695cd368713e92a60a3a1d78055081ff74655c19a704a9303f79d4f66d41b38e

Resubmissions

05/04/2024, 03:26 UTC

240405-dzpm2sah9z 8

05/04/2024, 03:26 UTC

240405-dzfedabf46 1

05/04/2024, 03:25 UTC

240405-dyl6jabf32 1

05/04/2024, 03:21 UTC

240405-dwg4ssbe77 1

05/04/2024, 03:19 UTC

240405-dt6pdabe49 4

05/04/2024, 03:16 UTC

240405-dsf3bsbe25 4

Analysis

max time kernel
100s
max time network
104s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
05/04/2024, 03:19 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eg-en.html
Size

1.3MB
MD5

ef3e67e8c87982ae2424baa272fd7fd1
SHA1

f002b425b5eee94f0a4e17ff25d31576fa478df6
SHA256

695cd368713e92a60a3a1d78055081ff74655c19a704a9303f79d4f66d41b38e
SHA512

ed6a1a726ee9827abb9b399f5376dc24ab989c23493a77c58d89ef6dd2210f63efab9bec1f2bca08cfb70abb7b4b53dd63cf32f4b154af5e254aa372b33761fb
SSDEEP

12288:PfG6L+qHfKZdUkbNPdNiojl49QtAhwFh66njWLp/53:DLPHfchFh66jM53

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdge.exe
File opened for modification	C:\Windows\Debug\ESE.TXT	MicrosoftEdge.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main	browser_broker.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main	MicrosoftEdgeCP.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\Active = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Extensible Cache	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$Discuz!	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\EnablementState = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\msn.com	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\Theme = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings	firefox.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\NextPromptBuild = "15063"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionLow = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "653"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "395205405"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\ShowTabPreviewBarOnStartup = "1"	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\CTLs	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "842"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\FileVersion = "2016061511"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "733"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "132"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\msn.com	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath\dummySetting = "1"	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "794"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\CRLs	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\LastCleanup = 0000000000000000	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Root	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VendorId = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Extensible Cache	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames\en-US = "en-US.1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\Certificates	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. = 0100000029a75874498dfe24f3168ad602c65f6fb9d4a5748d54ee2c1ed174c56267b12a9180bbd512a1cdce9dfbb51552efa266f36b412d9e228bdc74ce	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames\	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\CRLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionHigh = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "1643"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\NewTabPage	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\NextUpdateDate = "419068726"	MicrosoftEdge.exe

Suspicious behavior: MapViewOfSection 8 IoCs

pid	Process
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe

Suspicious use of AdjustPrivilegeToken 28 IoCs

description	pid	Process
Token: SeDebugPrivilege	4260	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4260	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4260	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4260	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4776	MicrosoftEdgeCP.exe
Token: SeCreatePagefilePrivilege	4776	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	1956	firefox.exe
Token: SeDebugPrivilege	1956	firefox.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
1956	firefox.exe
1956	firefox.exe
1956	firefox.exe
1956	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
1956	firefox.exe
1956	firefox.exe
1956	firefox.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
812	MicrosoftEdge.exe
1036	MicrosoftEdgeCP.exe
4260	MicrosoftEdgeCP.exe
1036	MicrosoftEdgeCP.exe
4276	MicrosoftEdgeCP.exe
4276	MicrosoftEdgeCP.exe
4276	MicrosoftEdgeCP.exe
1956	firefox.exe
1956	firefox.exe
1956	firefox.exe
1956	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 1036 wrote to memory of 4776	1036	MicrosoftEdgeCP.exe	75
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 3540 wrote to memory of 1956	3540	firefox.exe	86
PID 1956 wrote to memory of 2988	1956	firefox.exe	87
PID 1956 wrote to memory of 2988	1956	firefox.exe	87
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88
PID 1956 wrote to memory of 5192	1956	firefox.exe	88

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\LaunchWinApp.exe
"C:\Windows\system32\LaunchWinApp.exe" "C:\Users\Admin\AppData\Local\Temp\eg-en.html"
1⤵
PID:2192

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:812

C:\Windows\system32\browser_broker.exe
C:\Windows\system32\browser_broker.exe -Embedding
1⤵
- Modifies Internet Explorer settings
PID:1976

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1036

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4260

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:4776

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:4960

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4276

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:3024

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:4908

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:420

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3540
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.0.1102353670\1685122776" -parentBuildID 20221007134813 -prefsHandle 1688 -prefMapHandle 1676 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d07ece64-6b8e-4748-869c-31db5bf8d8a3} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 1780 284e7cd4158 gpu
    3⤵
    PID:2988
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.1.1932194772\260429641" -parentBuildID 20221007134813 -prefsHandle 2124 -prefMapHandle 2120 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec2031b6-86a5-4a39-9cb0-54530f1d523d} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 2136 284dcc72b58 socket
    3⤵
    - Checks processor information in registry
    PID:5192
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.2.1085601900\1919686949" -childID 1 -isForBrowser -prefsHandle 3036 -prefMapHandle 3024 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89268b15-26bd-4f20-a3f1-29a88b3c8787} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 2708 284ebfd3058 tab
    3⤵
    PID:5528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.3.302328554\2122586067" -childID 2 -isForBrowser -prefsHandle 3428 -prefMapHandle 3424 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b408152d-bd4f-49db-b6fc-f70c96c76c2a} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 3280 284ea73a158 tab
    3⤵
    PID:5636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.4.391811440\1084412739" -childID 3 -isForBrowser -prefsHandle 4144 -prefMapHandle 4128 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {87bce8ad-a131-43e6-a364-1a3d40aba65e} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 4152 284ecfd1458 tab
    3⤵
    PID:5916
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.5.1192564534\711634800" -childID 4 -isForBrowser -prefsHandle 2816 -prefMapHandle 2984 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bc0206e7-1250-44fa-ae30-7140c63e1251} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 4900 284dcc65058 tab
    3⤵
    PID:5716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.6.115676312\1363436287" -childID 5 -isForBrowser -prefsHandle 4860 -prefMapHandle 4856 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5225baa0-2702-4c91-9afe-d8921e69fd48} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 5040 284ee5d5558 tab
    3⤵
    PID:5784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.7.2018673102\1950166758" -childID 6 -isForBrowser -prefsHandle 5144 -prefMapHandle 5148 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {67778ca2-0e12-4b09-9be7-76b1d86f3c65} 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 5132 284ef0b9858 tab
    3⤵
    PID:5844

C:\Windows\System32\DataExchangeHost.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
1⤵
PID:5860

Network

DNS

logs.netflix.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

logs.netflix.com

IN A

Response

logs.netflix.com

IN CNAME

logs.dradis.netflix.com

logs.dradis.netflix.com

IN CNAME

logs.eu-west-1.internal.dradis.netflix.com

logs.eu-west-1.internal.dradis.netflix.com

IN CNAME

apiproxy-logging-s3-ceebd8eaebff6734.elb.eu-west-1.amazonaws.com

apiproxy-logging-s3-ceebd8eaebff6734.elb.eu-west-1.amazonaws.com

IN A

54.76.138.123

apiproxy-logging-s3-ceebd8eaebff6734.elb.eu-west-1.amazonaws.com

IN A

3.255.31.202

apiproxy-logging-s3-ceebd8eaebff6734.elb.eu-west-1.amazonaws.com

IN A

54.217.229.70
DNS

cdn.cookielaw.org

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

cdn.cookielaw.org

IN A

Response

cdn.cookielaw.org

IN A

104.19.177.52

cdn.cookielaw.org

IN A

104.19.178.52
DNS

assets.nflxext.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

assets.nflxext.com

IN A

Response

assets.nflxext.com

IN A

45.57.90.1

assets.nflxext.com

IN A

45.57.91.1
GET

https://logs.netflix.com/log/wwwhead/cl/2?fetchType=css&eventType=WebsiteDetect&modalView=nmLanding

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

GET /log/wwwhead/cl/2?fetchType=css&eventType=WebsiteDetect&modalView=nmLanding HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

access-control-allow-origin: https://logs.netflix.com:7004
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=1703
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:22 GMT
x-envoy-upstream-service-time: 2
x-b3-traceid: 660f6dba14e2bbb6f16992790af113f5
x-request-id: a302c51e-8021-4059-a5fb-4cd4076c51d7
Server: singleingestcl-secure 1498a847-b4c6-469c-b28f-b82e012bc63d
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-0c4aa056cdd98e13a (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/wwwhead/cl/2?modalView=nmLanding&fetchType=css&eventType=WebsiteDetect
Set-Cookie: nfvdid=BQFmAAEBEMmzbsEJVtm_GDf3vPcDAl1AFY_IxhjKfu3o5oShKHxRDSGe_ADAIUE5xmI5fHE8XLwgp35UqhfafBb96Va3Fe9Nbgw5g5l0qludSPBB3fnExg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 553
GET

https://logs.netflix.com/log/wwwhead/cl/2?fetchType=js&eventType=WebsiteDetect&modalView=nmLanding

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

GET /log/wwwhead/cl/2?fetchType=js&eventType=WebsiteDetect&modalView=nmLanding HTTP/1.1
Accept: */*
Origin: null
Referer: file:///C:/Users/Admin/AppData/Local/Temp/eg-en.html
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Connection: Keep-Alive
Cookie: nfvdid=BQFmAAEBEMmzbsEJVtm_GDf3vPcDAl1AFY_IxhjKfu3o5oShKHxRDSGe_ADAIUE5xmI5fHE8XLwgp35UqhfafBb96Va3Fe9Nbgw5g5l0qludSPBB3fnExg%3D%3D

Response

HTTP/1.1 200 OK

access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=814
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:22 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 660f6dbb5f7b55c3c7c1398dbd4595b7
x-request-id: d12a033a-4b93-4ffc-a4eb-ef1c684f1571
Server: singleingestcl-secure 0d13962a-7d35-478f-b530-5a20ff33df04
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-0c4aa056cdd98e13a (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/wwwhead/cl/2?modalView=nmLanding&fetchType=js&eventType=WebsiteDetect
Access-Control-Expose-Headers: X-Netflix.Retry.Server.Policy,X-Netflix.Response.Tag,X-Netflix.Geo.Info,X-Netflix.request.inbound.identity.changed,Via,X-Netflix.Retry.Server.Policy.retryAfterSeconds,X-Netflix.Retry.Server.Policy.maxRetries,X-Ftl-Error,X-Netflix.uiVersion
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 3
GET

https://logs.netflix.com/log/wwwhead/cl/2?fetchType=js&eventType=WebsiteScreen&winw=816&winh=640&screenw=800&screenh=555&ratio=1

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

GET /log/wwwhead/cl/2?fetchType=js&eventType=WebsiteScreen&winw=816&winh=640&screenw=800&screenh=555&ratio=1 HTTP/1.1
Accept: */*
Origin: null
Referer: file:///C:/Users/Admin/AppData/Local/Temp/eg-en.html
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Connection: Keep-Alive
Cookie: nfvdid=BQFmAAEBEMmzbsEJVtm_GDf3vPcDAl1AFY_IxhjKfu3o5oShKHxRDSGe_ADAIUE5xmI5fHE8XLwgp35UqhfafBb96Va3Fe9Nbgw5g5l0qludSPBB3fnExg%3D%3D

Response

HTTP/1.1 200 OK

access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=873
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:22 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 660f6dbbfc0699d22d4d3b113e1ab0be
x-request-id: db496135-74b2-4398-a52c-e0131d297791
Server: singleingestcl-secure f4536eb7-20d5-4dd3-8035-68e3ab191189
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-04851d9b573cae9eb (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/wwwhead/cl/2?fetchType=js&eventType=WebsiteScreen&winw=816&screenh=555&screenw=800&winh=640&ratio=1
Access-Control-Expose-Headers: X-Netflix.Retry.Server.Policy,X-Netflix.Response.Tag,X-Netflix.Geo.Info,X-Netflix.request.inbound.identity.changed,Via,X-Netflix.Retry.Server.Policy.retryAfterSeconds,X-Netflix.Retry.Server.Policy.maxRetries,X-Ftl-Error,X-Netflix.uiVersion
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 713
OPTIONS

https://logs.netflix.com/log/www/cl/2

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

OPTIONS /log/www/cl/2 HTTP/1.1
Accept: */*
Origin: null
Referer: file:///C:/Users/Admin/AppData/Local/Temp/eg-en.html
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Access-Control-Request-Headers: X-Netflix.Client.Request.Name, Content-Type
Access-Control-Request-Method: POST
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:30 GMT
x-envoy-upstream-service-time: 0
x-b3-traceid: 660f6dc2a6d54c9b36d95af321e8b3fe
x-request-id: 9544ae11-b5da-42c7-aae9-3bb3fd00f8e7
Server: singleingestcl-secure f4536eb7-20d5-4dd3-8035-68e3ab191189
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-04851d9b573cae9eb (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/www/cl/2
Access-Control-Expose-Headers: X-Netflix.Retry.Server.Policy,X-Netflix.Response.Tag,X-Netflix.Geo.Info,X-Netflix.request.inbound.identity.changed,Via,X-Netflix.Retry.Server.Policy.retryAfterSeconds,X-Netflix.Retry.Server.Policy.maxRetries,X-Ftl-Error,X-Netflix.uiVersion
Set-Cookie: nfvdid=BQFmAAEBEDFyz1Ph_Pyk57TuBe8CfTNAfHgRkMOiy6-WgBvVdgBMuvY3Ty7Fxs5-cgv7MN2HReGQxZNCUXqak9QUrpPOJZkl_S4S7lgU_N7i966YI5L8fQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 2
POST

https://logs.netflix.com/log/www/cl/2

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

POST /log/www/cl/2 HTTP/1.1
Accept: */*
Origin: null
Referer: file:///C:/Users/Admin/AppData/Local/Temp/eg-en.html
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Content-Length: 4886
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: nfvdid=BQFmAAEBEMmzbsEJVtm_GDf3vPcDAl1AFY_IxhjKfu3o5oShKHxRDSGe_ADAIUE5xmI5fHE8XLwgp35UqhfafBb96Va3Fe9Nbgw5g5l0qludSPBB3fnExg%3D%3D

Response

HTTP/1.1 200 OK

access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=705
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:30 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 660f6dc25102c49d4a41e39589092ceb
x-request-id: 8b26eef5-a531-4d0e-a2a9-90d91c5bb1c9
Server: singleingestcl-secure e50a41f8-1b14-4806-9ee1-9313733c7658
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-04851d9b573cae9eb (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/www/cl/2
Access-Control-Expose-Headers: X-Netflix.Retry.Server.Policy,X-Netflix.Response.Tag,X-Netflix.Geo.Info,X-Netflix.request.inbound.identity.changed,Via,X-Netflix.Retry.Server.Policy.retryAfterSeconds,X-Netflix.Retry.Server.Policy.maxRetries,X-Ftl-Error,X-Netflix.uiVersion
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 5
OPTIONS

https://logs.netflix.com/log/www/cl/2

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

OPTIONS /log/www/cl/2 HTTP/1.1
Accept: */*
Origin: null
Referer: file:///C:/Users/Admin/AppData/Local/Temp/eg-en.html
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Access-Control-Request-Headers: X-Netflix.Client.Request.Name, Content-Type
Access-Control-Request-Method: POST
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:41 GMT
x-envoy-upstream-service-time: 0
x-b3-traceid: 660f6dcd063544dc667aa5c42017f5b8
x-request-id: e1788b64-9523-4d74-84e4-4d3f02c76f6f
Server: singleingestcl-secure f4536eb7-20d5-4dd3-8035-68e3ab191189
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-04851d9b573cae9eb (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/www/cl/2
Access-Control-Expose-Headers: X-Netflix.Retry.Server.Policy,X-Netflix.Response.Tag,X-Netflix.Geo.Info,X-Netflix.request.inbound.identity.changed,Via,X-Netflix.Retry.Server.Policy.retryAfterSeconds,X-Netflix.Retry.Server.Policy.maxRetries,X-Ftl-Error,X-Netflix.uiVersion
Set-Cookie: nfvdid=BQFmAAEBEPnkBbBDUkCtACTbGUKLYkRAaxvMYylcw1WHjuYnRHu6dp8EC9ATdtwAnV3cDdioiSQ4_fG_d8qiM9wg3_mIG3_GAXeDcflwn1Foy3dfRQMpyw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 2
POST

https://logs.netflix.com/log/www/cl/2

MicrosoftEdgeCP.exe

Remote address:

54.76.138.123:443

Request

POST /log/www/cl/2 HTTP/1.1
Accept: */*
Origin: null
Referer: file:///C:/Users/Admin/AppData/Local/Temp/eg-en.html
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Accept-Encoding: gzip, deflate, br
Host: logs.netflix.com
Content-Length: 2379
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: nfvdid=BQFmAAEBEMmzbsEJVtm_GDf3vPcDAl1AFY_IxhjKfu3o5oShKHxRDSGe_ADAIUE5xmI5fHE8XLwgp35UqhfafBb96Va3Fe9Nbgw5g5l0qludSPBB3fnExg%3D%3D

Response

HTTP/1.1 200 OK

access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=1168
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:41 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 660f6dcd6830950666e7d0e9575f2341
x-request-id: 5583d280-ce3a-4308-985c-adc6223e18fb
Server: singleingestcl-secure f4536eb7-20d5-4dd3-8035-68e3ab191189
x-envoy-decorator-operation: lo_svc_http
content-length: 0
Via: 1.1 i-04851d9b573cae9eb (eu-west-1)
X-Originating-URL: https://logs.netflix.com/log/www/cl/2
Access-Control-Expose-Headers: X-Netflix.Retry.Server.Policy,X-Netflix.Response.Tag,X-Netflix.Geo.Info,X-Netflix.request.inbound.identity.changed,Via,X-Netflix.Retry.Server.Policy.retryAfterSeconds,X-Netflix.Retry.Server.Policy.maxRetries,X-Ftl-Error,X-Netflix.uiVersion
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 4
GET

https://assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:22 GMT
Content-Type: text/css
Content-Length: 523
Connection: keep-alive
Last-Modified: Thu, 27 Jul 2023 20:30:51 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:23 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/vlv3/7ca5b7c7-20aa-42a8-a278-f801b0d65fa1/da109ecd-e4f8-470a-af88-d3081b5472d4/NL-en-20240326-popsignuptwoweeks-perspective_alpha_website_small.jpg

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/vlv3/7ca5b7c7-20aa-42a8-a278-f801b0d65fa1/da109ecd-e4f8-470a-af88-d3081b5472d4/NL-en-20240326-popsignuptwoweeks-perspective_alpha_website_small.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: image/jpeg
Content-Length: 112663
Connection: keep-alive
Content-MD5: KTaCZieJbvQOk+F2xsjmMQ==
Last-Modified: Thu, 28 Mar 2024 19:24:54 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:24 GMT
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v HTTP/1.1
Range: bytes=0-
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
GetContentFeatures.DLNA.ORG: 1
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 206 Partial Content

Server: nginx
Date: Fri, 05 Apr 2024 03:19:24 GMT
Content-Type: video/x-m4v
Content-Length: 270046
Connection: keep-alive
Content-MD5: PLEtt8Zyszc1AGSApFXscg==
Last-Modified: Mon, 12 Aug 2019 20:49:12 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:25 GMT
Content-Range: bytes 0-270045/270046
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v HTTP/1.1
If-Unmodified-Since: Mon, 12 Aug 2019 20:49:12 GMT
Range: bytes=262144-270045
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
GetContentFeatures.DLNA.ORG: 1
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 206 Partial Content

Server: nginx
Date: Fri, 05 Apr 2024 03:19:24 GMT
Content-Type: video/x-m4v
Content-Length: 7902
Connection: keep-alive
Content-MD5: PLEtt8Zyszc1AGSApFXscg==
Last-Modified: Mon, 12 Aug 2019 20:49:12 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:25 GMT
Content-Range: bytes 262144-270045/270046
GET

https://assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp.a1bcda71010575046231.css

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /web/ffe/wp/less/signup/nmhp/nmhp.a1bcda71010575046231.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: text/css
Content-Length: 1340
Connection: keep-alive
Last-Modified: Wed, 28 Feb 2024 14:09:01 GMT
Content-Encoding: gzip
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:24 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: image/png
Content-Length: 11418
Connection: keep-alive
Content-MD5: d5lKZzJ7qVff2IDjOpHwQQ==
Last-Modified: Wed, 14 Nov 2018 18:20:41 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:24 GMT
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:26 GMT
Content-Type: image/gif
Content-Length: 22171
Connection: keep-alive
Content-MD5: 3Ty3jbeMPgoTybd+4Z3u5g==
Last-Modified: Mon, 12 Nov 2018 22:40:57 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:27 GMT
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v HTTP/1.1
If-Unmodified-Since: Wed, 09 Jan 2019 20:47:49 GMT
Range: bytes=237568-262143
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
GetContentFeatures.DLNA.ORG: 1
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 206 Partial Content

Server: nginx
Date: Fri, 05 Apr 2024 03:19:28 GMT
Content-Type: video/x-m4v
Content-Length: 24576
Connection: keep-alive
Content-MD5: PlXFYgWonIWf7QBa4XKfqg==
Last-Modified: Wed, 09 Jan 2019 20:47:49 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:29 GMT
Content-Range: bytes 237568-262143/266160
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v HTTP/1.1
If-Unmodified-Since: Mon, 12 Aug 2019 20:49:12 GMT
Range: bytes=237568-262143
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
GetContentFeatures.DLNA.ORG: 1
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 206 Partial Content

Server: nginx
Date: Fri, 05 Apr 2024 03:19:31 GMT
Content-Type: video/x-m4v
Content-Length: 24576
Connection: keep-alive
Content-MD5: PLEtt8Zyszc1AGSApFXscg==
Last-Modified: Mon, 12 Aug 2019 20:49:12 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:32 GMT
Content-Range: bytes 237568-262143/270046
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: image/jpeg
Content-Length: 49614
Connection: keep-alive
Content-MD5: pIMz1DwZYS7WGYf6Xb/zxQ==
Last-Modified: Wed, 14 Aug 2019 17:59:05 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:24 GMT
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:22 GMT
Content-Type: image/png
Content-Length: 20506
Connection: keep-alive
Content-MD5: WH4EDyAll5IJSQHKlzlmng==
Last-Modified: Wed, 14 Nov 2018 18:48:14 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:23 GMT
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:22 GMT
Content-Type: image/png
Content-Length: 137040
Connection: keep-alive
Content-MD5: Cz2CFJPVdI2CnIUrvW0pLQ==
Last-Modified: Wed, 23 Jan 2019 00:35:07 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:23 GMT
Accept-Ranges: bytes
GET

https://cdn.cookielaw.org/scripttemplates/otSDKStub.js

MicrosoftEdgeCP.exe

Remote address:

104.19.177.52:443

Request

GET /scripttemplates/otSDKStub.js HTTP/2.0
host: cdn.cookielaw.org
accept: application/javascript, */*;q=0.8
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

date: Fri, 05 Apr 2024 03:19:22 GMT
content-type: application/javascript
content-length: 6839
content-encoding: gzip
content-md5: Pg1MHDpg+UGdovxhidM4Kg==
last-modified: Thu, 04 Apr 2024 06:34:30 GMT
etag: 0x8DC547148737062
x-ms-request-id: c2e65132-501e-008b-6caa-863dee000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 40207
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86f6656fcc6976c9-LHR
DNS

occ-0-2705-2706.1.nflxso.net

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

occ-0-2705-2706.1.nflxso.net

IN A

Response

occ-0-2705-2706.1.nflxso.net

IN A

45.57.68.172

occ-0-2705-2706.1.nflxso.net

IN A

45.57.68.157
GET

https://occ-0-2705-2706.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55

MicrosoftEdgeCP.exe

Remote address:

45.57.68.172:443

Request

GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55 HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: occ-0-2705-2706.1.nflxso.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: image/png
Content-Length: 253151
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "bac31463a9cffbfeed00e05c47a46595"
Last-Modified: Thu, 01 Jun 2023 20:52:44 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes
DNS

52.177.19.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

52.177.19.104.in-addr.arpa

IN PTR

Response
DNS

123.138.76.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

123.138.76.54.in-addr.arpa

IN PTR

Response

123.138.76.54.in-addr.arpa

IN PTR

ec2-54-76-138-123 eu-west-1compute amazonawscom
DNS

1.90.57.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.90.57.45.in-addr.arpa

IN PTR

Response
DNS

115.252.103.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

115.252.103.104.in-addr.arpa

IN PTR

Response

115.252.103.104.in-addr.arpa

IN PTR

a104-103-252-115deploystaticakamaitechnologiescom
DNS

172.68.57.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.68.57.45.in-addr.arpa

IN PTR

Response

172.68.57.45.in-addr.arpa

IN PTR

ipv4-c080-nyc005-ix1oca nflxvideonet
GET

https://assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.429a6cfa1a395c2ebfa0.js

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.429a6cfa1a395c2ebfa0.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: application/javascript
Content-Length: 711867
Connection: keep-alive
Last-Modified: Mon, 01 Apr 2024 17:00:58 GMT
Content-Encoding: gzip
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:24 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v HTTP/1.1
Range: bytes=0-
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
GetContentFeatures.DLNA.ORG: 1
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 206 Partial Content

Server: nginx
Date: Fri, 05 Apr 2024 03:19:24 GMT
Content-Type: video/x-m4v
Content-Length: 266160
Connection: keep-alive
Content-MD5: PlXFYgWonIWf7QBa4XKfqg==
Last-Modified: Wed, 09 Jan 2019 20:47:49 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:25 GMT
Content-Range: bytes 0-266159/266160
GET

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v HTTP/1.1
If-Unmodified-Since: Wed, 09 Jan 2019 20:47:49 GMT
Range: bytes=262144-266159
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
GetContentFeatures.DLNA.ORG: 1
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 206 Partial Content

Server: nginx
Date: Fri, 05 Apr 2024 03:19:24 GMT
Content-Type: video/x-m4v
Content-Length: 4016
Connection: keep-alive
Content-MD5: PlXFYgWonIWf7QBa4XKfqg==
Last-Modified: Wed, 09 Jan 2019 20:47:49 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:25 GMT
Content-Range: bytes 262144-266159/266160
GET

https://assets.nflxext.com/ffe/siteui/acquisition/common/transparent_1x1.png

MicrosoftEdgeCP.exe

Remote address:

45.57.90.1:443

Request

GET /ffe/siteui/acquisition/common/transparent_1x1.png HTTP/1.1
Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: assets.nflxext.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Fri, 05 Apr 2024 03:19:23 GMT
Content-Type: image/png
Content-Length: 272
Connection: keep-alive
Content-MD5: X+USZj4auAKkdpQanOb1tQ==
Last-Modified: Wed, 01 Jul 2020 17:38:24 GMT
Cache-Control: max-age=604801
Expires: Fri, 12 Apr 2024 03:19:24 GMT
Accept-Ranges: bytes
DNS

ae.nflximg.net

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

ae.nflximg.net

IN A

Response

ae.nflximg.net

IN CNAME

e13252.dscg.akamaiedge.net

e13252.dscg.akamaiedge.net

IN A

104.103.252.115
GET

https://ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22EG%22%2C%22region_code%22%3Anull%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%7D

MicrosoftEdgeCP.exe

Remote address:

104.103.252.115:443

Request

GET /monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22EG%22%2C%22region_code%22%3Anull%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%7D HTTP/1.1
Accept: text/html, application/xhtml+xml, image/jxr, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate, br
Host: ae.nflximg.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-MD5: wAdYtW1y2pnz8A4F9t+2hg==
Content-Type: text/html
ETag: "c00758b56d72da99f3f00e05f6dfb686:1667228899.15889"
Last-Modified: Mon, 31 Oct 2022 15:08:11 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 05 Apr 2024 03:19:30 GMT
Content-Length: 1504
Connection: keep-alive
Timing-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
DNS

www.netflix.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

www.netflix.com

IN A

Response

www.netflix.com

IN CNAME

www.dradis.netflix.com

www.dradis.netflix.com

IN CNAME

www.eu-west-1.internal.dradis.netflix.com

www.eu-west-1.internal.dradis.netflix.com

IN CNAME

apiproxy-website-nlb-prod-1-5675d5ecda6efdd8.elb.eu-west-1.amazonaws.com

apiproxy-website-nlb-prod-1-5675d5ecda6efdd8.elb.eu-west-1.amazonaws.com

IN A

52.214.181.141

apiproxy-website-nlb-prod-1-5675d5ecda6efdd8.elb.eu-west-1.amazonaws.com

IN A

54.170.196.176

apiproxy-website-nlb-prod-1-5675d5ecda6efdd8.elb.eu-west-1.amazonaws.com

IN A

54.246.79.9
OPTIONS

https://www.netflix.com/ichnaea/log

MicrosoftEdgeCP.exe

Remote address:

52.214.181.141:443

Request

OPTIONS /ichnaea/log HTTP/2.0
host: www.netflix.com
accept: */*
origin: https://ae.nflximg.net
referer: https://ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22EG%22%2C%22region_code%22%3Anull%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%7D
accept-language: en-US
access-control-request-headers: Content-Type, X-Netflix.ichnaea.request.type
access-control-request-method: POST
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-length: 0
cache-control: no-cache

Response

HTTP/2.0 200

access-control-allow-origin: https://ae.nflximg.net
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:30 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 660f6dc278046562519b2f258c15e3b2
x-request-id: 0c266b50-23aa-4f64-9d10-13e43b10d12e
server: singleingestcl-secure 45215390-6ee5-48df-9e29-42578852bccc
x-envoy-decorator-operation: lo_svc_http
content-length: 0
via: 2 i-0469c5eaedeeea28e (eu-west-1)
x-originating-url: http://www.netflix.com/ichnaea/log
x-netflix.nfstatus: 1_1
x-netflix.proxy.execution-time: 10
DNS

MicrosoftEdgeCP.exe

Remote address:

52.214.181.141:443

Response

HTTP/2.0 200

access-control-allow-origin: https://ae.nflximg.net
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=511
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 05 Apr 2024 03:19:30 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 660f6dc322d46d67b6d571888ddaaf9a
x-request-id: 9ff054db-f3b9-47cd-959d-a0c13d8115f3
server: singleingestcl-secure e50a41f8-1b14-4806-9ee1-9313733c7658
x-envoy-decorator-operation: lo_svc_http
content-length: 0
via: 2 i-0469c5eaedeeea28e (eu-west-1)
strict-transport-security: max-age=31536000; includeSubDomains
x-originating-url: http://www.netflix.com/ichnaea/log
x-netflix.nfstatus: 1_1
x-netflix.proxy.execution-time: 8
DNS

141.181.214.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

141.181.214.52.in-addr.arpa

IN PTR

Response

141.181.214.52.in-addr.arpa

IN PTR

ec2-52-214-181-141 eu-west-1compute amazonawscom
DNS

www.msn.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

www.msn.com

IN A

Response

www.msn.com

IN CNAME

www-msn-com.a-0003.a-msedge.net

www-msn-com.a-0003.a-msedge.net

IN CNAME

a-0003.a-msedge.net

a-0003.a-msedge.net

IN A

204.79.197.203
GET

https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

MicrosoftEdgeCP.exe

Remote address:

204.79.197.203:443

Request

GET /spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A10%3A02+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=55BB77B4B0864BD588FF59273427E6CE.RefC=2024-04-04T13:10:02Z; MUIDB=0E722434F9A769CF0BAC3063F82C6844

Response

HTTP/2.0 200

cache-control: max-age=0, private
content-type: text/html; charset=utf-8
set-cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly
set-cookie: _C_Auth=
set-cookie: _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C; domain=.msn.com; path=/; httponly
access-control-allow-methods: HEAD,GET,OPTIONS
x-ceto-origin-forwardonerror: https://staticview.msn.com
content-security-policy: child-src 'self';connect-src 'self' *.mavideo.microsoft.com arc.msn.com assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn browser.events.data.msn.com browser.events.data.msn.cn browser.events.data.microsoftstart.com browser.events.data.microsoftstart.cn business.bing.com/api/ events-sandbox.data.msn.com events-sandbox.data.msn.cn events-sandbox.data.microsoftstart.com events-sandbox.data.microsoftstart.cn finance-services.msn.com https://bingretailmsndata.azureedge.net/msndata/ https://petrol.office.microsoft.com/v1/feedback https://privacyportal.onetrust.com/request/v1/consentreceipts https://services.bingapis.com img-s-msn-com.akamaized.net login.microsoftonline.com notification.services.msn.com ris.api.iris.microsoft.com srtb.msn.com srtb.msn.cn usgov.business.bing.com/api/ www.bing.com/HPImageArchive.aspx www.bing.com/api/custom/opal/reco/ www.bing.com/api/v1/mediation/tracking www.bing.com/api/v1/mediation/trends www.bing.com/as/ www.bing.com/AS/Suggestions www.bing.com/AS/Suggestions/v2 www.bing.com/historyHandler www.bing.com/profile/history/data www.bing.com/retail/msn/api/shopcard www.bing.com/retailexp/msn/api/ www.bing.com/retailexpdata/msndata/ www.bing.com/th www.msn.com www.microsoftstart.com *.oneservice.msn.com *.oneservice.msn.cn api.msn.com api.msn.cn ent-api.msn.com ent-api.msn.cn ppe-api.msn.com ppe-api.msn.cn graph.microsoft.com/v1.0/;default-src 'none';font-src 'self' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;frame-src login.live.com login.microsoftonline.com www.bing.com/shop www.bing.com/shop/halloween www.bing.com/videos/search;img-src https://* blob: data:;report-to csp-endpoint;style-src 'self' 'unsafe-inline' c.s-microsoft.com/mscc/ assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;worker-src 'self' 'report-sample';script-src 'self' 'report-sample' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn c.s-microsoft.com/mscc/ https://clarity.microsoft.com/js/879b55d3-7b96-457b-af7c-03a114c2ae20 platform.bing.com/geo/AutoSuggest/v1 www.bing.com/as/ www.bing.com/s/as/ 'unsafe-inline'
x-robots-tag: noindex
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-ua-compatible: IE=Edge;chrome=1
x-fabric-cluster: pmeprodneu
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]},{"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://deff.nelreports.net/api/report"}]}
strict-transport-security: max-age=1209600; includeSubDomains; preload
x-ceto-ref: 660f6dcd514e40c48a3f1ed12c775d20|AFD:32B4855397F84932BE69C1A3FE503C9A|2024-04-05T03:19:41.814Z
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 32B4855397F84932BE69C1A3FE503C9A Ref B: LON04EDGE0817 Ref C: 2024-04-05T03:19:41Z
date: Fri, 05 Apr 2024 03:19:41 GMT
GET

https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

MicrosoftEdgeCP.exe

Remote address:

204.79.197.203:443

Request

GET /bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+05+2024+03%3A19%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=55BB77B4B0864BD588FF59273427E6CE.RefC=2024-04-04T13:10:02Z; MUIDB=0E722434F9A769CF0BAC3063F82C6844

Response

HTTP/2.0 200

cache-control: no-cache, no-store, no-transform
content-length: 70
content-type: text/cache-manifest
content-encoding: gzip
content-md5: Rqmsx87pIMK1GFYNCRhAAQ==
last-modified: Mon, 26 Jul 2021 22:20:05 GMT
etag: 0x8D9508385701DBF
vary: Origin
x-ms-request-id: 8e5159e9-801e-003b-4b75-fc6eb8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.16.167.20,b=53457782,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.16.167.20
akamai-request-id: 32fb376
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.14a71002.1712287183.32fb376
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 642CFB79C9B9476C9D41C97B11ED26B7 Ref B: LON04EDGE0817 Ref C: 2024-04-05T03:19:43Z
date: Fri, 05 Apr 2024 03:19:42 GMT
GET

https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

MicrosoftEdgeCP.exe

Remote address:

204.79.197.203:443

Request

GET /spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: _C_Auth=; USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+05+2024+03%3A19%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=55BB77B4B0864BD588FF59273427E6CE.RefC=2024-04-04T13:10:02Z; MUIDB=0E722434F9A769CF0BAC3063F82C6844

Response

HTTP/2.0 200

cache-control: max-age=0, private
content-type: text/html; charset=utf-8
set-cookie: _C_ETH=1; expires=Thu, 04 Apr 2024 03:19:43 GMT; domain=.msn.com; path=/; secure; httponly
set-cookie: _C_Auth=
set-cookie: _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C; domain=.msn.com; path=/; httponly
access-control-allow-methods: HEAD,GET,OPTIONS
x-ceto-origin-forwardonerror: https://staticview.msn.com
content-security-policy: child-src 'self';connect-src 'self' *.mavideo.microsoft.com arc.msn.com assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn browser.events.data.msn.com browser.events.data.msn.cn browser.events.data.microsoftstart.com browser.events.data.microsoftstart.cn business.bing.com/api/ events-sandbox.data.msn.com events-sandbox.data.msn.cn events-sandbox.data.microsoftstart.com events-sandbox.data.microsoftstart.cn finance-services.msn.com https://bingretailmsndata.azureedge.net/msndata/ https://petrol.office.microsoft.com/v1/feedback https://privacyportal.onetrust.com/request/v1/consentreceipts https://services.bingapis.com img-s-msn-com.akamaized.net login.microsoftonline.com notification.services.msn.com ris.api.iris.microsoft.com srtb.msn.com srtb.msn.cn usgov.business.bing.com/api/ www.bing.com/HPImageArchive.aspx www.bing.com/api/custom/opal/reco/ www.bing.com/api/v1/mediation/tracking www.bing.com/api/v1/mediation/trends www.bing.com/as/ www.bing.com/AS/Suggestions www.bing.com/AS/Suggestions/v2 www.bing.com/historyHandler www.bing.com/profile/history/data www.bing.com/retail/msn/api/shopcard www.bing.com/retailexp/msn/api/ www.bing.com/retailexpdata/msndata/ www.bing.com/th www.msn.com www.microsoftstart.com *.oneservice.msn.com *.oneservice.msn.cn api.msn.com api.msn.cn ent-api.msn.com ent-api.msn.cn ppe-api.msn.com ppe-api.msn.cn graph.microsoft.com/v1.0/;default-src 'none';font-src 'self' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;frame-src login.live.com login.microsoftonline.com www.bing.com/shop www.bing.com/shop/halloween www.bing.com/videos/search;img-src https://* blob: data:;report-to csp-endpoint;style-src 'self' 'unsafe-inline' c.s-microsoft.com/mscc/ assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;worker-src 'self' 'report-sample';script-src 'self' 'report-sample' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn c.s-microsoft.com/mscc/ https://clarity.microsoft.com/js/879b55d3-7b96-457b-af7c-03a114c2ae20 platform.bing.com/geo/AutoSuggest/v1 www.bing.com/as/ www.bing.com/s/as/ 'unsafe-inline'
x-robots-tag: noindex
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-ua-compatible: IE=Edge;chrome=1
x-fabric-cluster: pmeprodneu
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]},{"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://deff.nelreports.net/api/report"}]}
strict-transport-security: max-age=1209600; includeSubDomains; preload
x-ceto-ref: 660f6dcfbadf4c328e7ff34d2e88661a|AFD:BA03098C26FF464EB5B03E76390F207D|2024-04-05T03:19:43.151Z
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BA03098C26FF464EB5B03E76390F207D Ref B: LON04EDGE0817 Ref C: 2024-04-05T03:19:43Z
date: Fri, 05 Apr 2024 03:19:42 GMT
GET

https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

MicrosoftEdgeCP.exe

Remote address:

204.79.197.203:443

Request

GET /bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+05+2024+03%3A19%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=55BB77B4B0864BD588FF59273427E6CE.RefC=2024-04-04T13:10:02Z; MUIDB=0E722434F9A769CF0BAC3063F82C6844

Response

HTTP/2.0 200

cache-control: no-cache, no-store, no-transform
content-length: 70
content-type: text/cache-manifest
content-encoding: gzip
content-md5: Rqmsx87pIMK1GFYNCRhAAQ==
last-modified: Mon, 26 Jul 2021 22:20:05 GMT
etag: 0x8D9508385701DBF
vary: Origin
x-ms-request-id: 8e5159e9-801e-003b-4b75-fc6eb8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.16.167.20,b=53458297,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0 , cdntime; dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.16.167.20
akamai-request-id: 32fb579
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.14a71002.1712287183.32fb579
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 952CACD50EC34AF1B4D973A5A5E4D5E6 Ref B: LON04EDGE0817 Ref C: 2024-04-05T03:19:43Z
date: Fri, 05 Apr 2024 03:19:42 GMT
DNS

browser.events.data.msn.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

browser.events.data.msn.com

IN A

Response

browser.events.data.msn.com

IN CNAME

global.asimov.events.data.trafficmanager.net

global.asimov.events.data.trafficmanager.net

IN CNAME

onedscolprdeus18.eastus.cloudapp.azure.com

onedscolprdeus18.eastus.cloudapp.azure.com

IN A

20.42.73.30
POST

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

MicrosoftEdgeCP.exe

Remote address:

20.42.73.30:443

Request

POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 3738
cache-control: no-cache
cookie: USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A10%3A02+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C

Response

HTTP/2.0 200

content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=4994d98ea03846a3afa45bdc5853da34&HASH=4994&LV=202404&V=4&LU=1712287182671; Domain=.microsoft.com; Expires=Sat, 05 Apr 2025 03:19:42 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=3881616bedee49a2bacbb51c99b554c1; Domain=.microsoft.com; Expires=Fri, 05 Apr 2024 03:49:42 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1671
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Fri, 05 Apr 2024 03:19:42 GMT
POST

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

MicrosoftEdgeCP.exe

Remote address:

20.42.73.30:443

Request

POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 4204
cache-control: no-cache
cookie: USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+05+2024+03%3A19%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C

Response

HTTP/2.0 200

content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=a9f609acd7f148529a16c0a733b894e1&HASH=a9f6&LV=202404&V=4&LU=1712287183030; Domain=.microsoft.com; Expires=Sat, 05 Apr 2025 03:19:43 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=d942fb1ec2644fcdbecb75385a1c50d6; Domain=.microsoft.com; Expires=Fri, 05 Apr 2024 03:49:43 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 2030
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Fri, 05 Apr 2024 03:19:42 GMT
POST

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

MicrosoftEdgeCP.exe

Remote address:

20.42.73.30:443

Request

POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 3595
cache-control: no-cache
cookie: USRLOC=; MUID=0E722434F9A769CF0BAC3063F82C6844; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+05+2024+03%3A19%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=20675FAD51276C6D0DF64BF550166D2C

Response

HTTP/2.0 200

content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=995d7919a3854e68a6c9a7889fa5151f&HASH=995d&LV=202404&V=4&LU=1712287183030; Domain=.microsoft.com; Expires=Sat, 05 Apr 2025 03:19:43 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=30977e472f724f70b8d6ec0bb55ad0b1; Domain=.microsoft.com; Expires=Fri, 05 Apr 2024 03:49:43 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 2030
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Fri, 05 Apr 2024 03:19:42 GMT
DNS

30.73.42.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

30.73.42.20.in-addr.arpa

IN PTR

Response
GET

https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /AS/API/IEOneBox/V2/Init?setlang=en-US HTTP/2.0
host: www.bing.com
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
x-device-enableregulatorypsm: 0
x-device-enablecpsm: 0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-length: 16594
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd076294b74a3fc07eb4287c20e
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-ua-compatible: IE=edge
date: Fri, 05 Apr 2024 03:19:44 GMT
set-cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=2CD15817B2FE653B32BC4C4FB32764B5; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/; HttpOnly
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/
set-cookie: SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/
set-cookie: SRCHUSR=DOB=20240405; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/
set-cookie: _SS=SID=20EE577EB91D67891F9A4326B8C4662A; domain=.bing.com; path=/
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a75d68
GET

https://www.bing.com/rb/1b/cir3,ortl,cc,nc/LnOYYBJP0qbrvbM8Vd1L9Iyk0wM.css?bu=C9wImQOGBLQJnQiHCLoGWlqiBFo

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rb/1b/cir3,ortl,cc,nc/LnOYYBJP0qbrvbM8Vd1L9Iyk0wM.css?bu=C9wImQOGBLQJnQiHCLoGWlqiBFo HTTP/2.0
host: www.bing.com
accept: text/css, */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en; _SS=SID=20EE577EB91D67891F9A4326B8C4662A; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

content-length: 4898
content-type: text/css; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Wed, 31 May 2023 10:25:11 GMT
vary: Accept-Encoding
x-eventid: 660b05400ce8417faf291104744ed31b
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a75e6e
GET

https://www.bing.com/rb/1b/cir3,ortl,cc,nc/cT7LSqeYsA-fhqiDwrrlzd8qEkQ.css?bu=BsoCQrACT1rMAg

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rb/1b/cir3,ortl,cc,nc/cT7LSqeYsA-fhqiDwrrlzd8qEkQ.css?bu=BsoCQrACT1rMAg HTTP/2.0
host: www.bing.com
accept: text/css, */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en; _SS=SID=20EE577EB91D67891F9A4326B8C4662A; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

content-length: 3509
content-type: text/css; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Thu, 07 Dec 2023 22:46:12 GMT
vary: Accept-Encoding
x-eventid: 660b07f69c9e4640b4b050d306811d18
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a75e79
GET

https://www.bing.com/rb/47/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rb/47/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg HTTP/2.0
host: www.bing.com
accept: text/css, */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en; _SS=SID=20EE577EB91D67891F9A4326B8C4662A; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

content-length: 1240
content-type: text/css; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Mon, 11 Dec 2023 15:16:28 GMT
vary: Accept-Encoding
x-eventid: 660b056c61f74d1d9e05aa9afd036b6e
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a75e78
GET

https://www.bing.com/rb/5q/jnc,nj/HKB-kgp3JM5DBDqI9RDZjIcIVgc.js?bu=D6Ar3Cn8Aewp7inwKfIpmSqnK-8qiymFEYsrjCfKKg

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rb/5q/jnc,nj/HKB-kgp3JM5DBDqI9RDZjIcIVgc.js?bu=D6Ar3Cn8Aewp7inwKfIpmSqnK-8qiymFEYsrjCfKKg HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-length: 17838
content-type: application/x-javascript; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Wed, 03 Apr 2024 09:42:05 GMT
vary: Accept-Encoding
x-eventid: 660e1380140f4f0daf846fae901e23b7
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a75e7e
GET

https://www.bing.com/rp/Dj6m3cC0PNbgt98rgkHoHGstYio.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/Dj6m3cC0PNbgt98rgkHoHGstYio.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-type: text/javascript; charset=utf-8
content-md5: SRsgw8kTwl4LeWgQUM+qRA==
last-modified: Tue, 16 Jan 2024 20:09:27 GMT
etag: 0x8DC16CF0AE42483
x-ms-request-id: da11e0f6-a01e-003b-27b6-4a008e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 3142
akamai-amd-bc-debug: [a=2.16.128.54,b=296808726,c=c,d=1712281941,h=200,k=1,l=0,n=GB_EN_LONDON,o=20940,r=1,p=3142]
date: Fri, 05 Apr 2024 03:19:44 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a75f3e
GET

https://www.bing.com/rp/spBac3V4vy6E9Xxx8Pvlb-L-Vro.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/spBac3V4vy6E9Xxx8Pvlb-L-Vro.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-length: 2760
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: AZfaW6K1ZDczsEYa2OLZ8A==
last-modified: Thu, 15 Sep 2022 21:38:28 GMT
etag: 0x8DA9762A0DFF876
x-ms-request-id: 2a93bba5-101e-004c-1419-75d51a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=95.101.143.156,b=72906779,c=c,d=1712013599,h=200,k=0,l=1,n=GB_EN_LONDON,o=20940,r=1,p=2760]
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a760ff
GET

https://www.bing.com/rp/Tkj5rlaNmn5JbAkYaigycK39aFw.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/Tkj5rlaNmn5JbAkYaigycK39aFw.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-length: 31006
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: elodufKI4kAUbiNhMOJI5g==
last-modified: Thu, 15 Sep 2022 21:37:33 GMT
etag: 0x8DA97627FEA5ACC
x-ms-request-id: fb9106c2-701e-00ae-2a98-64e83b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=92.122.211.115,b=105452455,c=c,d=1712052906,h=200,k=1,l=13,n=GB_EN_LONDON,o=20940,r=14,p=31006,j=[[a=10.122.211.122,b=105452455,c=p,d=1712052906,h=200,k=1,l=11,m=0,r=13]]],[a=92.122.211.122,b=101813142,c=p,d=1712052906,h=200,k=2,l=2,n=GB_EN_LONDON,o=20940,r=4,p=31006]
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76104
GET

https://www.bing.com/rp/i476eID7RT9VAQ7qDtkZ2tZ0dfo.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/i476eID7RT9VAQ7qDtkZ2tZ0dfo.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Wed, 17 Aug 2022 06:31:10 GMT
etag: 0x8DA801A1341A440
cache-control: public, no-transform, max-age=431042
expires: Tue, 09 Apr 2024 11:17:08 GMT
akamai-grn: 0.46281102.1712230386.3b0da4df
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-type: application/x-javascript; charset=utf-8
content-md5: JZWqm4sGabq5PfrPtAnVUw==
x-ms-request-id: 450325fa-901e-0030-1c2e-64fbe5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 632
vary: Accept-Encoding
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76121
GET

https://www.bing.com/rp/5RmIFIiX75qwwE5OdyqWSFsRkhs.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/5RmIFIiX75qwwE5OdyqWSFsRkhs.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Thu, 15 Sep 2022 21:37:28 GMT
etag: 0x8DA97627CCE84DE
cache-control: public, no-transform, max-age=388740
expires: Tue, 09 Apr 2024 06:59:02 GMT
akamai-grn: 0.c68f655f.1712257202.d938bef
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-type: text/javascript; charset=utf-8
content-md5: WzAtIMszrWIpfOB89lI6IQ==
x-ms-request-id: 2bd3cdb4-801e-0015-1f13-b2f7e2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 7058
vary: Accept-Encoding
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76133
GET

https://www.bing.com/rp/N8lyyur8kll9YNIoNFQuJBEv_H4.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/N8lyyur8kll9YNIoNFQuJBEv_H4.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Thu, 15 Sep 2022 21:37:29 GMT
etag: 0x8DA97627DCE9E05
cache-control: public, no-transform, max-age=389535
expires: Sun, 07 Apr 2024 20:46:30 GMT
akamai-grn: 0.17ff1302.1712133255.a4c62f27
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-type: text/javascript; charset=utf-8
content-md5: oXvI3Qk3u73lh98ARq1ToQ==
x-ms-request-id: 7a16c9df-f01e-006d-0af3-d6541a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 56327
vary: Accept-Encoding
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76139
GET

https://www.bing.com/rp/QXfN_Y7LseAqg5dlom1InX47GZw.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/QXfN_Y7LseAqg5dlom1InX47GZw.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Thu, 15 Sep 2022 21:37:41 GMT
etag: 0x8DA976284BAB69A
cache-control: public, no-transform, max-age=429395
expires: Tue, 09 Apr 2024 16:14:29 GMT
akamai-grn: 0.4b281102.1712249874.13e79843
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-type: text/javascript; charset=utf-8
content-md5: 4Ai6vX+W/Ucmo50Tx0ycWw==
x-ms-request-id: 67ae1187-a01e-00e6-622d-a35077000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 12375
vary: Accept-Encoding
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76146
GET

https://www.bing.com/rp/70Hz038d6wZ4VS3OnPImOfuZGaA.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/70Hz038d6wZ4VS3OnPImOfuZGaA.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Thu, 15 Sep 2022 21:37:05 GMT
etag: 0x8DA97626F3D9618
cache-control: public, no-transform, max-age=36009
expires: Fri, 05 Apr 2024 06:05:43 GMT
akamai-grn: 0.59281102.1712261134.7e39ee6e
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-type: text/javascript; charset=utf-8
content-md5: eCdaG+eg9DIBYLbtysd6xw==
x-ms-request-id: 73d7e981-901e-00b0-209f-3ba198000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 13768
vary: Accept-Encoding
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76148
GET

https://www.bing.com/rp/WONOVxCHWbB38gREhGQP7Lv2pKM.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/WONOVxCHWbB38gREhGQP7Lv2pKM.br.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Thu, 15 Sep 2022 21:37:52 GMT
etag: 0x8DA97628B56716C
cache-control: public, no-transform, max-age=24456
expires: Fri, 05 Apr 2024 06:04:10 GMT
akamai-grn: 0.92777b5c.1712272594.3cad96b
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-type: text/javascript; charset=utf-8
content-md5: UVPWyhoLk12x2ollesZ2qQ==
x-ms-request-id: fd1f3f5f-401e-0025-0913-a1492d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 3799
vary: Accept-Encoding
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76153
GET

https://www.bing.com/manifest/IEOneBox_V2.appcache?setlang=en-US

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /manifest/IEOneBox_V2.appcache?setlang=en-US HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287182798&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

content-length: 501
content-type: text/cache-manifest; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd0944f4a7e94d1c0b1e2a61fda
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 05 Apr 2024 03:19:44 GMT
set-cookie: SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76567
GET

https://www.bing.com/rp/Y26LIcmRz0EdnBtSjtN2P4pbrp4.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/Y26LIcmRz0EdnBtSjtN2P4pbrp4.br.js HTTP/2.0
host: www.bing.com
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287182798&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-length: 2511
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: AF62Xzz0LLf+cuj5lM5eHg==
last-modified: Fri, 08 Dec 2023 05:22:25 GMT
etag: 0x8DBF7ADA9D1A3D6
x-ms-request-id: 34427941-001e-008b-246b-704147000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=92.122.211.86,b=612280487,c=c,d=1712162911,h=200,k=2,l=0,n=GB_EN_LONDON,o=20940,r=2,p=2511]
date: Fri, 05 Apr 2024 03:19:44 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a76597
GET

https://www.bing.com/rp/fRSNKQanUHk53F1a1Bi8UA71Qt4.br.js

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /rp/fRSNKQanUHk53F1a1Bi8UA71Qt4.br.js HTTP/2.0
host: www.bing.com
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287182798&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-type: text/javascript; charset=utf-8
content-md5: +jWBJey2nJqR+pG7G7E28A==
last-modified: Wed, 17 Aug 2022 06:26:50 GMT
etag: 0x8DA801978517195
x-ms-request-id: fd971c6d-d01e-00a7-1026-4aade8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
content-encoding: gzip
content-length: 197
akamai-amd-bc-debug: [a=92.122.92.62,b=12954842,c=c,d=1711997935,h=200,k=1,l=0,n=GB_EN_LONDON,o=20940,r=1,p=197]
date: Fri, 05 Apr 2024 03:19:44 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a765c7
GET

https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /AS/API/IEOneBox/V2/Init?setlang=en-US HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287182798&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 16523
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd1a6874738b7fb3cd9e66d883e
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-ua-compatible: IE=edge
date: Fri, 05 Apr 2024 03:19:45 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287185.85a76604
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 440
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287182798&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd1f55e4db49a924d88719f9191
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:45 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287185.85a7668d
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=downloa&cc=US&setlang=en-US&cp=7&cvid=57b994b30db84828880d2e21d98fc8c8&ig=1c424a30236d4e3ba01b4bf59cb134b1

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=downloa&cc=US&setlang=en-US&cp=7&cvid=57b994b30db84828880d2e21d98fc8c8&ig=1c424a30236d4e3ba01b4bf59cb134b1 HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 296
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

content-length: 731
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: br
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 660f6dd1d8314b30b3e2f3a65d79002a
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 05 Apr 2024 03:19:45 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287185.85a766b5
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=download&cc=US&setlang=en-US&cp=8&cvid=57b994b30db84828880d2e21d98fc8c8&ig=be1d23fe512d4169a13cee8476fd4fdb

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=download&cc=US&setlang=en-US&cp=8&cvid=57b994b30db84828880d2e21d98fc8c8&ig=be1d23fe512d4169a13cee8476fd4fdb HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 368
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 200

content-length: 735
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: br
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 660f6dd3556147c491ad0baaa190a4ae
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 05 Apr 2024 03:19:47 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287187.85a77741
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 18875
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd605954ed880796c00a8508838
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:50 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287190.85a789d2
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 6701
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd727c44ad4a3c7057d5f483452
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:51 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287191.85a79331
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 11999
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd8775c46b38592da821692cdab
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:52 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287192.85a799bc
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 794
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6dd9b0494d87937577769176d302
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:53 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287193.85a7a35d
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 6006
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6ddaf411485ba58bb1c2d28dd5cf
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:54 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287194.85a7ab94
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 6072
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6ddba0c249c7817d98c98aede7eb
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:55 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287195.85a7b239
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 6026
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6ddd541e44d0a10d2aecfab11986
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:57 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287196.85a7ba9f
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 401
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6ddebc5749f991ef3f216b7a6400
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:58 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287198.85a7c2d0
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 492
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6ddfa6a9479cbdce3102cc7c7e4a
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:19:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287199.85a7ca2d
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 5429
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de0566c4446821d07d11d987874
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:00 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287200.85a7d29f
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 659
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de1f54f4cbfa25846a81f69fafb
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:01 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287201.85a7da7f
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 5482
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de2537a4b82b1f12225f1b1e5fc
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:02 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287202.85a7e1c1
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 1481
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de34e6a4a0ebdb82037bdb7b5d2
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:03 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287203.85a7e631
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 672
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de355f04726b2e87b03051f45db
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:03 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287203.85a7ec2c
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 5429
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de50e414c4a98418982abf64c18
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:05 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287205.85a7f58e
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 679
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de6aa914a29adbbd2e0eadfd30c
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:06 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287206.85a7fd52
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 930
cache-control: no-cache
cookie: MUID=2CD15817B2FE653B32BC4C4FB32764B5; _EDGE_S=F=1&SID=20EE577EB91D67891F9A4326B8C4662A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=9C7264B84C5448B9A0CDC2EF5AA772D1&dmnchg=1; SRCHUSR=DOB=20240405; SRCHHPGUSR=SRCHLANG=en&IPMH=301bdd61&IPMID=1712287182798; _SS=SID=20EE577EB91D67891F9A4326B8C4662A&CPID=1712287183216&AC=0&CPH=6ba94113; MUIDB=2CD15817B2FE653B32BC4C4FB32764B5

Response

HTTP/2.0 404

content-length: 24
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: br
vary: Accept-Encoding
x-eventid: 660f6de9c67547c9a5cb20d169efa36b
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Fri, 05 Apr 2024 03:20:09 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287209.85a80e0c
DNS

217.92.23.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

217.92.23.2.in-addr.arpa

IN PTR

Response

217.92.23.2.in-addr.arpa

IN PTR

a2-23-92-217deploystaticakamaitechnologiescom
GET

https://www.bing.com/partner/warmup.gif

MicrosoftEdgeCP.exe

Remote address:

2.23.92.217:443

Request

GET /partner/warmup.gif HTTP/2.0
host: www.bing.com
accept: */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-length: 43
content-type: image/gif
expires: -1
x-eventid: 660f6dd03a224079800ea751aae0ea94
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8FDA240DD73C4C11A4022158E2FA1DB3 Ref B: LON04EDGE1217 Ref C: 2024-04-05T03:19:44Z
date: Fri, 05 Apr 2024 03:19:44 GMT
set-cookie: MUID=221BCBEB05BF6D39055FDFB3045F6C2F; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=221BCBEB05BF6D39055FDFB3045F6C2F; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=01C360F12E0F630A045074A92FEF62AF; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 30-Apr-2025 03:19:44 GMT; path=/; HttpOnly
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287184.85a765c3
DNS

161.19.199.152.in-addr.arpa

Remote address:

8.8.8.8:53

Request

161.19.199.152.in-addr.arpa

IN PTR

Response
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
GET

https://contile.services.mozilla.com/v1/tiles

firefox.exe

Remote address:

34.117.237.239:443

Request

GET /v1/tiles HTTP/2.0
host: contile.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
DNS

content-signature-2.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

content-signature-2.cdn.mozilla.net

IN A

Response

content-signature-2.cdn.mozilla.net

IN CNAME

content-signature-chains.prod.autograph.services.mozaws.net

content-signature-chains.prod.autograph.services.mozaws.net

IN CNAME

prod.content-signature-chains.prod.webservices.mozgcp.net

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN AAAA

Response
DNS

shavar.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.services.mozilla.com

IN A

Response

shavar.services.mozilla.com

IN CNAME

shavar.prod.mozaws.net

shavar.prod.mozaws.net

IN A

54.245.32.185

shavar.prod.mozaws.net

IN A

44.239.148.246

shavar.prod.mozaws.net

IN A

52.10.78.57
DNS

push.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

push.services.mozilla.com

IN A

Response

push.services.mozilla.com

IN CNAME

autopush.prod.mozaws.net

autopush.prod.mozaws.net

IN A

34.107.243.93
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN A

Response

autopush.prod.mozaws.net

IN A

34.107.243.93
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN A

Response

shavar.prod.mozaws.net

IN A

44.239.148.246

shavar.prod.mozaws.net

IN A

52.10.78.57

shavar.prod.mozaws.net

IN A

54.245.32.185
DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN A

Response

firefox.settings.services.mozilla.com

IN CNAME

prod.remote-settings.prod.webservices.mozgcp.net

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:92a9::
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN AAAA

Response
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN AAAA

Response
GET

https://push.services.mozilla.com/

firefox.exe

Remote address:

34.107.243.93:443

Request

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MNG3pcoV1XhRUP0Ag3IHkQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

Response

HTTP/1.1 101 Switching Protocols

sec-websocket-accept: g6FNqydYG9TfbNEN9VL+bBo3kHc=
date: Fri, 05 Apr 2024 03:20:04 GMT
Via: 1.1 google
Upgrade: websocket
Connection: Upgrade
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

firefox-settings-attachments.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN A

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

185.32.245.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

185.32.245.54.in-addr.arpa

IN PTR

Response

185.32.245.54.in-addr.arpa

IN PTR

ec2-54-245-32-185 us-west-2compute amazonawscom
DNS

53.121.117.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

53.121.117.34.in-addr.arpa

IN PTR

Response

53.121.117.34.in-addr.arpa

IN PTR

5312111734bcgoogleusercontentcom
DNS

138.136.73.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

138.136.73.23.in-addr.arpa

IN PTR

Response

138.136.73.23.in-addr.arpa

IN PTR

a23-73-136-138deploystaticakamaitechnologiescom
DNS

200.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.197.79.204.in-addr.arpa

IN PTR

Response

200.197.79.204.in-addr.arpa

IN PTR

a-0001a-msedgenet
DNS

www.microsoft.com

MicrosoftEdge.exe

Remote address:

8.8.8.8:53

Request

www.microsoft.com

IN A

Response

www.microsoft.com

IN CNAME

www.microsoft.com-c-3.edgekey.net

www.microsoft.com-c-3.edgekey.net

IN CNAME

www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net

www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net

IN CNAME

e13678.dscb.akamaiedge.net

e13678.dscb.akamaiedge.net

IN A

173.222.13.219
GET

https://www.bing.com/cortanaassist/rules?cc=US&version=6

MicrosoftEdge.exe

Remote address:

2.23.92.217:443

Request

GET /cortanaassist/rules?cc=US&version=6 HTTP/2.0
host: www.bing.com
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
dnt: 1

Response

HTTP/2.0 404

cache-control: private
content-length: 51680
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-eventid: 660f6dfb23034452a18ecf3e43a03a84
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-error-page: 404-custom
x-ua-compatible: IE=edge
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 49F0C4FBBF6E48D399369BAEAF999E6D Ref B: LON04EDGE0916 Ref C: 2024-04-05T03:20:27Z
date: Fri, 05 Apr 2024 03:20:27 GMT
set-cookie: MUID=236D7367A7CC67FF2866673FA677667D; domain=.bing.com; expires=Wed, 30-Apr-2025 03:20:27 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=236D7367A7CC67FF2866673FA677667D; expires=Wed, 30-Apr-2025 03:20:27 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=2B3D62979A1E677402C276CF9BA56631&mkt=en-us; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 30-Apr-2025 03:20:27 GMT; path=/; HttpOnly
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Sun, 05-Apr-2026 03:20:27 GMT; path=/
set-cookie: SRCHUID=V=2&GUID=B7F9C4E575234C3F8D25F8FFDFC1499D&dmnchg=1; domain=.bing.com; expires=Sun, 05-Apr-2026 03:20:27 GMT; path=/
set-cookie: SRCHUSR=DOB=20240405; domain=.bing.com; expires=Sun, 05-Apr-2026 03:20:27 GMT; path=/
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Sun, 05-Apr-2026 03:20:27 GMT; path=/
set-cookie: _SS=SID=2B3D62979A1E677402C276CF9BA56631; domain=.bing.com; path=/
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.59281102.1712287227.85a88860
DNS

150.1.37.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

150.1.37.23.in-addr.arpa

IN PTR

Response

150.1.37.23.in-addr.arpa

IN PTR

a23-37-1-150deploystaticakamaitechnologiescom
DNS

219.13.222.173.in-addr.arpa

Remote address:

8.8.8.8:53

Request

219.13.222.173.in-addr.arpa

IN PTR

Response

219.13.222.173.in-addr.arpa

IN PTR

a173-222-13-219deploystaticakamaitechnologiescom
DNS

30.243.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

30.243.111.52.in-addr.arpa

IN PTR

Response
DNS

145.136.73.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

145.136.73.23.in-addr.arpa

IN PTR

Response

145.136.73.23.in-addr.arpa

IN PTR

a23-73-136-145deploystaticakamaitechnologiescom

54.76.138.123:443

https://logs.netflix.com/log/wwwhead/cl/2?fetchType=js&eventType=WebsiteDetect&modalView=nmLanding

tls, http

MicrosoftEdgeCP.exe

1.9kB
7.2kB
14
10

HTTP Request

GET https://logs.netflix.com/log/wwwhead/cl/2?fetchType=css&eventType=WebsiteDetect&modalView=nmLanding

HTTP Response

200

HTTP Request

GET https://logs.netflix.com/log/wwwhead/cl/2?fetchType=js&eventType=WebsiteDetect&modalView=nmLanding

HTTP Response

200
54.76.138.123:443

https://logs.netflix.com/log/www/cl/2

tls, http

MicrosoftEdgeCP.exe

11.8kB
12.7kB
25
19

HTTP Request

GET https://logs.netflix.com/log/wwwhead/cl/2?fetchType=js&eventType=WebsiteScreen&winw=816&winh=640&screenw=800&screenh=555&ratio=1

HTTP Response

200

HTTP Request

OPTIONS https://logs.netflix.com/log/www/cl/2

HTTP Response

200

HTTP Request

POST https://logs.netflix.com/log/www/cl/2

HTTP Response

200

HTTP Request

OPTIONS https://logs.netflix.com/log/www/cl/2

HTTP Response

200

HTTP Request

POST https://logs.netflix.com/log/www/cl/2

HTTP Response

200
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

tls, http

MicrosoftEdgeCP.exe

16.5kB
408.6kB
312
305

HTTP Request

GET https://assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css

HTTP Response

200

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/vlv3/7ca5b7c7-20aa-42a8-a278-f801b0d65fa1/da109ecd-e4f8-470a-af88-d3081b5472d4/NL-en-20240326-popsignuptwoweeks-perspective_alpha_website_small.jpg

HTTP Response

200

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

HTTP Response

206

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

HTTP Response

206
45.57.90.1:443

https://assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp.a1bcda71010575046231.css

tls, http

MicrosoftEdgeCP.exe

1.5kB
5.3kB
18
14

HTTP Request

GET https://assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp.a1bcda71010575046231.css

HTTP Response

200
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

tls, http

MicrosoftEdgeCP.exe

3.8kB
90.6kB
35
78

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png

HTTP Response

200

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif

HTTP Response

200

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

HTTP Response

206

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

HTTP Response

206
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg

tls, http

MicrosoftEdgeCP.exe

3.2kB
55.1kB
54
49

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg

HTTP Response

200
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png

tls, http

MicrosoftEdgeCP.exe

2.2kB
25.1kB
33
28

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png

HTTP Response

200
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png

tls, http

MicrosoftEdgeCP.exe

6.1kB
145.1kB
115
110

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png

HTTP Response

200
104.19.177.52:443

https://cdn.cookielaw.org/scripttemplates/otSDKStub.js

tls, http2

MicrosoftEdgeCP.exe

1.7kB
11.6kB
24
20

HTTP Request

GET https://cdn.cookielaw.org/scripttemplates/otSDKStub.js

HTTP Response

200
104.19.177.52:443

cdn.cookielaw.org

tls, http2

MicrosoftEdgeCP.exe

916 B
3.5kB
11
8
45.57.68.172:443

occ-0-2705-2706.1.nflxso.net

tls

MicrosoftEdgeCP.exe

860 B
3.4kB
12
10
45.57.68.172:443

https://occ-0-2705-2706.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55

tls, http

MicrosoftEdgeCP.exe

10.5kB
265.1kB
204
199

HTTP Request

GET https://occ-0-2705-2706.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55

HTTP Response

200
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

tls, http

MicrosoftEdgeCP.exe

36.0kB
1.0MB
747
740

HTTP Request

GET https://assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.429a6cfa1a395c2ebfa0.js

HTTP Response

200

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

HTTP Response

206

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

HTTP Response

206
45.57.90.1:443

https://assets.nflxext.com/ffe/siteui/acquisition/common/transparent_1x1.png

tls, http

MicrosoftEdgeCP.exe

1.7kB
4.2kB
18
12

HTTP Request

GET https://assets.nflxext.com/ffe/siteui/acquisition/common/transparent_1x1.png

HTTP Response

200
104.103.252.115:443

ae.nflximg.net

tls

MicrosoftEdgeCP.exe

649 B
4.6kB
7
8
104.103.252.115:443

https://ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22EG%22%2C%22region_code%22%3Anull%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%7D

tls, http

MicrosoftEdgeCP.exe

1.3kB
6.7kB
8
8

HTTP Request

GET https://ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22EG%22%2C%22region_code%22%3Anull%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%7D

HTTP Response

200
52.214.181.141:443

https://www.netflix.com/ichnaea/log

tls, http2

MicrosoftEdgeCP.exe

1.9kB
6.0kB
14
11

HTTP Request

OPTIONS https://www.netflix.com/ichnaea/log

HTTP Response

200

HTTP Response

200
52.214.181.141:443

www.netflix.com

tls, http2

MicrosoftEdgeCP.exe

868 B
4.4kB
10
8
204.79.197.203:443

www.msn.com

tls, http2

MicrosoftEdgeCP.exe

883 B
7.0kB
9
13
204.79.197.203:443

https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

tls, http2

MicrosoftEdgeCP.exe

3.8kB
152.4kB
31
169

HTTP Request

GET https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

HTTP Response

200

HTTP Request

GET https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

HTTP Response

200

HTTP Request

GET https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

HTTP Response

200

HTTP Request

GET https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

HTTP Response

200
20.42.73.30:443

browser.events.data.msn.com

tls, http2

MicrosoftEdgeCP.exe

899 B
6.9kB
9
11
20.42.73.30:443

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

tls, http2

MicrosoftEdgeCP.exe

14.5kB
9.0kB
27
21

HTTP Request

POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

HTTP Response

200

HTTP Request

POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

HTTP Request

POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712287181000&w=0&anoncknm=app_anon

HTTP Response

200

HTTP Response

200
2.23.92.217:443

www.bing.com

tls, http2

MicrosoftEdgeCP.exe

990 B
4.8kB
12
12
2.23.92.217:443

https://www.bing.com/AS/IEOneBox/xls.aspx

tls, http2

MicrosoftEdgeCP.exe

93.8kB
236.9kB
203
289

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

HTTP Response

200

HTTP Request

GET https://www.bing.com/rb/1b/cir3,ortl,cc,nc/LnOYYBJP0qbrvbM8Vd1L9Iyk0wM.css?bu=C9wImQOGBLQJnQiHCLoGWlqiBFo

HTTP Request

GET https://www.bing.com/rb/1b/cir3,ortl,cc,nc/cT7LSqeYsA-fhqiDwrrlzd8qEkQ.css?bu=BsoCQrACT1rMAg

HTTP Request

GET https://www.bing.com/rb/47/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg

HTTP Request

GET https://www.bing.com/rb/5q/jnc,nj/HKB-kgp3JM5DBDqI9RDZjIcIVgc.js?bu=D6Ar3Cn8Aewp7inwKfIpmSqnK-8qiymFEYsrjCfKKg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/rp/Dj6m3cC0PNbgt98rgkHoHGstYio.br.js

HTTP Response

200

HTTP Request

GET https://www.bing.com/rp/spBac3V4vy6E9Xxx8Pvlb-L-Vro.br.js

HTTP Request

GET https://www.bing.com/rp/Tkj5rlaNmn5JbAkYaigycK39aFw.br.js

HTTP Request

GET https://www.bing.com/rp/i476eID7RT9VAQ7qDtkZ2tZ0dfo.br.js

HTTP Request

GET https://www.bing.com/rp/5RmIFIiX75qwwE5OdyqWSFsRkhs.br.js

HTTP Request

GET https://www.bing.com/rp/N8lyyur8kll9YNIoNFQuJBEv_H4.br.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/rp/QXfN_Y7LseAqg5dlom1InX47GZw.br.js

HTTP Request

GET https://www.bing.com/rp/70Hz038d6wZ4VS3OnPImOfuZGaA.br.js

HTTP Request

GET https://www.bing.com/rp/WONOVxCHWbB38gREhGQP7Lv2pKM.br.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/manifest/IEOneBox_V2.appcache?setlang=en-US

HTTP Request

GET https://www.bing.com/rp/Y26LIcmRz0EdnBtSjtN2P4pbrp4.br.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/rp/fRSNKQanUHk53F1a1Bi8UA71Qt4.br.js

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=downloa&cc=US&setlang=en-US&cp=7&cvid=57b994b30db84828880d2e21d98fc8c8&ig=1c424a30236d4e3ba01b4bf59cb134b1

HTTP Response

404

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=download&cc=US&setlang=en-US&cp=8&cvid=57b994b30db84828880d2e21d98fc8c8&ig=be1d23fe512d4169a13cee8476fd4fdb

HTTP Response

200

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404
2.23.92.217:443

www.bing.com

tls, http2

MicrosoftEdgeCP.exe

820 B
4.8kB
8
11
2.23.92.217:443

https://www.bing.com/partner/warmup.gif

tls, http2

MicrosoftEdgeCP.exe

1.0kB
5.9kB
8
13

HTTP Request

GET https://www.bing.com/partner/warmup.gif

HTTP Response

200
34.117.237.239:443

https://contile.services.mozilla.com/v1/tiles

tls, http2

firefox.exe

1.8kB
6.3kB
15
19

HTTP Request

GET https://contile.services.mozilla.com/v1/tiles
34.160.144.191:443

content-signature-2.cdn.mozilla.net

tls

firefox.exe

1.6kB
4.2kB
15
16
54.245.32.185:443

shavar.services.mozilla.com

tls

firefox.exe

2.2kB
3.7kB
10
9
34.149.100.209:443

https://firefox.settings.services.mozilla.com/v1/

tls, http2

firefox.exe

2.0kB
6.5kB
17
20

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/
34.107.243.93:443

https://push.services.mozilla.com/

tls, http

firefox.exe

1.9kB
4.5kB
12
12

HTTP Request

GET https://push.services.mozilla.com/

HTTP Response

101
34.149.100.209:443

firefox.settings.services.mozilla.com

tls

firefox.exe

1.1kB
3.9kB
12
10
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

1.6kB
12.7kB
15
23
127.0.0.1:50853

firefox.exe
127.0.0.1:50861

firefox.exe
204.79.197.200:443

ieonline.microsoft.com

tls, http2

MicrosoftEdge.exe

1.2kB
8.1kB
15
14
2.23.92.217:443

https://www.bing.com/cortanaassist/rules?cc=US&version=6

tls, http2

MicrosoftEdge.exe

3.2kB
59.8kB
54
51

HTTP Request

GET https://www.bing.com/cortanaassist/rules?cc=US&version=6

HTTP Response

404
2.23.92.217:443

www.bing.com

tls, http2

MicrosoftEdge.exe

1.1kB
4.8kB
14
12

8.8.8.8:53

logs.netflix.com

dns

MicrosoftEdgeCP.exe

62 B
249 B
1
1

DNS Request

logs.netflix.com

DNS Response

54.76.138.123

3.255.31.202

54.217.229.70
8.8.8.8:53

cdn.cookielaw.org

dns

MicrosoftEdgeCP.exe

63 B
95 B
1
1

DNS Request

cdn.cookielaw.org

DNS Response

104.19.177.52

104.19.178.52
8.8.8.8:53

assets.nflxext.com

dns

MicrosoftEdgeCP.exe

64 B
96 B
1
1

DNS Request

assets.nflxext.com

DNS Response

45.57.90.1

45.57.91.1
8.8.8.8:53

occ-0-2705-2706.1.nflxso.net

dns

MicrosoftEdgeCP.exe

74 B
106 B
1
1

DNS Request

occ-0-2705-2706.1.nflxso.net

DNS Response

45.57.68.172

45.57.68.157
8.8.8.8:53

52.177.19.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

52.177.19.104.in-addr.arpa
8.8.8.8:53

123.138.76.54.in-addr.arpa

dns

72 B
135 B
1
1

DNS Request

123.138.76.54.in-addr.arpa
8.8.8.8:53

1.90.57.45.in-addr.arpa

dns

143 B
284 B
2
2

DNS Request

1.90.57.45.in-addr.arpa

DNS Request

115.252.103.104.in-addr.arpa
8.8.8.8:53

172.68.57.45.in-addr.arpa

dns

71 B
124 B
1
1

DNS Request

172.68.57.45.in-addr.arpa
8.8.8.8:53

ae.nflximg.net

dns

MicrosoftEdgeCP.exe

60 B
113 B
1
1

DNS Request

ae.nflximg.net

DNS Response

104.103.252.115
8.8.8.8:53

www.netflix.com

dns

MicrosoftEdgeCP.exe

61 B
254 B
1
1

DNS Request

www.netflix.com

DNS Response

52.214.181.141

54.170.196.176

54.246.79.9
8.8.8.8:53

141.181.214.52.in-addr.arpa

dns

73 B
137 B
1
1

DNS Request

141.181.214.52.in-addr.arpa
8.8.8.8:53

www.msn.com

dns

MicrosoftEdgeCP.exe

57 B
132 B
1
1

DNS Request

www.msn.com

DNS Response

204.79.197.203
8.8.8.8:53

browser.events.data.msn.com

dns

MicrosoftEdgeCP.exe

73 B
200 B
1
1

DNS Request

browser.events.data.msn.com

DNS Response

20.42.73.30
8.8.8.8:53

30.73.42.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

30.73.42.20.in-addr.arpa
8.8.8.8:53

217.92.23.2.in-addr.arpa

dns

70 B
133 B
1
1

DNS Request

217.92.23.2.in-addr.arpa
8.8.8.8:53

161.19.199.152.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

161.19.199.152.in-addr.arpa
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

contile.services.mozilla.com

DNS Response

34.117.237.239
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

contile.services.mozilla.com

DNS Response

34.117.237.239
8.8.8.8:53

content-signature-2.cdn.mozilla.net

dns

firefox.exe

81 B
235 B
1
1

DNS Request

content-signature-2.cdn.mozilla.net

DNS Response

34.160.144.191
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
155 B
1
1

DNS Request

contile.services.mozilla.com
8.8.8.8:53

shavar.services.mozilla.com

dns

firefox.exe

73 B
157 B
1
1

DNS Request

shavar.services.mozilla.com

DNS Response

54.245.32.185

44.239.148.246

52.10.78.57
8.8.8.8:53

push.services.mozilla.com

dns

firefox.exe

71 B
125 B
1
1

DNS Request

push.services.mozilla.com

DNS Response

34.107.243.93
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
119 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

34.160.144.191
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
86 B
1
1

DNS Request

autopush.prod.mozaws.net

DNS Response

34.107.243.93
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
116 B
1
1

DNS Request

shavar.prod.mozaws.net

DNS Response

44.239.148.246

52.10.78.57

54.245.32.185
8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
161 B
1
1

DNS Request

firefox.settings.services.mozilla.com

DNS Response

34.149.100.209
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
131 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

2600:1901:0:92a9::
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
155 B
1
1

DNS Request

autopush.prod.mozaws.net
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
153 B
1
1

DNS Request

shavar.prod.mozaws.net
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
110 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.149.100.209
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
187 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

firefox-settings-attachments.cdn.mozilla.net

dns

firefox.exe

90 B
177 B
1
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net

DNS Response

34.117.121.53
8.8.8.8:53

attachments.prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

106 B
122 B
1
1

DNS Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.117.121.53
8.8.8.8:53

attachments.prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

106 B
199 B
1
1

DNS Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

185.32.245.54.in-addr.arpa

dns

72 B
135 B
1
1

DNS Request

185.32.245.54.in-addr.arpa
8.8.8.8:53

53.121.117.34.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

53.121.117.34.in-addr.arpa
8.8.8.8:53

138.136.73.23.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

138.136.73.23.in-addr.arpa
8.8.8.8:53

200.197.79.204.in-addr.arpa

dns

73 B
106 B
1
1

DNS Request

200.197.79.204.in-addr.arpa
8.8.8.8:53

www.microsoft.com

dns

MicrosoftEdge.exe

63 B
230 B
1
1

DNS Request

www.microsoft.com

DNS Response

173.222.13.219
8.8.8.8:53

150.1.37.23.in-addr.arpa

dns

70 B
133 B
1
1

DNS Request

150.1.37.23.in-addr.arpa
8.8.8.8:53

219.13.222.173.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

219.13.222.173.in-addr.arpa
8.8.8.8:53

30.243.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

30.243.111.52.in-addr.arpa
8.8.8.8:53

145.136.73.23.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

145.136.73.23.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\2TT8RSZ7\edgecompatviewlist[1].xml

Filesize
74KB

MD5
d4fc49dc14f63895d997fa4940f24378

SHA1
3efb1437a7c5e46034147cbbc8db017c69d02c31

SHA256
853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1

SHA512
cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

Filesize
7KB

MD5
c460716b62456449360b23cf5663f275

SHA1
06573a83d88286153066bae7062cc9300e567d92

SHA256
0ec0f16f92d876a9c1140d4c11e2b346a9292984d9a854360e54e99fdcd99cc0

SHA512
476bc3a333aace4c75d9a971ef202d5889561e10d237792ca89f8d379280262ce98cf3d4728460696f8d7ff429a508237764bf4a9ccb59fd615aee07bdcadf30

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\00JV2NUH\suggestions[1].en-US

Filesize
17KB

MD5
5a34cb996293fde2cb7a4ac89587393a

SHA1
3c96c993500690d1a77873cd62bc639b3a10653f

SHA256
c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

SHA512
e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DFD91554F3BF5085E9.TMP

Filesize
16KB

MD5
a2a1a2182dce8c7d448394552424e79a

SHA1
692abab7ce4b74655d1518b8e280e6d0ba2a0308

SHA256
b36daf149edcdf4d741a8b491d00a197b1d745ff2779230911443e1c51a0ac36

SHA512
41607e3cf71e3d7a7354ceccdc3b8a8a5c15937396c811f7a270e9d32ab985e3e27030b1f24e9d3386b0b245363e7442df8c291a36bc929440b18ef12437dcf2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\db\data.safe.bin

Filesize
9KB

MD5
90b131b1fab8ced3ba609a6cc75786ff

SHA1
c35d91aac2971b7fb9fe10849523c95dee8fb47f

SHA256
624eb1e384a1e6da6eea6941a0b4de4680bf1cebbffb109537d56f473e328db8

SHA512
a83a6560f58b35f95fe079d8fbd5e313b5acc8444048bf87c21e14f86fac1a5ec149abc6f57fd4f53830f40bb77e679e61794e7aeda93318396ddca3a91467e1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\pending_pings\0d073bc8-1017-44ab-b6ca-acf4d9a87fb5

Filesize
734B

MD5
d9c8940460e214dba55ccbbdb260ca2b

SHA1
ed32fb62dc2d27c76a9110a4f025ff2b089dd742

SHA256
3f5a106541525f04be666811a538cf511c32303efa2a6ce607e27672006cf515

SHA512
486779b63d79a7737ef28446cca0341aad124234e141699000c59eaab3f3cc3c3b899f42f83ce2d11049d88382a622b251e92afecf3fdb17995d15db677849ce

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

Filesize
6KB

MD5
b87b7ba8c98ba6397f949d9fda772fe1

SHA1
239f08168db3d61a411e6b96430b9b68aa46a329

SHA256
6536244ed3e3016fcd8548848ac148ecc4a92c139dad542704ad58513521061d

SHA512
c65989472b41eebf763d90dca15770e33f106a066507fa179da4c5137f3ca3b92539beee93e535dea0c889d250f3214ac5c630f8785f52743f52924d3df7df84

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionCheckpoints.json

Filesize
259B

MD5
e6c20f53d6714067f2b49d0e9ba8030e

SHA1
f516dc1084cdd8302b3e7f7167b905e603b6f04f

SHA256
50a670fb78ff2712aae2c16d9499e01c15fddf24e229330d02a69b0527a38092

SHA512
462415b8295c1cdcac0a7cb16bb8a027ef36ae2ce0b061071074ac3209332a7eae71de843af4b96bbbd6158ca8fd5c18147bf9a79b8a7768a9a35edce8b784bf

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore.jsonlz4

Filesize
884B

MD5
b1fb71920c95c59290e69af13012fa56

SHA1
f35e46ef10842aa5abf24bdfa2c1cf515827bf27

SHA256
ef252a69fbbc5659c2871dd2a270a009b868b048ce599b3abf4cca1cdae6bd74

SHA512
642f4d76518e4681a614efe469e24f8690d728579f5a3b8be84fe92f0290255391841596bd8c57cc295f03ce6244f5cf9a1a0ab528d33e9e4c7718654dc3fce5

Download Submit
memory/812-0-0x000002BB1A520000-0x000002BB1A530000-memory.dmp

Filesize
64KB

Download
memory/812-16-0x000002BB1A900000-0x000002BB1A910000-memory.dmp

Filesize
64KB

Download
memory/812-35-0x000002BB1AAF0000-0x000002BB1AAF2000-memory.dmp

Filesize
8KB

Download
memory/4776-311-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-322-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-184-0x0000021CB61D0000-0x0000021CB62D0000-memory.dmp

Filesize
1024KB

Download
memory/4776-236-0x0000021CAE2E0000-0x0000021CAE2E2000-memory.dmp

Filesize
8KB

Download
memory/4776-307-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-308-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-309-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-310-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-141-0x0000021CAED20000-0x0000021CAED22000-memory.dmp

Filesize
8KB

Download
memory/4776-312-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-313-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-316-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-317-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-320-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-321-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-144-0x0000021CAF060000-0x0000021CAF062000-memory.dmp

Filesize
8KB

Download
memory/4776-323-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-324-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-319-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-318-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-315-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-314-0x0000021C9C8B0000-0x0000021C9C8C0000-memory.dmp

Filesize
64KB

Download
memory/4776-136-0x0000021CB22C0000-0x0000021CB22E0000-memory.dmp

Filesize
128KB

Download
memory/4776-137-0x0000021CAEAA0000-0x0000021CAEAA2000-memory.dmp

Filesize
8KB

Download
memory/4776-134-0x0000021CB1BF0000-0x0000021CB1BF2000-memory.dmp

Filesize
8KB

Download
memory/4776-132-0x0000021CAFDC0000-0x0000021CAFDC2000-memory.dmp

Filesize
8KB

Download
memory/4776-129-0x0000021CAF7C0000-0x0000021CAF7C2000-memory.dmp

Filesize
8KB

Download
memory/4776-127-0x0000021CAE530000-0x0000021CAE532000-memory.dmp

Filesize
8KB

Download
memory/4776-123-0x0000021CAE0B0000-0x0000021CAE0B2000-memory.dmp

Filesize
8KB

Download
memory/4776-116-0x000002149AC50000-0x000002149AD50000-memory.dmp

Filesize
1024KB

Download
memory/4776-113-0x0000021CAE760000-0x0000021CAE860000-memory.dmp

Filesize
1024KB

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request