Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    300s
  • max time network
    310s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2023, 16:30 UTC

General

  • Target

    http://h

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" http://h
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff81b734f50,0x7ff81b734f60,0x7ff81b734f70
      2⤵
        PID:2300
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1572 /prefetch:2
        2⤵
          PID:2496
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1988 /prefetch:8
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:628
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2284 /prefetch:8
          2⤵
            PID:3392
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2860 /prefetch:1
            2⤵
              PID:4264
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2868 /prefetch:1
              2⤵
                PID:3636
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4204 /prefetch:8
                2⤵
                  PID:1712
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1564,10664658744681711780,12160778574284723407,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
                  2⤵
                    PID:676
                • C:\Windows\System32\CompPkgSrv.exe
                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                  1⤵
                    PID:3564
                  • C:\Windows\system32\mstsc.exe
                    "C:\Windows\system32\mstsc.exe"
                    1⤵
                    • Enumerates connected drives
                    • Checks SCSI registry key(s)
                    • Suspicious behavior: AddClipboardFormatListener
                    • Suspicious behavior: GetForegroundWindowSpam
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SetWindowsHookEx
                    PID:4136
                  • C:\Windows\System32\CredentialUIBroker.exe
                    "C:\Windows\System32\CredentialUIBroker.exe" NonAppContainerFailedMip -Embedding
                    1⤵
                    • Suspicious use of SetWindowsHookEx
                    PID:1256
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                    1⤵
                      PID:3124
                    • C:\Windows\system32\AUDIODG.EXE
                      C:\Windows\system32\AUDIODG.EXE 0x150 0x2f8
                      1⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:2840

                    Network

                    • flag-us
                      DNS
                      accounts.google.com
                      chrome.exe
                      Remote address:
                      8.8.8.8:53
                      Request
                      accounts.google.com
                      IN A
                      Response
                      accounts.google.com
                      IN A
                      142.251.36.45
                    • flag-us
                      DNS
                      clients2.google.com
                      chrome.exe
                      Remote address:
                      8.8.8.8:53
                      Request
                      clients2.google.com
                      IN A
                      Response
                      clients2.google.com
                      IN CNAME
                      clients.l.google.com
                      clients.l.google.com
                      IN A
                      172.217.168.238
                    • flag-nl
                      GET
                      https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=89.0.4389.114&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1
                      chrome.exe
                      Remote address:
                      172.217.168.238:443
                      Request
                      GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=89.0.4389.114&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1 HTTP/2.0
                      host: clients2.google.com
                      x-goog-update-interactivity: fg
                      x-goog-update-appid: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm
                      x-goog-update-updater: chromecrx-89.0.4389.114
                      sec-fetch-site: none
                      sec-fetch-mode: no-cors
                      sec-fetch-dest: empty
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
                      accept-encoding: gzip, deflate, br
                      accept-language: en-US,en;q=0.9
                    • flag-nl
                      POST
                      https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
                      chrome.exe
                      Remote address:
                      142.251.36.45:443
                      Request
                      POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/2.0
                      host: accounts.google.com
                      content-length: 1
                      origin: https://www.google.com
                      content-type: application/x-www-form-urlencoded
                      sec-fetch-site: none
                      sec-fetch-mode: no-cors
                      sec-fetch-dest: empty
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
                      accept-encoding: gzip, deflate, br
                      accept-language: en-US,en;q=0.9
                    • flag-us
                      DNS
                      edgedl.me.gvt1.com
                      chrome.exe
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgedl.me.gvt1.com
                      IN A
                      Response
                      edgedl.me.gvt1.com
                      IN A
                      34.104.35.123
                    • flag-us
                      GET
                      http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx
                      chrome.exe
                      Remote address:
                      34.104.35.123:80
                      Request
                      GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx HTTP/1.1
                      Host: edgedl.me.gvt1.com
                      Connection: keep-alive
                      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
                      Accept-Encoding: gzip, deflate
                      Accept-Language: en-US,en;q=0.9
                      Response
                      HTTP/1.1 200 OK
                      accept-ranges: bytes
                      content-disposition: attachment
                      content-length: 248531
                      content-security-policy: default-src 'none'
                      server: Google-Edge-Cache
                      x-content-type-options: nosniff
                      x-frame-options: SAMEORIGIN
                      x-xss-protection: 0
                      x-request-id: 959874ac-1381-4218-8549-02f75d0411d9
                      date: Sat, 11 Feb 2023 19:52:40 GMT
                      age: 74291
                      last-modified: Fri, 25 Feb 2022 22:08:36 GMT
                      etag: "c994e6"
                      content-type: application/x-chrome-extension
                      alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
                      cache-control: public,max-age=86400
                    • flag-us
                      DNS
                      dns.google
                      chrome.exe
                      Remote address:
                      8.8.8.8:53
                      Request
                      dns.google
                      IN A
                      Response
                      dns.google
                      IN A
                      8.8.4.4
                      dns.google
                      IN A
                      8.8.8.8
                    • flag-us
                      GET
                      https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
                      chrome.exe
                      Remote address:
                      8.8.4.4:443
                      Request
                      GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
                      host: dns.google
                      accept: application/dns-message
                      accept-language: *
                      user-agent: Chrome
                      accept-encoding: identity
                    • flag-us
                      GET
                      https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
                      chrome.exe
                      Remote address:
                      8.8.4.4:443
                      Request
                      GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
                      host: dns.google
                      accept: application/dns-message
                      accept-language: *
                      user-agent: Chrome
                      accept-encoding: identity
                    • flag-us
                      DNS
                      google.com
                      chrome.exe
                      Remote address:
                      8.8.8.8:53
                      Request
                      google.com
                      IN A
                      Response
                      google.com
                      IN A
                      142.250.179.142
                    • flag-us
                      DNS
                      google.com
                      chrome.exe
                      Remote address:
                      8.8.8.8:53
                      Request
                      google.com
                      IN A
                      Response
                      google.com
                      IN A
                      142.250.179.142
                    • flag-us
                      DNS
                      r.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      r.bing.com
                      IN A
                      Response
                      r.bing.com
                      IN CNAME
                      p-static.bing.trafficmanager.net
                      p-static.bing.trafficmanager.net
                      IN CNAME
                      r.bing.com.edgekey.net
                      r.bing.com.edgekey.net
                      IN CNAME
                      e86303.dscd.akamaiedge.net
                      e86303.dscd.akamaiedge.net
                      IN A
                      2.16.165.131
                      e86303.dscd.akamaiedge.net
                      IN A
                      2.16.165.122
                      e86303.dscd.akamaiedge.net
                      IN A
                      2.16.165.155
                    • flag-fr
                      GET
                      https://r.bing.com/rb/1a/cir2,ortl,cc,nc/n7LMSoHYYIBGa1VPMlnTzxBvlfA.css?bu=B4sCQfkBfFhYlwI&or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rb/1a/cir2,ortl,cc,nc/n7LMSoHYYIBGa1VPMlnTzxBvlfA.css?bu=B4sCQfkBfFhYlwI&or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223056; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE
                      Response
                      HTTP/2.0 200
                      last-modified: Fri, 03 Feb 2023 01:53:39 GMT
                      content-length: 1591
                      content-type: text/css; charset=utf-8
                      server: Kestrel
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006CC6
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: private, max-age=17876
                      expires: Sun, 12 Feb 2023 21:29:01 GMT
                      date: Sun, 12 Feb 2023 16:31:05 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219465.8b11fb
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rb/1a/cir2,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C5EH4gLaA-4H2wbIBoMFWFhYWA&or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rb/1a/cir2,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C5EH4gLaA-4H2wbIBoMFWFhYWA&or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      last-modified: Fri, 18 Nov 2022 01:56:44 GMT
                      content-length: 4826
                      content-type: text/css; charset=utf-8
                      server: Kestrel
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006AF6
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: public, max-age=50071
                      expires: Mon, 13 Feb 2023 06:25:38 GMT
                      date: Sun, 12 Feb 2023 16:31:07 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219467.8b1851
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rb/48/ortl,cc,nc/8yOt-qMgl3wFFpnXBbdaeUrdWpM.css?bu=A4gCjAKPAg&or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rb/48/ortl,cc,nc/8yOt-qMgl3wFFpnXBbdaeUrdWpM.css?bu=A4gCjAKPAg&or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      server: Kestrel
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006A99
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      content-length: 3513
                      content-type: text/css; charset=utf-8
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      last-modified: Fri, 13 Aug 2010 13:59:06 GMT
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: private, max-age=29994
                      expires: Mon, 13 Feb 2023 00:51:06 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b291a
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rb/6W/cir2,ortl,cc,nc/0pwpq13DOFcrPJTODQ6nAA9iIh4.css?bu=GNUH0gfnB5II3gfbB8wHjAjqB-0H8AfMB8wH9gfMB_4HhwiBCMwHzAfMB5UIzAfDCA&or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rb/6W/cir2,ortl,cc,nc/0pwpq13DOFcrPJTODQ6nAA9iIh4.css?bu=GNUH0gfnB5II3gfbB8wHjAjqB-0H8AfMB8wH9gfMB_4HhwiBCMwHzAfMB5UIzAfDCA&or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 37458
                      content-type: text/css; charset=utf-8
                      server: Kestrel
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      last-modified: Thu, 26 Jan 2023 17:19:35 GMT
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006E80
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: public, max-age=153741
                      expires: Tue, 14 Feb 2023 11:13:33 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2976
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rb/6W/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=AcwH&or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rb/6W/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=AcwH&or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 10
                      content-type: text/css; charset=utf-8
                      server: Kestrel
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      last-modified: Tue, 16 Aug 2022 22:55:52 GMT
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006E9C
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: public, max-age=152485
                      expires: Tue, 14 Feb 2023 10:52:37 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2991
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rp/01qAHnoKVsYCw2MCbu8M0CLkEkU.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/01qAHnoKVsYCw2MCbu8M0CLkEkU.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 43428
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: jflB+Gb2+fSUdB4F0kOr5A==
                      last-modified: Wed, 30 Nov 2022 11:32:39 GMT
                      etag: 0x8DAD2C696ADEBA6
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 81055506-e01e-007d-770e-380616000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=95021
                      expires: Mon, 13 Feb 2023 18:54:53 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b29a9
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/12Gc-7xQcrCUsNZSOTiwRrGAmbs.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/12Gc-7xQcrCUsNZSOTiwRrGAmbs.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 11082
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: GoWiiBoFGazJZxoJkyja+w==
                      last-modified: Mon, 30 Jan 2023 23:26:25 GMT
                      etag: 0x8DB031967EC274A
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: c02add6a-f01e-0003-2926-399651000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=181465
                      expires: Tue, 14 Feb 2023 18:55:37 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b29b6
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/1GU2fDqtk5zazcAxF50Lxmn7Swk.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/1GU2fDqtk5zazcAxF50Lxmn7Swk.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 651
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: UgPHy6vFsomjwwgTwCwZaQ==
                      last-modified: Thu, 01 Dec 2022 01:48:35 GMT
                      etag: 0x8DAD33E28F466F5
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 73751f12-401e-0006-63de-3a448a000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=409484
                      expires: Fri, 17 Feb 2023 10:15:56 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b29cc
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/4BpQ1bD8vX1mXuJObN-gg9RqkyQ.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/4BpQ1bD8vX1mXuJObN-gg9RqkyQ.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 541
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: 4wvhjkt4QEb4ZXrgU/selA==
                      last-modified: Thu, 01 Dec 2022 01:48:38 GMT
                      etag: 0x8DAD33E2A7FB258
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 34537ce5-101e-0079-33af-378b11000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=51434
                      expires: Mon, 13 Feb 2023 06:48:26 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b29e9
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/584482RVjBIoEvVSe0RsuS1I4YQ.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/584482RVjBIoEvVSe0RsuS1I4YQ.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 16432
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: CKTItbjaEI81XpLdlZlnKw==
                      last-modified: Thu, 01 Dec 2022 01:48:42 GMT
                      etag: 0x8DAD33E2D08E99E
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 6976d52e-501e-009c-4cd4-36da53000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=315243
                      expires: Thu, 16 Feb 2023 08:05:15 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b29fe
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/5uP6UDb3J4aBSvx2rvD1bfZtXg8.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/5uP6UDb3J4aBSvx2rvD1bfZtXg8.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 16541
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: QTd1kb9RHNmQaLBVdMZbhw==
                      last-modified: Thu, 09 Feb 2023 03:27:24 GMT
                      etag: 0x8DB0A4D90033EA2
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 2927db1a-101e-0079-8074-3c8b11000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=152396
                      expires: Tue, 14 Feb 2023 10:51:08 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2a09
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/9NAKqY_tlD66IpqKerRN4qs4P0c.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/9NAKqY_tlD66IpqKerRN4qs4P0c.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 947
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: /t9LY+8gwefUYzsdDxj/eg==
                      last-modified: Thu, 01 Dec 2022 01:48:34 GMT
                      etag: 0x8DAD33E2884C4A4
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 1f85c71d-c01e-00a1-3195-39ac48000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=228168
                      expires: Wed, 15 Feb 2023 07:54:00 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2a1e
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/9RLIrLi3GlOL2Eylg9IcArIkw20.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/9RLIrLi3GlOL2Eylg9IcArIkw20.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 3050
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: pGTdsel9tBGU2h82wqLR0g==
                      last-modified: Thu, 15 Sep 2022 21:37:20 GMT
                      etag: 0x8DA976277E1BAB3
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: ba2921f8-a01e-0098-30df-385754000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=149509
                      expires: Tue, 14 Feb 2023 10:03:01 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2a2e
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/9wko70-6h4SrSkW1S6kxEXdyAh4.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/9wko70-6h4SrSkW1S6kxEXdyAh4.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: 57MXNPtPqV9hrnMNmwE20Q==
                      last-modified: Tue, 10 Jan 2023 11:48:46 GMT
                      etag: 0x8DAF300A1913F93
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 148c488e-f01e-002c-2335-259b9a000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 12714
                      cache-control: public, no-transform, max-age=50563
                      expires: Mon, 13 Feb 2023 06:33:55 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2a4d
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/BRvVt6WvGqoJAGsLlNVw1BxlJzY.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/BRvVt6WvGqoJAGsLlNVw1BxlJzY.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 1634
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: jNl5BD0VK9bCF8je5rl4gw==
                      last-modified: Thu, 01 Dec 2022 01:48:36 GMT
                      etag: 0x8DAD33E297A9B6B
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: d5c6ca37-a01e-001e-1b03-389bed000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=55214
                      expires: Mon, 13 Feb 2023 07:51:26 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2a61
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/C7Wu5lXiGKMgWLBcPrLiDXEIyQM.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/C7Wu5lXiGKMgWLBcPrLiDXEIyQM.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: XnVLVT4Hqw76l1oeNSd3fg==
                      last-modified: Thu, 01 Dec 2022 01:48:34 GMT
                      etag: 0x8DAD33E2849BF9C
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: eecd988f-101e-000b-0413-2b8c5e000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 4398
                      cache-control: public, no-transform, max-age=236584
                      expires: Wed, 15 Feb 2023 10:14:16 GMT
                      date: Sun, 12 Feb 2023 16:31:12 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219472.8b2a75
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/Cj4mQnDN_eMyYEqsEbjRrJ2Ttec.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/Cj4mQnDN_eMyYEqsEbjRrJ2Ttec.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 5
                      content-type: application/x-javascript; charset=utf-8
                      content-encoding: br
                      content-md5: 3WhJ+OYKE/V46pTyaMnODg==
                      last-modified: Wed, 24 Jun 2020 05:06:01 GMT
                      etag: 0x8D817FC4A10933C
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: caabdcab-501e-001a-363a-3516ea000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, max-age=139553
                      expires: Tue, 14 Feb 2023 07:17:06 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2a88
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/DccpWCpoNzCwM4Qymi_Ji67Ilso.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/DccpWCpoNzCwM4Qymi_Ji67Ilso.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: Qcek/07O5xPJMuUpNLcJzA==
                      last-modified: Thu, 15 Sep 2022 21:37:19 GMT
                      etag: 0x8DA976277B16243
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: e3e27ac7-901e-00ac-0204-2c649c000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 42348
                      cache-control: public, no-transform, max-age=49933
                      expires: Mon, 13 Feb 2023 06:23:26 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2aa1
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/EYNLM9RfkEXFtD8WH1unvJjwzGA.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/EYNLM9RfkEXFtD8WH1unvJjwzGA.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 5229
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: J1h2pj4XAiVeS1B4uGamZw==
                      last-modified: Thu, 15 Sep 2022 21:37:05 GMT
                      etag: 0x8DA97626F43FDE1
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 70948a7c-c01e-0027-6a08-3860f1000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=63324
                      expires: Mon, 13 Feb 2023 10:06:37 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2acb
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/LisgCZCwGQ4lRz4go9tlwPslw_k.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/LisgCZCwGQ4lRz4go9tlwPslw_k.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 7149
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: MTAcoXdJC0nqAUaGgqFhMw==
                      last-modified: Thu, 15 Sep 2022 21:37:54 GMT
                      etag: 0x8DA97628C24C6F5
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: f55c3493-601e-0087-05ae-37e450000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=52028
                      expires: Mon, 13 Feb 2023 06:58:21 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2adc
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/MDYUJRTM7duLZNg57v31JGIvwis.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/MDYUJRTM7duLZNg57v31JGIvwis.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 8516
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: 6kWKSsWH9eJaVgioytNZiQ==
                      last-modified: Tue, 13 Dec 2022 09:38:18 GMT
                      etag: 0x8DADCEDC40C1CAA
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 5a0958ee-801e-006b-5822-3af0c1000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=305260
                      expires: Thu, 16 Feb 2023 05:18:53 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2af8
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/SdUbH_V-zZiJuDc6OWgVMR23qfw.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/SdUbH_V-zZiJuDc6OWgVMR23qfw.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 63290
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: X6a4xSe9uMpKZzTKzHFezw==
                      last-modified: Fri, 03 Feb 2023 16:24:17 GMT
                      etag: 0x8DB060318C06C45
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 2f65d646-c01e-0037-763b-38a599000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=77164
                      expires: Mon, 13 Feb 2023 13:57:17 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b10
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/SrI3NunQ19BABvsvw4oSi8tPPZk.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/SrI3NunQ19BABvsvw4oSi8tPPZk.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 922
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: NZYq1M762j4mNbr2mWAqmw==
                      last-modified: Thu, 01 Dec 2022 01:48:42 GMT
                      etag: 0x8DAD33E2D668D14
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: b6248083-001e-0091-419c-371287000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=399805
                      expires: Fri, 17 Feb 2023 07:34:38 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b1c
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/W5MmWQ2eGrVRXTqzXMDHGiSKVOQ.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/W5MmWQ2eGrVRXTqzXMDHGiSKVOQ.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 26009
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: 7AWMWN5fbyX3jFTWbG0VZQ==
                      last-modified: Tue, 13 Dec 2022 03:00:27 GMT
                      etag: 0x8DADCB6301E2942
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 20cdc3a8-601e-0063-60cf-38eace000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=141025
                      expires: Tue, 14 Feb 2023 07:41:38 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b26
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/WbeCWVe5JQxC4mEqH3UueMNKOf8.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/WbeCWVe5JQxC4mEqH3UueMNKOf8.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 17325
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: +dg5XNlpMVJPH5Rm2nh8iA==
                      last-modified: Fri, 03 Feb 2023 20:44:24 GMT
                      etag: 0x8DB06276F214794
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 2e3c561f-501e-00b3-5c7f-38d798000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=114483
                      expires: Tue, 14 Feb 2023 00:19:16 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b3b
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/YOt7076YW9n2SO3baCFpqTOw-nY.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/YOt7076YW9n2SO3baCFpqTOw-nY.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 1547
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: hMUkauLeLBjBwAznDCccvA==
                      last-modified: Thu, 01 Dec 2022 01:48:37 GMT
                      etag: 0x8DAD33E2A0785B5
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 75e23c02-701e-00b4-0b08-36bbfb000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=233618
                      expires: Wed, 15 Feb 2023 09:24:51 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b4c
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/c0XWdPqHx1sLdHMvN-XBVUJMDWM.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/c0XWdPqHx1sLdHMvN-XBVUJMDWM.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 37480
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: by/SE7+3Tqj+GtXyQy5pxQ==
                      last-modified: Tue, 25 Oct 2022 04:11:05 GMT
                      etag: 0x8DAB63EEFC6797F
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: b3f579b4-401e-00bf-0809-384090000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=55433
                      expires: Mon, 13 Feb 2023 07:55:06 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b62
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/donGslFzDAu4LNu7xBcHXUUCAw4.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/donGslFzDAu4LNu7xBcHXUUCAw4.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 29847
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: SPS1pE2WaD3QavlE36bzFA==
                      last-modified: Thu, 02 Feb 2023 19:51:11 GMT
                      etag: 0x8DB0556D6114C74
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: dbed4ade-501e-000a-62fc-37d382000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=49918
                      expires: Mon, 13 Feb 2023 06:23:11 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2b76
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/gJUJgNNsyuoal-sNm8oMoHi4iIk.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/gJUJgNNsyuoal-sNm8oMoHi4iIk.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 2281
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: VMduIWdn0C0eldh91yjDlw==
                      last-modified: Thu, 01 Dec 2022 01:48:33 GMT
                      etag: 0x8DAD33E27C7F75E
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: b999d975-601e-00e5-2f95-382677000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=141123
                      expires: Tue, 14 Feb 2023 07:43:16 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2ba5
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/gS1fp9qBk24PhQOMpbT9blBNbks.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/gS1fp9qBk24PhQOMpbT9blBNbks.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: lAIKaWfTF03zY1qfsDmZKA==
                      last-modified: Wed, 01 Feb 2023 18:37:53 GMT
                      etag: 0x8DB04836DB7F2AA
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 06585345-401e-0080-4064-3a8833000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 32194
                      cache-control: public, no-transform, max-age=314614
                      expires: Thu, 16 Feb 2023 07:54:47 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2bee
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/h0_ymK9wPEJMicnVALPw5taHcNA.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/h0_ymK9wPEJMicnVALPw5taHcNA.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: aZIIzKGBtjIY10nzSlFuxw==
                      last-modified: Thu, 01 Dec 2022 01:48:41 GMT
                      etag: 0x8DAD33E2C932DA5
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 9ef7fcb7-801e-008f-6649-2cfe5f000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 776
                      cache-control: public, no-transform, max-age=48804
                      expires: Mon, 13 Feb 2023 06:04:37 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2c4e
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/hL4Ncr7onT7__ind5qsz2yRAqes.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/hL4Ncr7onT7__ind5qsz2yRAqes.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: o4yvkNMf6iirz2o1ZyJ9dw==
                      last-modified: Thu, 01 Dec 2022 01:48:40 GMT
                      etag: 0x8DAD33E2BF221ED
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 506f4784-c01e-00c3-7470-386e6f000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 3176
                      cache-control: public, no-transform, max-age=101097
                      expires: Mon, 13 Feb 2023 20:36:10 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2c5c
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/hpuTtWqd2W4uEb7OAelSWxNNdtU.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/hpuTtWqd2W4uEb7OAelSWxNNdtU.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 70052
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: hsfiZp6iiYRw5hiGe6IXRg==
                      last-modified: Thu, 01 Dec 2022 01:48:36 GMT
                      etag: 0x8DAD33E2989DB94
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 207303e4-401e-00dd-3c71-3982b7000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=224217
                      expires: Wed, 15 Feb 2023 06:48:10 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2c6a
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/kA01dKEIOH7jmnhugLHXrdIYLx0.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/kA01dKEIOH7jmnhugLHXrdIYLx0.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-type: text/javascript; charset=utf-8
                      content-md5: JoZo4b3wDPAYKoCNdcj2jg==
                      last-modified: Thu, 19 Jan 2023 01:07:18 GMT
                      etag: 0x8DAF9B98295D290
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 7aa9cd96-a01e-0043-33e1-369169000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      content-encoding: gzip
                      content-length: 255
                      cache-control: public, no-transform, max-age=318570
                      expires: Thu, 16 Feb 2023 09:00:43 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      vary: Accept-Encoding
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2c76
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/q36ViLrNixBvRc6RvDpSpgMxO4Y.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/q36ViLrNixBvRc6RvDpSpgMxO4Y.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 12693
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: lyHI6eDest4j4Nkao2DjeA==
                      last-modified: Thu, 01 Dec 2022 01:48:36 GMT
                      etag: 0x8DAD33E29D7C9BA
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: ca2bcbed-401e-00cd-3a90-3647df000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=315368
                      expires: Thu, 16 Feb 2023 08:07:21 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2c86
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/qCMNw_C6994pH4N5T0tTtpYPYNg.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/qCMNw_C6994pH4N5T0tTtpYPYNg.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 490114
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: AN7D66wqYnRr6FBfG0nwnw==
                      last-modified: Fri, 03 Feb 2023 22:11:27 GMT
                      etag: 0x8DB063398B9583B
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 67c8586e-601e-005c-407f-38226d000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=105914
                      expires: Mon, 13 Feb 2023 21:56:27 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2c95
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/qTa6ck-3svuuv1kv3xxIj_PHM8E.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/qTa6ck-3svuuv1kv3xxIj_PHM8E.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 86668
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: kvdBrJIzdAbiO2wz8QEn+g==
                      last-modified: Fri, 03 Feb 2023 20:44:24 GMT
                      etag: 0x8DB06276F4A4D95
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 9e14bc70-b01e-0060-6492-380baa000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=116701
                      expires: Tue, 14 Feb 2023 00:56:14 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2cd6
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/rUQ8SSsIzKcgb77SIOCfnAbpfB4.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/rUQ8SSsIzKcgb77SIOCfnAbpfB4.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 82
                      content-type: application/x-javascript; charset=utf-8
                      content-encoding: br
                      content-md5: BTdT975wkLr+xNomH+hGkQ==
                      last-modified: Wed, 17 Aug 2022 06:50:25 GMT
                      etag: 0x8DA801CC35C0B9B
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: bc7264c8-601e-0073-0f5e-3a2fa6000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=313115
                      expires: Thu, 16 Feb 2023 07:29:48 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2cea
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/ta1GrXebZPEgoIksl3yROWlYWM8.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/ta1GrXebZPEgoIksl3yROWlYWM8.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 699
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: xsgMHS4du6D/Xo0XZkV8vg==
                      last-modified: Thu, 05 Jan 2023 02:06:51 GMT
                      etag: 0x8DAEEC182DB5CED
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 79d7814f-f01e-00ba-6ba5-38924b000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=142366
                      expires: Tue, 14 Feb 2023 08:03:59 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2cf6
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/w9zqVJkEZ_qpNCqYvGYoqL8BWm0.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/w9zqVJkEZ_qpNCqYvGYoqL8BWm0.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 33186
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: 9Ut8U1EVDtjybcYhBNy2yQ==
                      last-modified: Thu, 15 Sep 2022 21:38:30 GMT
                      etag: 0x8DA9762A19A7B43
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: cacd6872-401e-00cd-50a6-3847df000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=133638
                      expires: Tue, 14 Feb 2023 05:38:31 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d05
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/wkEerwY-JSbf-qLKKOM-UGnuPhU.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/wkEerwY-JSbf-qLKKOM-UGnuPhU.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 11517
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: XqGQ+x9sk50mtjG4GJmD8A==
                      last-modified: Mon, 30 Jan 2023 23:26:19 GMT
                      etag: 0x8DB0319642B12C9
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 24df3cc5-a01e-0031-3639-399626000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=223582
                      expires: Wed, 15 Feb 2023 06:37:35 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d19
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/yD8mNPwagJmEd4zTeEH-jzydwzM.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/yD8mNPwagJmEd4zTeEH-jzydwzM.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 1077
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: bFTMADU9f2ZG5Vk2EyltVw==
                      last-modified: Thu, 01 Dec 2022 01:48:42 GMT
                      etag: 0x8DAD33E2CDB0227
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 5ef3c01b-001e-00be-3816-341f4c000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=56010
                      expires: Mon, 13 Feb 2023 08:04:43 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d21
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rp/zGtqPtZB-KBotPXd7KDx_BqSAyw.br.js
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rp/zGtqPtZB-KBotPXd7KDx_BqSAyw.br.js HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 698
                      content-type: text/javascript; charset=utf-8
                      content-encoding: br
                      content-md5: YP3B79Ob8TDpwFXr5CqXhg==
                      last-modified: Thu, 01 Dec 2022 01:48:40 GMT
                      etag: 0x8DAD33E2BE50466
                      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
                      x-ms-request-id: 8f444126-601e-0011-7d9e-39ed81000000
                      x-ms-version: 2009-09-19
                      x-ms-lease-status: unlocked
                      x-ms-blob-type: BlockBlob
                      access-control-allow-origin: *
                      cache-control: public, no-transform, max-age=233835
                      expires: Wed, 15 Feb 2023 09:28:28 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d37
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    • flag-fr
                      GET
                      https://r.bing.com/rs/2D/3e/ortl,cc,nc/9eNI3ykoxUBcfNRgDJaF-g0a_0c.css?or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rs/2D/3e/ortl,cc,nc/9eNI3ykoxUBcfNRgDJaF-g0a_0c.css?or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      server: Kestrel
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006ED5
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      content-length: 2038
                      content-type: text/css; charset=utf-8
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      last-modified: Sun, 03 Oct 2010 13:25:06 GMT
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: private, max-age=26504
                      expires: Sun, 12 Feb 2023 23:52:57 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d43
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rs/6E/Vn/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rs/6E/Vn/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      last-modified: Tue, 16 Aug 2022 23:45:22 GMT
                      server: Kestrel
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006ADD
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      content-length: 50458
                      content-type: text/css; charset=utf-8
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: private, max-age=38545
                      expires: Mon, 13 Feb 2023 03:13:38 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d50
                      timing-allow-origin: *
                    • flag-fr
                      GET
                      https://r.bing.com/rs/6W/hh/ortl,cc,nc/Q-cnsTpek0eyHYYizZgbV8w7g0w.css?or=w
                      Remote address:
                      2.16.165.131:443
                      Request
                      GET /rs/6W/hh/ortl,cc,nc/Q-cnsTpek0eyHYYizZgbV8w7g0w.css?or=w HTTP/2.0
                      host: r.bing.com
                      accept: */*
                      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      cookie: SRCHUID=V=2&GUID=FE8A09AB4E0D4E0E9321E164D82256BB&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=en&LUT=1660332812589&IPMH=425f95e4&IPMID=1660336692127&HV=1676223063; CortanaAppUID=CC49A771AA5D6B619014545D509433FC; MUID=297D349428BA4388ACFAFA4B8D6250A1; _SS=SID=2BD1838EE92E6FC722619270E8DB6EDE&CBV=30311771&CPID=1660336692127&AC=1&CPH=d0e6f363; _EDGE_S=SID=2BD1838EE92E6FC722619270E8DB6EDE&mkt=en-us&ui=en-us
                      Response
                      HTTP/2.0 200
                      content-length: 4265
                      content-type: text/css; charset=utf-8
                      server: Kestrel
                      access-control-allow-headers: *
                      access-control-allow-origin: *
                      content-encoding: br
                      last-modified: Tue, 13 Dec 2022 13:15:10 GMT
                      useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
                      x-as-instrumentationoptions: AppServerLoggingMaster=1
                      x-as-machinename: DUBEEAP00006AC5
                      x-as-suppresssetcookie: 1
                      x-xss-protection: 0
                      cross-origin-resource-policy: cross-origin
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
                      cache-control: public, max-age=152446
                      expires: Tue, 14 Feb 2023 10:51:59 GMT
                      date: Sun, 12 Feb 2023 16:31:13 GMT
                      alt-svc: h3=":443"; ma=93600
                      akamai-grn: 0.7fa51002.1676219473.8b2d5b
                      timing-allow-origin: *
                    • flag-us
                      DNS
                      176.122.125.40.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      176.122.125.40.in-addr.arpa
                      IN PTR
                      Response
                    • 20.50.201.200:443
                      322 B
                      7
                    • 172.217.168.238:443
                      https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=89.0.4389.114&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1
                      tls, http2
                      chrome.exe
                      2.1kB
                      9.5kB
                      17
                      16

                      HTTP Request

                      GET https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=89.0.4389.114&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D184%2526e%253D1
                    • 142.251.36.45:443
                      https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
                      tls, http2
                      chrome.exe
                      1.8kB
                      7.1kB
                      16
                      17

                      HTTP Request

                      POST https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
                    • 34.104.35.123:80
                      http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx
                      http
                      chrome.exe
                      4.9kB
                      256.6kB
                      97
                      187

                      HTTP Request

                      GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

                      HTTP Response

                      200
                    • 8.8.4.4:443
                      https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
                      tls, http2
                      chrome.exe
                      1.6kB
                      6.9kB
                      15
                      15

                      HTTP Request

                      GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
                    • 8.8.4.4:443
                      https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
                      tls, http2
                      chrome.exe
                      1.6kB
                      6.9kB
                      14
                      15

                      HTTP Request

                      GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
                    • 93.184.221.240:80
                      322 B
                      7
                    • 93.184.221.240:80
                      322 B
                      7
                    • 93.184.221.240:80
                      322 B
                      7
                    • 204.79.197.200:443
                      www.bing.com
                      tls, https
                      29.9kB
                      71.0kB
                      106
                      105
                    • 2.16.165.131:443
                      https://r.bing.com/rs/6W/hh/ortl,cc,nc/Q-cnsTpek0eyHYYizZgbV8w7g0w.css?or=w
                      tls, http2
                      55.1kB
                      1.3MB
                      1080
                      1033

                      HTTP Request

                      GET https://r.bing.com/rb/1a/cir2,ortl,cc,nc/n7LMSoHYYIBGa1VPMlnTzxBvlfA.css?bu=B4sCQfkBfFhYlwI&or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rb/1a/cir2,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C5EH4gLaA-4H2wbIBoMFWFhYWA&or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rb/48/ortl,cc,nc/8yOt-qMgl3wFFpnXBbdaeUrdWpM.css?bu=A4gCjAKPAg&or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rb/6W/cir2,ortl,cc,nc/0pwpq13DOFcrPJTODQ6nAA9iIh4.css?bu=GNUH0gfnB5II3gfbB8wHjAjqB-0H8AfMB8wH9gfMB_4HhwiBCMwHzAfMB5UIzAfDCA&or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rb/6W/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=AcwH&or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/01qAHnoKVsYCw2MCbu8M0CLkEkU.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/12Gc-7xQcrCUsNZSOTiwRrGAmbs.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/1GU2fDqtk5zazcAxF50Lxmn7Swk.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/4BpQ1bD8vX1mXuJObN-gg9RqkyQ.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/584482RVjBIoEvVSe0RsuS1I4YQ.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/5uP6UDb3J4aBSvx2rvD1bfZtXg8.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/9NAKqY_tlD66IpqKerRN4qs4P0c.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/9RLIrLi3GlOL2Eylg9IcArIkw20.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/9wko70-6h4SrSkW1S6kxEXdyAh4.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/BRvVt6WvGqoJAGsLlNVw1BxlJzY.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/C7Wu5lXiGKMgWLBcPrLiDXEIyQM.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/Cj4mQnDN_eMyYEqsEbjRrJ2Ttec.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/DccpWCpoNzCwM4Qymi_Ji67Ilso.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/EYNLM9RfkEXFtD8WH1unvJjwzGA.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/LisgCZCwGQ4lRz4go9tlwPslw_k.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/MDYUJRTM7duLZNg57v31JGIvwis.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/SdUbH_V-zZiJuDc6OWgVMR23qfw.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/SrI3NunQ19BABvsvw4oSi8tPPZk.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/W5MmWQ2eGrVRXTqzXMDHGiSKVOQ.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/WbeCWVe5JQxC4mEqH3UueMNKOf8.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/YOt7076YW9n2SO3baCFpqTOw-nY.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/c0XWdPqHx1sLdHMvN-XBVUJMDWM.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/donGslFzDAu4LNu7xBcHXUUCAw4.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/gJUJgNNsyuoal-sNm8oMoHi4iIk.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/gS1fp9qBk24PhQOMpbT9blBNbks.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/h0_ymK9wPEJMicnVALPw5taHcNA.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/hL4Ncr7onT7__ind5qsz2yRAqes.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/hpuTtWqd2W4uEb7OAelSWxNNdtU.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/kA01dKEIOH7jmnhugLHXrdIYLx0.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/q36ViLrNixBvRc6RvDpSpgMxO4Y.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/qCMNw_C6994pH4N5T0tTtpYPYNg.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/qTa6ck-3svuuv1kv3xxIj_PHM8E.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/rUQ8SSsIzKcgb77SIOCfnAbpfB4.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/ta1GrXebZPEgoIksl3yROWlYWM8.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/w9zqVJkEZ_qpNCqYvGYoqL8BWm0.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/wkEerwY-JSbf-qLKKOM-UGnuPhU.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/yD8mNPwagJmEd4zTeEH-jzydwzM.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rp/zGtqPtZB-KBotPXd7KDx_BqSAyw.br.js

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rs/2D/3e/ortl,cc,nc/9eNI3ykoxUBcfNRgDJaF-g0a_0c.css?or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rs/6E/Vn/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=w

                      HTTP Response

                      200

                      HTTP Request

                      GET https://r.bing.com/rs/6W/hh/ortl,cc,nc/Q-cnsTpek0eyHYYizZgbV8w7g0w.css?or=w

                      HTTP Response

                      200
                    • 204.79.197.200:443
                      www.bing.com
                      156 B
                      3
                    • 77.47.142.201:3389
                      rdp
                      mstsc.exe
                      1.5kB
                      2.0kB
                      10
                      7
                    • 77.47.142.201:3389
                      rdp
                      mstsc.exe
                      205.4kB
                      100.1kB
                      2458
                      1579
                    • 224.0.0.251:5353
                      330 B
                      6
                    • 8.8.8.8:53
                      accounts.google.com
                      dns
                      chrome.exe
                      65 B
                      81 B
                      1
                      1

                      DNS Request

                      accounts.google.com

                      DNS Response

                      142.251.36.45

                    • 8.8.8.8:53
                      clients2.google.com
                      dns
                      chrome.exe
                      65 B
                      105 B
                      1
                      1

                      DNS Request

                      clients2.google.com

                      DNS Response

                      172.217.168.238

                    • 8.8.8.8:53
                      edgedl.me.gvt1.com
                      dns
                      chrome.exe
                      64 B
                      80 B
                      1
                      1

                      DNS Request

                      edgedl.me.gvt1.com

                      DNS Response

                      34.104.35.123

                    • 8.8.8.8:53
                      dns.google
                      dns
                      chrome.exe
                      56 B
                      88 B
                      1
                      1

                      DNS Request

                      dns.google

                      DNS Response

                      8.8.4.4
                      8.8.8.8

                    • 8.8.8.8:53
                      google.com
                      dns
                      chrome.exe
                      56 B
                      72 B
                      1
                      1

                      DNS Request

                      google.com

                      DNS Response

                      142.250.179.142

                    • 8.8.8.8:53
                      google.com
                      dns
                      chrome.exe
                      56 B
                      72 B
                      1
                      1

                      DNS Request

                      google.com

                      DNS Response

                      142.250.179.142

                    • 8.8.8.8:53
                      r.bing.com
                      dns
                      56 B
                      220 B
                      1
                      1

                      DNS Request

                      r.bing.com

                      DNS Response

                      2.16.165.131
                      2.16.165.122
                      2.16.165.155

                    • 8.8.8.8:53
                      176.122.125.40.in-addr.arpa
                      dns
                      73 B
                      159 B
                      1
                      1

                      DNS Request

                      176.122.125.40.in-addr.arpa

                    • 77.47.142.201:3389
                      rdp
                      mstsc.exe
                      236.3kB
                      1.1MB
                      621
                      1640

                    MITRE ATT&CK Enterprise v6

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    We care about your privacy.

                    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.