5982cc3a813cc018766e30b83f866fd9/login/?
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xy5%2FpY2yGqD0frKN6SGQTvt8edoaRd3ydNfltOIEFwpOBe%2BzhtLrj%2BTNcfkV3RcDsv52bH9V%2BKcoYyHz0KQbUTitsJXO0ID0%2FSDzjDhlPyOQtzptxars9iytsW12LjX64pQecA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795f721e7c9b0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
  IDS:
    - ET INFO HTTP Request to a *.buzz domain
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9001
Expires: Wed, 08 Feb 2023 00:38:44 GMT
Date: Tue, 07 Feb 2023 22:08:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7007
Expires: Wed, 08 Feb 2023 00:05:30 GMT
Date: Tue, 07 Feb 2023 22:08:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3581
Expires: Tue, 07 Feb 2023 23:08:24 GMT
Date: Tue, 07 Feb 2023 22:08:43 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 21:36:32 GMT
age: 1931
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: B56JKq23z55qji2UEofDI3HqoukGj64yRMHkeYi25V21ljsy8ArSBJQEh6R6vxOSrwEQwnUtWWM=
x-amz-request-id: 7DZ0MGDBRVX6467G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 21:35:40 GMT
age: 1983
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161529
Date: Tue, 07 Feb 2023 22:08:43 GMT
Etag: "63e29fe4-117"
Expires: Thu, 09 Feb 2023 19:00:52 GMT
Last-Modified: Tue, 07 Feb 2023 19:00:52 GMT
Server: nginx
Content-Length: 279

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=161529
Date: Tue, 07 Feb 2023 22:08:43 GMT
Etag: "63e29fe4-117"
Expires: Thu, 09 Feb 2023 19:00:52 GMT
Last-Modified: Tue, 07 Feb 2023 19:00:52 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /th?id=OHR.CodexMountains_EN-US2295216929_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: image/jpeg
                                        
cache-control: public, max-age=691200
content-length: 73647
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 105115988ECA424D83420FB732A0607C Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:43Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size:   73647
Md5:    4ae4572731632c549e32933fff134703
Sha1:   198ccd3f02f4d1fe0eb8a81911e1d5f2b4ccd46b
Sha256: 9af9fc03089bd0128065c3eebf398d446877ff4e19dcbeb2b9815f901d5d569a
                                        
                                            GET /rp/N7tKdYmlODF3joFiKWv51yR3FE4.svg HTTP/1.1 
Host: r.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         95.101.10.122
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 1766
content-md5: lGuNIJUzdVFl1dD+jXlfIg==
last-modified: Wed, 17 Aug 2022 05:49:33 GMT
etag: 0x8DA801442F5D6E9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d4b31ee8-401e-0029-2cdf-fd4941000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: public, no-transform, max-age=221873
expires: Fri, 10 Feb 2023 11:46:36 GMT
date: Tue, 07 Feb 2023 22:08:43 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.760a655f.1675807723.2983b7eb
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1766), with no line terminators
Size:   1766
Md5:    946b8d209533755165d5d0fe8d795f22
Sha1:   37bb4a7589a53831778e8162296bf9d72477144e
Sha256: d9233990059b3f88531f67b1c4725ef4f28f46564ae7e511472f48e2a84f9f1d
                                        
                                            GET /sparkat/a1b2c3/5982cc3a813cc018766e30b83f866fd9/login/? HTTP/1.1 
Host: george-login.buzz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         188.114.96.1
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Tue, 07 Feb 2023 22:08:43 GMT
location: https://www.bing.com
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fbvu%2FshGS5O6c43%2BhjxaLnhALFksFDNm1%2Fj8ZDDqFzV0qRhTW1nbIUMn8JhVst9GhoGYzYnqHkS6Oi9xgA3SUsDZeHtqwGoHCUZMFwgbqupUuTgvEp87FSUbvjMg67nB65MIGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795f72208df91c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   31906
Md5:    4ac953119e486a7e4d6e661c7d4154b2
Sha1:   7b807a4d4e3b388a54e91b83cfb5047f38fdcbea
Sha256: d0f402bfefa3f5c706d33f2ff79f10be402f0d5d57666a2d8fd421cb6af4aa4e

Alerts:
  Blocklists:
    - fortinet: Malware
  IDS:
    - ET INFO HTTP Request to a *.buzz domain
                                        
                                            GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: image/x-icon
                                        
cache-control: public, max-age=15552000
content-length: 4286
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-/7geeYa9AjTqJ6NSFUBbPHMm4kUYG2CkAMAPBU/HAOo='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: EDF22294204142F79D48746C302FE105 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:43Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size:   4286
Md5:    30967b1b52cb6df18a8af8fcc04f83c9
Sha1:   aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
Sha256: 439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
                                        
                                            GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: b9ef9644-001e-00e3-6204-3a15c8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: E2883413BC694A8F902BD57EB89E6815 Ref B: AM3EDGE0615 Ref C: 2023-02-07T07:40:00Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: DE8F79B9C3EE4D998F2E6CCC1313449C Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:43Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17343), with no line terminators
Size:   6683
Md5:    204bb375b5117b07884a137329e07bab
Sha1:   e87cb497b3b6e3c43a8abfa85ff1289e2d842308
Sha256: 030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1
                                        
                                            POST /fd/ls/lsp.aspx? HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 344
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 204 No Content
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6D38AF59222E464BA38885640DCBA6D9 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:43Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:87,%22CT%22:89,%22IL%22:2}}&P=SERP&DA=DUBE01 HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0E4764F22A6C42DFB27D884778B38A18 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:43Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /hp/api/v1/codex?format=json& HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: private
content-length: 601
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 039EED797BE94ABABB434EFB20D92627 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2148), with no line terminators
Size:   601
Md5:    c658b4f79c7ac1605c5cb4019f3cd1c3
Sha1:   0db3159a4ea7e2b90a486d1b6f4f01ad70bc1272
Sha256: 6cf73a2ce08b13aba14a2b5576aee3f0a84d4c560a4e2145d5b3f43a4d548756
                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1024%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775757%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 661AAB6C1A864537B51376374A8C55CD Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1024%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775758%2C%22Name%22%3A%22Importing%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 476AF8C51C0B4BC2BBFA9CA8BB06E7A9 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1024%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775758%2C%22Name%22%3A%22requested%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1A3B58E518F84AEAACD58FB2DE2DE7B0 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /vs/ec/start.mp3 HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
cache-control: public, max-age=15552000
content-length: 31561
content-range: bytes 0-31560/31561
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-28pEwDovvjLPWtFUmeF2jmd4M/p77uqZHZaDyxU7260='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: B2A38AA65B7C402AAB06D7E9086ABF20 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Size:   31561
Md5:    f139839a0b2291e7e31f2589454e470f
Sha1:   754ac75088a1b1c586acbe6751e52a1835a4e428
Sha256: a8b226c9281cae3e162006c9d509f5bfc649724876ca81a95a48e7f1fa9886ef
                                        
                                            GET /vs/ec/stop.mp3 HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
cache-control: public, max-age=15552000
content-length: 35386
content-range: bytes 0-35385/35386
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-CH6pKNDh2lOR196nQDUQsTfHkrR/tcNt+izzlF5T5A4='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
x-msedge-ref: Ref A: 3AE662FB28BE4615903C9740CDDF24A5 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Size:   35386
Md5:    475028300cc8c44e7a4db97079bfca2b
Sha1:   09b8d7346324c456fcea95fa4826fc94686ce52c
Sha256: 45c8123c99a15aef1762667d2fbc2de1937449d20610023a21e47b313e3b7ee4
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 21:51:19 GMT
age: 1045
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775817%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 68E8CB852E41481D8E67B93B8AFBD542 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775816%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E90E8FC4FF8847F1B865AF0DE73A85D4 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D41422ECA32FA4150A62F9230A3E25D9F%26%22%2C%22format%22%3A%22dom%22%2C%22status%22%3A200%2C%22time%22%3A1083%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775817%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0D6BE4D4ADD74A7C842B45E0A15765B4 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /hp/api/v1/msnpopularnow?&format=json&ecount=20&efirst=0&& HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Content-type: application/json
Connection: keep-alive
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: private
content-length: 2887
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1EFA2237F0254393A4E55766ADB670AD Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (13701), with no line terminators
Size:   2887
Md5:    d8973d0f00ed5f87324cb6bda870cea0
Sha1:   53dfa2c7e4281c584b31a7c98398c6d1d2eba290
Sha256: 12aa5f664a326647c7044eeb4b09817f7f28a2b5076203746b26eed672fcc59d
                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fmodel%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1126%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775860%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2DCF216692B342B1A229C4068E7EA805 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fcodex%3Fformat%3Djson%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1124%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775858%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DACE6A27C0574ACC870B86E520EA16D5 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fimages%2Fsbi%3Fmmasync%3D1%26ptn%3DHomepage%26IID%3DSBI%26IG%3D41422ECA32FA4150A62F9230A3E25D9F%26%22%2C%22format%22%3A%22dom%22%2C%22time%22%3A1194%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775926%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4347E4F0AD9F4EDD83B0ED0D9FD182BB Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22status%22%3A200%2C%22time%22%3A1198%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775930%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5F5A53D5187D4A91B17C5ED1347180A2 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22useFetch%22%2C%22url%22%3A%22%2Fhp%2Fapi%2Fv1%2Fmsnpopularnow%3F%26format%3Djson%26ecount%3D20%26efirst%3D0%26%26%22%2C%22format%22%3A%22json%22%2C%22time%22%3A1199%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775932%2C%22Name%22%3A%22parsed%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 970B73168921444A927FCB1976CC15AE Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6709
Expires: Wed, 08 Feb 2023 00:00:33 GMT
Date: Tue, 07 Feb 2023 22:08:44 GMT
Connection: keep-alive

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22func%22%3A%22carousel%22%2C%22count%22%3A1%2C%22time%22%3A1240%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807775973%2C%22Name%22%3A%22fetched%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 52508D6A649140F1911F7DB432FB84BE Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:43 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22Count%22%3A18%2C%22time%22%3A1246%2C%22T%22%3A%22CI.Show%22%2C%22TS%22%3A1675807775978%2C%22Name%22%3A%22ProactiveTrendingNowTiles%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 25AF0E739AA948459DE70268AFA318EB Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /notifications/render?bnptrigger=%7B%22PartnerId%22%3A%22HomePage%22%2C%22IID%22%3A%22Bnp%22%2C%22Attributes%22%3A%7B%22RawRequestURL%22%3A%22%2F%22%7D%7D&IG=41422ECA32FA4150A62F9230A3E25D9F&IID=Bnp HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-length: 8637
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 411A57BCE25048D4A149871C18DF5E11 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 text, with very long lines (13622)
Size:   8637
Md5:    965f47c3f6fd5f9f42426e1c56e59f85
Sha1:   7b87aa60cd139bf97ebc2f487c22e6cfc40bdc55
Sha256: 26903349a6cbbd5614aa75837c6d8f2496ddeb3107f957c9e9a460e8760a0ce1
                                        
                                            GET /bundles/v1/bingHomepage/latest/widget-initializer.js HTTP/1.1 
Host: assets.msn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Origin: https://www.bing.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.101.10.192
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 4555
content-md5: 7+/7TtpAsW44ZYFwwjW1ow==
last-modified: Thu, 02 Feb 2023 23:27:13 GMT
etag: 0x8DB057503C0C11B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 03055453-201e-0008-525e-377614000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Tue, 07 Feb 2023 22:08:44 GMT
akamai-request-bc: [a=95.101.10.188,b=215038952,c=g,n=NO__OSLO,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=1, origin; dur=0 , cdntime; dur=1
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.10.188
akamai-request-id: cd13be8
access-control-allow-credentials: true
access-control-allow-origin: https://www.bing.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=86400
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13100)
Size:   4555
Md5:    efeffb4eda40b16e38658170c235b5a3
Sha1:   e078e0d6863751d2a6701ca0330c9d12ca1df7f9
Sha256: 2da59d63f7bf73a152fb1d90b28ce1b92dac8e30c61b832cd085e6a7b4a452b9
                                        
                                            GET /rp/tfpoqzYv42r7UjQvzw0PVIoT2nY.png HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8244
content-md5: g8mvGI2up1lxQ38/Z9qgXw==
last-modified: Tue, 24 Jan 2023 20:16:32 GMT
etag: 0x8DAFE47E28F035A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 57ca4fdd-d01e-00df-7502-3a3c0f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 2E8F1113FB324A478A520B9CAE2F280E Ref B: AM3EDGE0713 Ref C: 2023-02-07T07:53:50Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: CEF6F8F838B447C4A62777024A852AC1 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 842 x 92, 8-bit colormap, non-interlaced\012- data
Size:   8244
Md5:    83c9af188daea75971437f3f67daa05f
Sha1:   b5fa68ab362fe36afb52342fcf0d0f548a13da76
Sha256: 96054ad091360d568c6d01633833ac8988981696e14b1ec230e96a2457884990
                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.Info%22%2C%22TS%22%3A1675807776124%2C%22Name%22%3A%22OverlayBanner%22%2C%22FID%22%3A%22Mcp%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675807776124%2C%22Name%22%3A%22bnp.notif.shown%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22T%22%3A%22CI.BNP%22%2C%22TS%22%3A1675807776136%2C%22Name%22%3A%22bnp.embed.ready%22%2C%22FID%22%3A%2263249%22%7D%2C%7B%22ID%22%3A%2263249%22%2C%22T%22%3A%22CI.BNPUxAssetIndex%22%2C%22TS%22%3A1675807776136%2C%22Name%22%3A0%2C%22FID%22%3A%22BNP%22%7D%2C%7B%22func%22%3A%22useDynamicModules%22%2C%22module%22%3A%22https%3A%2F%2Fassets.msn.com%2Fbundles%2Fv1%2FbingHomepage%2Flatest%2Fwidget-initializer.js%22%2C%22error%22%3A%22%22%2C%22time%22%3A1446%2C%22T%22%3A%22CI.Data%22%2C%22TS%22%3A1675807776180%2C%22Name%22%3A%22Imported%22%2C%22FID%22%3A%22HP%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 40C3DA8A042946679917BBD3007AEA28 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST /rewardsapp/ncheader?ver=33965297&IID=SERP.5019&IG=41422ECA32FA4150A62F9230A3E25D9F HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 135
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DB1B1A96BD3D4B9CA6E3B7F2699B9503 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   135
Md5:    220681134a8094ce652f9fe8016037a5
Sha1:   a771c8027c266aded9f60f97965d2f9bf4f67af8
Sha256: 8af854ff412f28bd161367c8e5b1a5469e03363a5ad11c14634b6abc38388b9e
                                        
                                            POST /rewardsapp/reportActivity?IG=41422ECA32FA4150A62F9230A3E25D9F&IID=SERP.5028&&src=hp HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-length: 611
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly _RwBf=ilt=5&ihpd=5&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=5&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:08:44.8057205+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; domain=.bing.com; expires=Wed, 07-Feb-2024 22:08:44 GMT; path=/; secure; SameSite=None _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59&R=0&RB=0&GB=0&RG=200&RP=0; domain=.bing.com; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B684BA256024469996E9FFD6EB0553A0 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1266)
Size:   611
Md5:    78086836bf7a2d365f5603bab871ca81
Sha1:   18f4b4cc2ee4dad8d95a2c182b1d870f183d69a6
Sha256: aa37df491e929eaa263f7f86949a53eb249f94648807e65f6bc5a21e3e2713a8
                                        
                                            GET /ipv6test/test?FORM=MONITR HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59; ipv6=hit=1675811376314
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9823F7932CC8438BA0B2FEAAA2552539 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   64
Md5:    1bf1ff302246bc930c733c405f985472
Sha1:   de1fb6765de8bd2d9d98507705e24d51d2bd335c
Sha256: c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
                                        
                                            GET /ipv6test/test HTTP/1.1 
Host: www2.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404471&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=4&ihpd=4&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:07:52.9126003+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59; ipv6=hit=1675811376314
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-length: 64
content-encoding: br
expires: -1
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
access-control-allow-origin: https://www.bing.com
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6194EBF616E94FA982DD24909CF9593F Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   64
Md5:    1bf1ff302246bc930c733c405f985472
Sha1:   de1fb6765de8bd2d9d98507705e24d51d2bd335c
Sha256: c312aec426076b101ce2fadef09fc64b81aa601ba9bde94e4ad24ac737e715a8
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QoK4IZbnqyCD2gTx1YlPAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.149.38.208
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hpJo0s9mxL/JiQO5QdnrWw5sNr4=

                                        
                                            GET /fd/ls/l?IG=41422ECA32FA4150A62F9230A3E25D9F&TYPE=Event.ClientInst&DATA=%5B%7B%22T%22%3A%22CI.ClientInst%22%2C%22TS%22%3A1675807776237%2C%22Name%22%3A%22OrgId%22%2C%22FID%22%3A%22NoSignInAttempt%22%7D%2C%7B%22correlationId%22%3A%2263e2cbeb4268468fb8d14bce893b1152%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675807776255%2C%22Name%22%3A%22loadJsModule%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22correlationId%22%3A%2263e2cbeb4268468fb8d14bce893b1152%22%2C%22T%22%3A%22CI.acclink%22%2C%22TS%22%3A1675807776255%2C%22Name%22%3A%22undirectflow%22%2C%22FID%22%3A%22init%22%7D%2C%7B%22Fallback%22%3A%221%22%2C%22ShowAnimation%22%3A%22%22%2C%22RedDotAnimation%22%3A%22true%22%2C%22FID%22%3A%22ModernRewardsFlyout%22%2C%22EventName%22%3A%22AnimationLoad%22%2C%22T%22%3A%22CI.Load%22%2C%22TS%22%3A1675807776359%2C%22Name%22%3A%22AnimationLoad%22%7D%5D HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404523&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=5&ihpd=5&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=5&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:08:44.8057205+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675811376314
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BBA15172233A4EECBF5BDCCBBC0C71CE Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=77db9821-8c5f-4eb1-a86d-3b8eb83b3186&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2241422ECA32FA4150A62F9230A3E25D9F%22%7d HTTP/1.1 
Host: login.microsoftonline.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: brcap=0; MSFPC=GUID=27491a5fca0c436896bdbf20a1588da0&HASH=2749&LV=202205&V=4&LU=1652883922743; ESTSSSOTILES=1; AADSSOTILES=1; buid=0.ASEAMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrW0yqYZe5WrMhQhTgYmzlW2bNNRJ7rPNSXZhZq2CKaDIxeUxgcecIjozKXYCqudEsSPJHTz92z2wL0QqsYj3ToGd2OP2CUfd2WTF2e-4VDWMgAA; fpc=AswUDHSR5ZJPmXHJo1XrG9qCeMQLBAAAABLCdNsOAAAA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         20.190.159.19
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 4287af34-693b-483c-8f49-9c3114719000
x-ms-ests-server: 2.1.14526.6 - WEULR1 ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.ASEAMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrGb4jjHjkAlmXuzvj4yH7xj-iid-UTmzEXVF2_PkDDuyhHOd5Zyx5_MORQ_G-aonm-sp0tWINE_C9D_5WwmVdBNPY9LeibkmBAkOkJWHsTqAgAA; expires=Thu, 09-Mar-2023 22:08:44 GMT; path=/; secure; HttpOnly; SameSite=None fpc=AswUDHSR5ZJPmXHJo1XrG9qCeMQLBQAAABLCdNsOAAAA; expires=Thu, 09-Mar-2023 22:08:44 GMT; path=/; secure; HttpOnly; SameSite=None esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrT52afuICKAw4GTypezuv8DeuEGqpW7Y6iLgAcMOrgLy8qplnS91ROH4-VJ1x6OslG8nJqZt1QvQNBixG0lW-nM6jnRpiPsQqBzcD_HmqB3MeCN7oUB1qeAzmW3dXmqO3-WlG06zn0Qws3sQjCCM4fkIFoC2zr5SUOW5FfZcdStcgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 07 Feb 2023 22:08:44 GMT
Content-Length: 679


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (627), with CRLF line terminators
Size:   679
Md5:    05bcbded5c8361c13d7ebf20e5901962
Sha1:   ad46b625ba816460bd5c6a668110d4ec2ca3b4f8
Sha256: 0622533c03e9158de20c1e993b8cfab78754efe4a662a1b1af9d1ca46d59269e
                                        
                                            POST /orgid/idtoken/conditional HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.microsoftonline.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 708
Origin: https://login.microsoftonline.com
Connection: keep-alive
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404523&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=5&ihpd=5&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=5&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:08:44.8057205+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1FCBE35D12B36A9810CCF1EC13466B59; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675811376314&t=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html
                                        
cache-control: private
content-length: 1
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:44 GMT; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: ED4511A5E54E4A828D422E7B5D9CF495 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:44Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /login.srf?wa=wsignin1.0&rpsnv=11&ct=1675807724&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1044&id=264960&checkda=1 HTTP/1.1 
Host: login.live.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         40.126.32.137
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-store, no-cache
Pragma: no-cache
Expires: Tue, 07 Feb 2023 22:07:45 GMT
Location: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: R3_BL2
x-ms-request-id: 17fa9dfa-a889-478e-bf3a-2c7fdddeb270
PPServer: PPV: 30 H: BL02PF1421AFBF9 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=1dbd12b05b16451eae1feefea1a36f87; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly MSPRequ=id=264960&lt=1675807725&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Tue, 07 Feb 2023 22:08:44 GMT
Content-Length: 0

                                        
                                            GET /secure/Passport.aspx?popup=1&ssl=1 HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bing.com/
Connection: keep-alive
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404523&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=5&ihpd=5&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=5&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:08:44.8057205+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675811376314&t=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         204.79.197.200
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: private
content-length: 184
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=275D0BDD04DC6A571790196C05296B93; expires=Sun, 03-Mar-2024 22:08:45 GMT; path=/; HttpOnly _EDGE_S=SID=1D2B6CCFD76B6C0632477E7ED69E6D8A; domain=.bing.com; path=/; HttpOnly
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 03035F3B0D6E44F6B99516D5617330D6 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:45Z
date: Tue, 07 Feb 2023 22:08:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   184
Md5:    c692cf35c4d3ad00b5a49bdf3cd2363c
Sha1:   eb9c1fb3345378800f697c7c92519c5188dd9f5a
Sha256: fa404c029e5e3109f687ed6e12018f34e43ecb2ef8991172af7bd9fc220562fe
                                        
                                            POST /fd/ls/lsp.aspx HTTP/1.1 
Host: www.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/xml
Content-Length: 10285
Origin: https://www.bing.com
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=275D0BDD04DC6A571790196C05296B93; MUIDB=275D0BDD04DC6A571790196C05296B93; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C42001DB431A48AC8E5AF6563E5DF4C6&dmnchg=1; SRCHUSR=DOB=20230207&T=1675807505000; SRCHHPGUSR=SRCHLANG=en&BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&DPR=1.0&UTC=0&DM=0&WTS=63811404523&HV=1675807732; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMi0wN1QwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=5&ihpd=5&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=5&l=2023-02-07T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-02-07T22:08:44.8057205+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; _EDGE_S=SID=1D2B6CCFD76B6C0632477E7ED69E6D8A; _SS=SID=1FCBE35D12B36A9810CCF1EC13466B59&R=0&RB=0&GB=0&RG=200&RP=0; ipv6=hit=1675811376314&t=4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         204.79.197.200
HTTP/2 204 No Content
                                        
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D5734B72BA494CCC984F9B838C8B0463 Ref B: OSL30EDGE0116 Ref C: 2023-02-07T22:08:45Z
date: Tue, 07 Feb 2023 22:08:45 GMT
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10254
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 22:08:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10254
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 22:08:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10254
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 22:08:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10254
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 22:08:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10254
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 22:08:46 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308abacb-8d5b-49bf-9e2b-59b6b40157cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12772
x-amzn-requestid: a4603c5c-c842-4a1d-bf09-550f160e1082
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7OEz8oAMFbOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-763b7ecf50411a4d13dd8a25;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ECAdRS7as57pL15HxK4Ep0YOho8Kba8RFhMVnXGdJuKYItQHNf2yHA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:53:57 GMT
age: 889
etag: "f222976d76d889a0cd767bfd73075ee114c531ce"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12772
Md5:    2bf626b824fefec1ecaceb9243f2e5ec
Sha1:   f222976d76d889a0cd767bfd73075ee114c531ce
Sha256: 3f981850c6e6628245be7f7e26418d8b945dbeaf45e06492d8e2ee9409245195
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 07:15:46 GMT
age: 53580
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13160
Md5:    003fc35e140a75a12b7795c3986426ec
Sha1:   da002b22e2a01f48a545b369d4403eabb17a10d5
Sha256: bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7847
x-amzn-requestid: 60759e32-ac58-4dda-8ea3-fd80413c0deb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkkEpMoAMFnGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c483-61b8715a0da73f4526215649;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TCX7ZFhV73kN0UBshXeb0qdSkY-8qdeNN6EgioqOUmSAnraEhAohMQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:11 GMT
age: 1595
etag: "eb0a900843beac5c4ee46686b89b3e8b8d77f80f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7847
Md5:    5129898de057eb92808f18d120eb7a70
Sha1:   eb0a900843beac5c4ee46686b89b3e8b8d77f80f
Sha256: 7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92b2ed55-154e-4ed7-a7ab-1418742cdf6e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7303
x-amzn-requestid: 081c79e9-2b23-47ad-8b7d-7197c5515c0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f58kdHMvIAMFdzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a7b5-66fca524070e374310920915;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:09:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CV8Q0EwlleoBURF3IvwUGDm_ANrg_SINlUR3cl6OhqySJPejP6T0hg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 07:41:21 GMT
age: 52045
etag: "e1537aa408cde39d2a314cc2a14f7f7a04a84eb1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7303
Md5:    7543be9bef0afb8f61344286b7136dd7
Sha1:   e1537aa408cde39d2a314cc2a14f7f7a04a84eb1
Sha256: 162f0898f88d84c8d06542e48e8ff6a903e638f2a837f32681ae1f5e28ae40d7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a39697d-4bed-4ebe-970d-d9950958f814.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13714
x-amzn-requestid: 8f776dba-4e5d-46e5-a3ac-459d86852375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PFjGNHIAMFrMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c556-74429dc755cc37672c68b58b;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Cf-MbK2WIFs3foM-_Ou5OUg7IS8ovfw-dHJnIpVUvpeAbMi-TeC5SA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:54:34 GMT
etag: "385fa88a857ba301f37ab56d72d11fb49abd8c6b"
age: 852
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13714
Md5:    5de2fe3c9a2b091689a7213c4f781446
Sha1:   385fa88a857ba301f37ab56d72d11fb49abd8c6b
Sha256: b64b11a68493fa304aa6102bf9b9ff11fab5e1536ecf768e4b0fa51470ae2293
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6838
x-amzn-requestid: 54fc5ae9-d37a-46cf-97e0-d05de1417cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7QEsCoAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-40de6212468fcd0e78a93708;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mgfr5wO7Bj5BVjKYY7O0c4ogLognfq09QrA9khZROr2CVyOWgKTz1g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:53:56 GMT
age: 890
etag: "771070be61d0724b1c90ca86ea34c804bd7e501a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6838
Md5:    4b327816bc2c6fd7291c75c693685d54
Sha1:   771070be61d0724b1c90ca86ea34c804bd7e501a
Sha256: d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983