Overview
overview
10Static
static
10zibll/acti...ent.js
windows7-x64
3zibll/acti...ent.js
windows10-2004-x64
3zibll/action/user.js
windows7-x64
3zibll/action/user.js
windows10-2004-x64
3zibll/go.js
windows7-x64
3zibll/go.js
windows10-2004-x64
3zibll/inc/...per.js
windows7-x64
3zibll/inc/...per.js
windows10-2004-x64
3zibll/inc/...ss.ps1
windows7-x64
3zibll/inc/...ss.ps1
windows10-2004-x64
3zibll/inc/...ass.js
windows7-x64
3zibll/inc/...ass.js
windows10-2004-x64
3zibll/inc/...ass.js
windows7-x64
3zibll/inc/...ass.js
windows10-2004-x64
3zibll/inc/...erg.js
windows7-x64
3zibll/inc/...erg.js
windows10-2004-x64
3zibll/inc/...ain.js
windows7-x64
3zibll/inc/...ain.js
windows10-2004-x64
3zibll/inc/...min.js
windows7-x64
3zibll/inc/...min.js
windows10-2004-x64
3zibll/inc/...ins.js
windows7-x64
3zibll/inc/...ins.js
windows10-2004-x64
3zibll/inc/...min.js
windows7-x64
3zibll/inc/...min.js
windows10-2004-x64
3zibll/inc/...ss.ps1
windows7-x64
3zibll/inc/...ss.ps1
windows10-2004-x64
3zibll/inc/...ss.ps1
windows7-x64
3zibll/inc/...ss.ps1
windows10-2004-x64
3zibll/inc/...ss.ps1
windows7-x64
3zibll/inc/...ss.ps1
windows10-2004-x64
3zibll/inc/...ss.ps1
windows7-x64
3zibll/inc/...ss.ps1
windows10-2004-x64
3Analysis
-
max time kernel
131s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/09/2024, 04:08 UTC
Behavioral task
behavioral1
Sample
zibll/action/comment.js
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
zibll/action/comment.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
zibll/action/user.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
zibll/action/user.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
zibll/go.js
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
zibll/go.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
zibll/inc/class/SignatureHelper.js
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
zibll/inc/class/SignatureHelper.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
zibll/inc/class/file-class.ps1
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
zibll/inc/class/file-class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
zibll/inc/class/qrcode.class.js
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
zibll/inc/class/qrcode.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
zibll/inc/class/sms-class.js
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
zibll/inc/class/sms-class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
zibll/inc/codestar-framework/assets/js/gutenberg.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
zibll/inc/codestar-framework/assets/js/gutenberg.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
zibll/inc/codestar-framework/assets/js/main.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
zibll/inc/codestar-framework/assets/js/main.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
zibll/inc/codestar-framework/assets/js/main.min.js
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
zibll/inc/codestar-framework/assets/js/main.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
zibll/inc/codestar-framework/assets/js/plugins.js
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
zibll/inc/codestar-framework/assets/js/plugins.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
zibll/inc/codestar-framework/assets/js/plugins.min.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
zibll/inc/codestar-framework/assets/js/plugins.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
zibll/inc/codestar-framework/classes/admin-options.class.ps1
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
zibll/inc/codestar-framework/classes/admin-options.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
zibll/inc/codestar-framework/classes/customize-options.class.ps1
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
zibll/inc/codestar-framework/classes/customize-options.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
zibll/inc/codestar-framework/classes/metabox-options.class.ps1
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
zibll/inc/codestar-framework/classes/metabox-options.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
zibll/inc/codestar-framework/classes/shortcode-options.class.ps1
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
zibll/inc/codestar-framework/classes/shortcode-options.class.ps1
Resource
win10v2004-20240802-en
General
-
Target
zibll/inc/class/sms-class.js
-
Size
16KB
-
MD5
2a7f95e1ee4dd0fd288f490804e245e1
-
SHA1
3fbd5ccdf2a4fc96891493d2fb23ae1fcff5428d
-
SHA256
2023c243e928b89830ed57da92db64e2e6d28870537d59724f7286baa8b3bd03
-
SHA512
c450431627e371a885aafe993752a53950f83f7a8eaa774caeca3e8202687d7bd4a8dd58b8ef37d9bc7882d9da598804d746615c7c15bd45ee9ecfb808a1fa6a
-
SSDEEP
192:5mkztLAvgEZNqPmLb0vmDEyf4ScjO7GMkBlUwPYjo7GwkCDDY4mIken9pNzbFeEC:1tIvP0ryrsiAPXoen9pNzsEbkh
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request154.239.44.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestg.bing.comIN AResponseg.bing.comIN CNAMEg-bing-com.ax-0001.ax-msedge.netg-bing-com.ax-0001.ax-msedge.netIN CNAMEax-0001.ax-msedge.netax-0001.ax-msedge.netIN A150.171.28.10ax-0001.ax-msedge.netIN A150.171.27.10
-
GEThttps://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=Remote address:150.171.28.10:443RequestGET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
ResponseHTTP/2.0 204
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1A0E20EFBF646F0F26DC3402BEDF6EAB; domain=.bing.com; expires=Fri, 26-Sep-2025 04:08:47 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C3B1BB38BC934FF2837EB19BC06C3B45 Ref B: LON04EDGE0907 Ref C: 2024-09-01T04:08:47Z
date: Sun, 01 Sep 2024 04:08:47 GMT
-
GEThttps://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=Remote address:150.171.28.10:443RequestGET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=1A0E20EFBF646F0F26DC3402BEDF6EAB
ResponseHTTP/2.0 204
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MSPTC=3rGUjD-RQibX-65b2qGAgYkDG3XjZoewTKDUzOjrgQw; domain=.bing.com; expires=Fri, 26-Sep-2025 04:08:47 GMT; path=/; Partitioned; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 481A503DFB804D3F93BD9CFD1A5BCB4B Ref B: LON04EDGE0907 Ref C: 2024-09-01T04:08:47Z
date: Sun, 01 Sep 2024 04:08:47 GMT
-
GEThttps://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=Remote address:150.171.28.10:443RequestGET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=1A0E20EFBF646F0F26DC3402BEDF6EAB; MSPTC=3rGUjD-RQibX-65b2qGAgYkDG3XjZoewTKDUzOjrgQw
ResponseHTTP/2.0 204
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 426E602EB60B4203B75ACC4B03C85FD0 Ref B: LON04EDGE0907 Ref C: 2024-09-01T04:08:48Z
date: Sun, 01 Sep 2024 04:08:47 GMT
-
Remote address:8.8.8.8:53Request71.31.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.86.106.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request56.126.166.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request65.139.73.23.in-addr.arpaIN PTRResponse65.139.73.23.in-addr.arpaIN PTRa23-73-139-65deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request81.144.22.2.in-addr.arpaIN PTRResponse81.144.22.2.in-addr.arpaIN PTRa2-22-144-81deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request58.99.105.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request11.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requesttse1.mm.bing.netIN AResponsetse1.mm.bing.netIN CNAMEmm-mm.bing.net.trafficmanager.netmm-mm.bing.net.trafficmanager.netIN CNAMEax-0001.ax-msedge.netax-0001.ax-msedge.netIN A150.171.27.10ax-0001.ax-msedge.netIN A150.171.28.10
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239340418577_1YCPJO6YBYEE06VWA&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239340418577_1YCPJO6YBYEE06VWA&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 1061732
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DB09AEDEA5204C09961FA4D12DF04E99 Ref B: LON04EDGE0713 Ref C: 2024-09-01T04:10:24Z
date: Sun, 01 Sep 2024 04:10:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239340418578_1AMTWIX1RFG5EZ1V6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239340418578_1AMTWIX1RFG5EZ1V6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 944920
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 291315B1863F404EB1D9E23426B66E02 Ref B: LON04EDGE0713 Ref C: 2024-09-01T04:10:24Z
date: Sun, 01 Sep 2024 04:10:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239360453482_1OGQPWVCF77KWCMMI&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239360453482_1OGQPWVCF77KWCMMI&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 561868
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B3D84E3CA4F545C3A18E15EE135A5E5C Ref B: LON04EDGE0713 Ref C: 2024-09-01T04:10:24Z
date: Sun, 01 Sep 2024 04:10:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239339388113_1UUFKEO9Y9AYGD8YG&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239339388113_1UUFKEO9Y9AYGD8YG&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 385954
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4063CE18484C484CAE58401F110F4ED8 Ref B: LON04EDGE0713 Ref C: 2024-09-01T04:10:24Z
date: Sun, 01 Sep 2024 04:10:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239339388114_1II63A1BYQ3WIA6DV&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239339388114_1II63A1BYQ3WIA6DV&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 349873
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E4F24683BFC9454EA618BFB1A887D476 Ref B: LON04EDGE0713 Ref C: 2024-09-01T04:10:24Z
date: Sun, 01 Sep 2024 04:10:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239360453660_1FJYLRXUGJ1KYC379&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239360453660_1FJYLRXUGJ1KYC379&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 405350
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 83FE90E1ED1444849EAB39EF60F1C85B Ref B: LON04EDGE0713 Ref C: 2024-09-01T04:10:25Z
date: Sun, 01 Sep 2024 04:10:24 GMT
-
Remote address:8.8.8.8:53Request10.27.171.150.in-addr.arpaIN PTRResponse
-
150.171.28.10:443https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=tls, http22.0kB 9.4kB 22 19
HTTP Request
GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=HTTP Response
204HTTP Request
GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=HTTP Response
204HTTP Request
GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=7cda17d8ce47464ab198a5f3e3a2ae5c&localId=w:F595C12A-38F0-79CD-7666-DE379BE74C7C&deviceId=6966569430194623&anid=HTTP Response
204 -
1.2kB 6.9kB 15 13
-
1.2kB 6.9kB 15 13
-
1.2kB 6.9kB 15 13
-
150.171.27.10:443https://tse1.mm.bing.net/th?id=OADD2.10239360453660_1FJYLRXUGJ1KYC379&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90tls, http2132.1kB 3.8MB 2787 2781
HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239340418577_1YCPJO6YBYEE06VWA&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239340418578_1AMTWIX1RFG5EZ1V6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239360453482_1OGQPWVCF77KWCMMI&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239339388113_1UUFKEO9Y9AYGD8YG&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239339388114_1II63A1BYQ3WIA6DV&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239360453660_1FJYLRXUGJ1KYC379&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Response
200 -
1.2kB 6.9kB 15 13
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
154.239.44.20.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-
56 B 148 B 1 1
DNS Request
g.bing.com
DNS Response
150.171.28.10150.171.27.10
-
71 B 157 B 1 1
DNS Request
71.31.126.40.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
13.86.106.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
56.126.166.20.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
65.139.73.23.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
81.144.22.2.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
58.99.105.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
11.227.111.52.in-addr.arpa
-
62 B 170 B 1 1
DNS Request
tse1.mm.bing.net
DNS Response
150.171.27.10150.171.28.10
-
72 B 158 B 1 1
DNS Request
10.27.171.150.in-addr.arpa