hxxp://Gmail[.]com

Analysis

max time kernel
298s
max time network
300s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
06/09/2024, 18:15 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://Gmail.com

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1772	msedge.exe
1772	msedge.exe
240	msedge.exe
240	msedge.exe
2456	msedge.exe
2456	msedge.exe
2640	identity_helper.exe
2640	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 240 wrote to memory of 248	240	msedge.exe	78
PID 240 wrote to memory of 248	240	msedge.exe	78
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 792	240	msedge.exe	79
PID 240 wrote to memory of 1772	240	msedge.exe	80
PID 240 wrote to memory of 1772	240	msedge.exe	80
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81
PID 240 wrote to memory of 772	240	msedge.exe	81

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://Gmail.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe9d2c3cb8,0x7ffe9d2c3cc8,0x7ffe9d2c3cd8
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3132 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3140 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3812 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,4544945822695618996,13624645191548033001,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1020 /prefetch:2
  2⤵
  PID:1840

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4784

Network

DNS

gmail.com

msedge.exe

Remote address:

8.8.8.8:53

Request

gmail.com

IN A

Response

gmail.com

IN A

142.250.102.18

gmail.com

IN A

142.250.102.19

gmail.com

IN A

142.250.102.83

gmail.com

IN A

142.250.102.17
DNS

gmail.com

msedge.exe

Remote address:

8.8.8.8:53

Request

gmail.com

IN A

Response

gmail.com

IN A

142.250.102.17

gmail.com

IN A

142.250.102.18

gmail.com

IN A

142.250.102.83

gmail.com

IN A

142.250.102.19
DNS

mail.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

mail.google.com

IN A

Response

mail.google.com

IN A

142.250.102.18

mail.google.com

IN A

142.250.102.17

mail.google.com

IN A

142.250.102.83

mail.google.com

IN A

142.250.102.19
DNS

ocsp.digicert.com

msedge.exe

Remote address:

8.8.8.8:53

Request

ocsp.digicert.com

IN A

Response

ocsp.digicert.com

IN CNAME

ocsp.edge.digicert.com

ocsp.edge.digicert.com

IN CNAME

fp2e7a.wpc.2be4.phicdn.net

fp2e7a.wpc.2be4.phicdn.net

IN CNAME

fp2e7a.wpc.phicdn.net

fp2e7a.wpc.phicdn.net

IN A

192.229.221.95
DNS

17.102.250.142.in-addr.arpa

msedge.exe

Remote address:

8.8.8.8:53

Request

17.102.250.142.in-addr.arpa

IN PTR

Response

17.102.250.142.in-addr.arpa

IN PTR

rb-in-f171e100net
DNS

play.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

play.google.com

IN A

Response

play.google.com

IN A

142.250.102.139

play.google.com

IN A

142.250.102.101

play.google.com

IN A

142.250.102.138

play.google.com

IN A

142.250.102.113

play.google.com

IN A

142.250.102.102

play.google.com

IN A

142.250.102.100
DNS

signaler-pa.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

signaler-pa.googleapis.com

IN A

Response

signaler-pa.googleapis.com

IN A

142.250.27.95

signaler-pa.googleapis.com

IN A

142.250.102.95
DNS

dns.msftncsi.com

msedge.exe

Remote address:

8.8.8.8:53

Request

dns.msftncsi.com

IN A
DNS

dns.msftncsi.com

msedge.exe

Remote address:

8.8.8.8:53

Request

dns.msftncsi.com

IN A
DNS

dns.msftncsi.com

msedge.exe

Remote address:

8.8.8.8:53

Request

dns.msftncsi.com

IN A
DNS

dns.msftncsi.com

msedge.exe

Remote address:

8.8.8.8:53

Request

dns.msftncsi.com

IN A
DNS

dns.msftncsi.com

msedge.exe

Remote address:

8.8.8.8:53

Request

dns.msftncsi.com

IN A
GET

http://gmail.com/

msedge.exe

Remote address:

142.250.102.17:80

Request

GET / HTTP/1.1
Host: gmail.com
Connection: keep-alive
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Location: https://mail.google.com/mail/u/0/
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 230
X-XSS-Protection: 0
Date: Fri, 06 Sep 2024 17:52:21 GMT
Expires: Fri, 06 Sep 2024 18:22:21 GMT
Cache-Control: public, max-age=1800
Content-Type: text/html; charset=UTF-8
Age: 1409
GET

https://mail.google.com/mail/u/0/

msedge.exe

Remote address:

142.250.102.18:443

Request

GET /mail/u/0/ HTTP/2.0
host: mail.google.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 204

content-security-policy: script-src 'report-sample' 'nonce-yceoQTR_cVxDiWwB3xuqDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://mail.google.com/mail/cspreport
content-security-policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 06 Sep 2024 18:16:25 GMT
server: GSE
server: GSE
GET

https://mail.google.com/mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646584613

msedge.exe

Remote address:

142.250.102.18:443

Request

GET /mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646584613 HTTP/2.0
host: mail.google.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "90.0.818.66"
sec-ch-ua-platform-version: "10.0"
sec-ch-ua-model:
sec-ch-ua-platform: "Windows"
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __Secure-ENID=22.SE=QRUKzWahqr34TytB4dC5WvOqDi4MwcOLPMkSYHPhcTUZ6GRbUylTfpfdj1qNfB2QJHoTcPPEePncX32222FqmDJzrPtoBtjhcLCumGTzHEU5Xktqyc4Z9L6PI23Jc2ws0pCPnNW0fGMe6o2TuA6r5dH-JjdntfrQoYQ4LPOVutAIsZE

Response

HTTP/2.0 204

content-security-policy: script-src 'report-sample' 'nonce-yceoQTR_cVxDiWwB3xuqDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://mail.google.com/mail/cspreport
content-security-policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 06 Sep 2024 18:16:25 GMT
server: GSE
server: GSE
GET

https://mail.google.com/mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646595743

msedge.exe

Remote address:

142.250.102.18:443

Request

GET /mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646595743 HTTP/2.0
host: mail.google.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "90.0.818.66"
sec-ch-ua-platform-version: "10.0"
sec-ch-ua-model:
sec-ch-ua-platform: "Windows"
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __Secure-ENID=22.SE=TEeHiM0CCZ4i23Vk2OsQmK-sy2PKkml2oxsZ4kT0W59WxqxxWGKACLYNtJ1GqLVri1tv4xNTTAagLtfSRrS0kPlKSM8ZsY8XOYsFzJM6UNbmoEEzelaMOrQimdgtTH9sOjUcFaVr9k3OyKBYEf2O1IiX6t8TmCcU_u0kKi2u4stYRHxAO584HEE

Response

HTTP/2.0 204

content-security-policy: script-src 'report-sample' 'nonce-yceoQTR_cVxDiWwB3xuqDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://mail.google.com/mail/cspreport
content-security-policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 06 Sep 2024 18:16:25 GMT
server: GSE
server: GSE
DNS

msedge.exe

Remote address:

142.250.102.18:443

Response

HTTP/2.0 204

content-security-policy: script-src 'report-sample' 'nonce-yceoQTR_cVxDiWwB3xuqDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://mail.google.com/mail/cspreport
content-security-policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 06 Sep 2024 18:16:25 GMT
server: GSE
server: GSE
DNS

msedge.exe

Remote address:

142.250.102.18:443

Response

HTTP/2.0 204

content-security-policy: script-src 'report-sample' 'nonce-yceoQTR_cVxDiWwB3xuqDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://mail.google.com/mail/cspreport
content-security-policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 06 Sep 2024 18:16:25 GMT
server: GSE
server: GSE
DNS

msedge.exe

Remote address:

142.250.102.18:443

Response

HTTP/2.0 204

content-security-policy: script-src 'report-sample' 'nonce-yceoQTR_cVxDiWwB3xuqDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://mail.google.com/mail/cspreport
content-security-policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 06 Sep 2024 18:16:25 GMT
server: GSE
server: GSE
GET

https://accounts.google.com/ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1

msedge.exe

Remote address:

142.250.102.84:443

Request

GET /ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1 HTTP/2.0
host: accounts.google.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://accounts.google.com/InteractiveLogin?continue=https://mail.google.com/mail/u/0/&emr=1&followup=https://mail.google.com/mail/u/0/&osid=1&passive=1209600&service=mail&ifkv=Ab5oB3pDLQr9b6XoQJYmtk6R5Xz_AmYzSjL9n_72J7v4LOGqc5x_KD8M5Fw1qWQbyr8QjJ9Lt0vOqg

msedge.exe

Remote address:

142.250.102.84:443

Request

GET /InteractiveLogin?continue=https://mail.google.com/mail/u/0/&emr=1&followup=https://mail.google.com/mail/u/0/&osid=1&passive=1209600&service=mail&ifkv=Ab5oB3pDLQr9b6XoQJYmtk6R5Xz_AmYzSjL9n_72J7v4LOGqc5x_KD8M5Fw1qWQbyr8QjJ9Lt0vOqg HTTP/2.0
host: accounts.google.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
sec-ch-ua-full-version: "90.0.818.66"
sec-ch-ua-arch: "x86"
sec-ch-ua-platform: "Windows"
sec-ch-ua-platform-version: "10.0"
sec-ch-ua-model: ""
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __Host-GAPS=1:EnhiF_DwLnJtGQYZlOkBlhmesrRA3Q:9al9C8CaIO-VGuZZ
GET

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=Ab5oB3oubTupXOHw48OdwfjGsj9vPs76252prHtvEdlcuAciSXOpOJD_m_1CIIylSoFs8OrJp7_nOg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1136881135%3A1725646550970752&ddm=0

msedge.exe

Remote address:

142.250.102.84:443

Request

GET /v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=Ab5oB3oubTupXOHw48OdwfjGsj9vPs76252prHtvEdlcuAciSXOpOJD_m_1CIIylSoFs8OrJp7_nOg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1136881135%3A1725646550970752&ddm=0 HTTP/2.0
host: accounts.google.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
sec-ch-ua-full-version: "90.0.818.66"
sec-ch-ua-arch: "x86"
sec-ch-ua-platform: "Windows"
sec-ch-ua-platform-version: "10.0"
sec-ch-ua-model: ""
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __Host-GAPS=1:EnhiF_DwLnJtGQYZlOkBlhmesrRA3Q:9al9C8CaIO-VGuZZ
DNS

18.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.102.250.142.in-addr.arpa

IN PTR

Response

18.102.250.142.in-addr.arpa

IN PTR

rb-in-f181e100net
DNS

www.google.com

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.250.27.99

www.google.com

IN A

142.250.27.104

www.google.com

IN A

142.250.27.105

www.google.com

IN A

142.250.27.103

www.google.com

IN A

142.250.27.106

www.google.com

IN A

142.250.27.147
DNS

95.27.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.27.250.142.in-addr.arpa

IN PTR

Response

95.27.250.142.in-addr.arpa

IN PTR

ra-in-f951e100net
DNS

self.events.data.microsoft.com

Remote address:

8.8.8.8:53

Request

self.events.data.microsoft.com

IN A

Response

self.events.data.microsoft.com

IN CNAME

self-events-data.trafficmanager.net

self-events-data.trafficmanager.net

IN CNAME

onedscolprdwus09.westus.cloudapp.azure.com

onedscolprdwus09.westus.cloudapp.azure.com

IN A

20.189.173.10
DNS

102.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

102.102.250.142.in-addr.arpa

IN PTR

Response

102.102.250.142.in-addr.arpa

IN PTR

rb-in-f1021e100net
DNS

102.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

102.102.250.142.in-addr.arpa

IN PTR
DNS

102.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

102.102.250.142.in-addr.arpa

IN PTR
DNS

172.214.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.214.232.199.in-addr.arpa

IN PTR

Response
DNS

139.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

139.102.250.142.in-addr.arpa

IN PTR

Response

139.102.250.142.in-addr.arpa

IN PTR

rb-in-f1391e100net
DNS

73.144.22.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

73.144.22.2.in-addr.arpa

IN PTR

Response

73.144.22.2.in-addr.arpa

IN PTR

a2-22-144-73deploystaticakamaitechnologiescom
DNS

10.173.189.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.173.189.20.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

94.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

94.102.250.142.in-addr.arpa

IN PTR

Response

94.102.250.142.in-addr.arpa

IN PTR

rb-in-f941e100net
DNS

33.135.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

33.135.221.88.in-addr.arpa

IN PTR

Response

33.135.221.88.in-addr.arpa

IN PTR

a88-221-135-33deploystaticakamaitechnologiescom
DNS

ctldl.windowsupdate.com

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A
DNS

ctldl.windowsupdate.com

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A
DNS

ctldl.windowsupdate.com

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A
DNS

ctldl.windowsupdate.com

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A
DNS

ctldl.windowsupdate.com

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A
DNS

84.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

84.102.250.142.in-addr.arpa

IN PTR

Response

84.102.250.142.in-addr.arpa

IN PTR

rb-in-f841e100net
DNS

fonts.gstatic.com

Remote address:

8.8.8.8:53

Request

fonts.gstatic.com

IN A

Response

fonts.gstatic.com

IN A

142.250.102.94
DNS

www.bing.com

Remote address:

8.8.8.8:53

Request

www.bing.com

IN A

Response

www.bing.com

IN CNAME

www-www.bing.com.trafficmanager.net

www-www.bing.com.trafficmanager.net

IN CNAME

www.bing.com.edgekey.net

www.bing.com.edgekey.net

IN CNAME

e86303.dscx.akamaiedge.net

e86303.dscx.akamaiedge.net

IN A

88.221.135.33

e86303.dscx.akamaiedge.net

IN A

95.101.143.34

e86303.dscx.akamaiedge.net

IN A

88.221.135.40

e86303.dscx.akamaiedge.net

IN A

88.221.135.57

e86303.dscx.akamaiedge.net

IN A

95.101.143.177

e86303.dscx.akamaiedge.net

IN A

88.221.135.11

e86303.dscx.akamaiedge.net

IN A

95.101.143.193

e86303.dscx.akamaiedge.net

IN A

88.221.135.51

e86303.dscx.akamaiedge.net

IN A

88.221.135.27
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

142.250.102.139:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: same-site
sec-fetch-dest: empty
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

142.250.102.139:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: same-site
sec-fetch-dest: empty
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.google.com/favicon.ico

msedge.exe

Remote address:

142.250.27.99:443

Request

GET /favicon.ico HTTP/2.0
host: www.google.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "90.0.818.66"
sec-ch-ua-platform-version: "10.0"
sec-ch-ua-model:
sec-ch-ua-platform: "Windows"
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/qbox?query=2&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=58154fca660d4259a5fae72dc9e19ae4&oit=4&cp=1&pgcl=1

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=2&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=58154fca660d4259a5fae72dc9e19ae4&oit=4&cp=1&pgcl=1 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 475
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46dae67f4598baaaa5e344667e8c
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-zgbFbsp+y8ZpXve/6D8WrY6m7gMGn3d5+q0lHgxJffs='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:54 GMT
set-cookie: MUID=217C68FA568B62D1003F7C08570263D9; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=217C68FA568B62D1003F7C08570263D9; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=2C775A4FF112673F3AE84EBDF09B6604; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=BBABD71D7C834C3188E11F8C17935D12&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=2C775A4FF112673F3AE84EBDF09B6604; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646554.2b7d3f8b
GET

https://www.bing.com/qbox?query=26&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=91cc757c265d46d884855842c14b49e2&oit=4&cp=2&pgcl=1

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=26&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=91cc757c265d46d884855842c14b49e2&oit=4&cp=2&pgcl=1 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 324
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46da02db422b96af6c1fa266a782
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-DDpGtbw378oqHVo0FxdGR6M4PwKyU8/8LiHywL/rcAE='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:54 GMT
set-cookie: MUID=277D68988E106BAB2A437C6A8F596A5F; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=277D68988E106BAB2A437C6A8F596A5F; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=159EDBAB4860677935CACF59492966FF; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=30148B4D11114706A36492FAC376F926&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:54 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=159EDBAB4860677935CACF59492966FF; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646554.2b7d40fb
GET

https://www.bing.com/qbox?query=262&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=7cd4d62bae4744a698680c92a6b03611&oit=4&cp=3&pgcl=1

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=7cd4d62bae4744a698680c92a6b03611&oit=4&cp=3&pgcl=1 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 316
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46db2a9e4ebeaed298bc8cd55b5e
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-bU4+sX2NLM3twXT/cTMYH5ZwR59hTgCIHszK/MlTtqg='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:55 GMT
set-cookie: MUID=00A246A2AE8C6D1725FB5250AF9D6CC8; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=00A246A2AE8C6D1725FB5250AF9D6CC8; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=28EDE5C9052B6BA32AE1F13B043A6A8B; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=855DDCC583BF4B3F9D6C6ACE287B4641&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:55 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=28EDE5C9052B6BA32AE1F13B043A6A8B; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646555.2b7d4233
GET

https://www.bing.com/qbox?query=262.&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=058e3a126efb4049873a0ed3342ef5f4&oit=4&cp=4&pgcl=1

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=058e3a126efb4049873a0ed3342ef5f4&oit=4&cp=4&pgcl=1 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 432
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46dc7c2e47bebc2baddaf6d7322a
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-pbw+VlZKWJnVOqTsO/PhTn3KWeleKbez8N/z1A8ZY2g='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:56 GMT
set-cookie: MUID=15AECEE38A5E63112EF5DA118B1562A8; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=15AECEE38A5E63112EF5DA118B1562A8; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=1D731D6A775F63A4094E09987614623C; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=3A57523DA6F143A7924F9EF8DF9FABA9&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=1D731D6A775F63A4094E09987614623C; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646556.2b7d44ce
GET

https://www.bing.com/qbox?query=33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e49e973806124dbabc972e1b7a7b99e9&oit=4&cp=2&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e49e973806124dbabc972e1b7a7b99e9&oit=4&cp=2&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 238
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46dc0de74869a31622a43092fa37
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-SywXugk9ESnvHMhOxYqXDvHbzWXPiJrbCOevB7b8VHw='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:56 GMT
set-cookie: MUID=2AD2AE3376986D9D3081BAC177116C6E; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=2AD2AE3376986D9D3081BAC177116C6E; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=09492E59E1F66A2A29D13AABE07F6BA7; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=020A40BB2112471B880B202648DA4A51&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:56 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=09492E59E1F66A2A29D13AABE07F6BA7; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646556.2b7d4603
GET

https://www.bing.com/qbox?query=33-&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=8447023ed7454f96badfabf98cc7ab39&oit=1&cp=3&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=33-&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=8447023ed7454f96badfabf98cc7ab39&oit=1&cp=3&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 324
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46df260345ffbf37e2f1f774ca89
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-iSfUUOhr3eaEsWSoRldsx2nHVwjRxHsjyHdQI9gzTBU='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:59 GMT
set-cookie: MUID=3A810B90EE6D6BDF0EC41F62EFF46ACA; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=3A810B90EE6D6BDF0EC41F62EFF46ACA; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=3572B4ECDF3364DF24E9A01EDEAA6536; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=81575484E2A849619BD67B12D15E3787&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=3572B4ECDF3364DF24E9A01EDEAA6536; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646559.2b7d4d67
GET

https://www.bing.com/qbox?query=33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=3a6c938d334a4a97807b361699f7d0ea&oit=4&cp=2&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=3a6c938d334a4a97807b361699f7d0ea&oit=4&cp=2&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 316
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46dfa4574e71b690d9679add895c
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-4arXZv35AMuGnspXUd0WXNzVb9W+1J3/MNcHTZ88wPA='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:59 GMT
set-cookie: MUID=2703E638DC4F6E353D9DF2CADD0D6F2D; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=2703E638DC4F6E353D9DF2CADD0D6F2D; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=3537456492D7690811B85196939568E4; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=C55287B97FE847D2BBBFE0BFC9A5D631&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=3537456492D7690811B85196939568E4; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646559.2b7d4d97
GET

https://www.bing.com/qbox?query=3&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=2aee3070008d4ee8ac495e5ef774c6a5&oit=4&cp=1&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=3&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=2aee3070008d4ee8ac495e5ef774c6a5&oit=4&cp=1&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 240
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46df77c44d589b2fb183b0b54a4c
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-CJClJJjwHOEHmdmJjVKiLqLpi1WSO3zPyZXlEiBuViA='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:59 GMT
set-cookie: MUID=30939FA0A83066FE24568B52A9B96756; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=30939FA0A83066FE24568B52A9B96756; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=1D76D58B4EB86EB538A0C1794F316F1D; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=CC4D1379706C4D6FB5DBC726ECF25F67&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=1D76D58B4EB86EB538A0C1794F316F1D; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646559.2b7d4dfa
GET

https://www.bing.com/qbox?query=2&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=fec31fccdf854374ad2cda425b304a36&oit=4&cp=1&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=2&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=fec31fccdf854374ad2cda425b304a36&oit=4&cp=1&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 226
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46dfcfe34ae6920d8c62b1b21f40
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-YTb9SrhnpDpK8j+VlNSVvYhr1kBe7oS+Qx1SbCuOZkA='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:15:59 GMT
set-cookie: MUID=2ED40BFE672665D234881F0C66D464ED; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=2ED40BFE672665D234881F0C66D464ED; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=12A6F696C495658A0862E264C56764EE; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=8EEA705ACA144A968E5B3300A8D7284E&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:15:59 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=12A6F696C495658A0862E264C56764EE; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646559.2b7d505b
GET

https://www.bing.com/qbox?query=26&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=0fb5c404e09f4ed9b7b2f4737ae9be59&oit=4&cp=2&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=26&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=0fb5c404e09f4ed9b7b2f4737ae9be59&oit=4&cp=2&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 166
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46e41ba24bc0aaf96cb7184d9933
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-F/zgavvqfeQ3Y/EovYx9Egxao7MQ/HppnxeufLubgq4='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:16:04 GMT
set-cookie: MUID=375486C1FF51631004E59233FE6762A7; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=375486C1FF51631004E59233FE6762A7; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=145847312DAF6B572F3153C32C996A33; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=D817D576B0784DB1B9DE6338C66F8EB3&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=145847312DAF6B572F3153C32C996A33; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646564.2b7d5e4a
GET

https://www.bing.com/qbox?query=262&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=efd4dd4928f44a1b93fa395930449c1a&oit=4&cp=3&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=efd4dd4928f44a1b93fa395930449c1a&oit=4&cp=3&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 169
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46e4e8084dd28a23ed27757d024b
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-ncY+FTISd/h3LaIoiLDACZfIFrvOPHZfdMNp8XQ9pPg='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:16:04 GMT
set-cookie: MUID=3825EF1DC7B46AE118F6FBEFC62D6B22; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=3825EF1DC7B46AE118F6FBEFC62D6B22; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=01DCD04E783B62783AD4C4BC79A26314; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=9749B2BF0FFF45F482E92A182B8FE50C&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:04 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=01DCD04E783B62783AD4C4BC79A26314; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646564.2b7d6069
GET

https://www.bing.com/qbox?query=262.&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e11fcb1845864e09a521710867495edf&oit=4&cp=4&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e11fcb1845864e09a521710867495edf&oit=4&cp=4&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 169
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46e5aee048a5bdcc8d73f648b1e1
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-FSEwXLG6FD/S9v/tP97lzJCRXG7aB8Iq3heWWpWIe5Y='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:16:05 GMT
set-cookie: MUID=160E301BBD8E611C3BD324E9BC686033; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=160E301BBD8E611C3BD324E9BC686033; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=2EB7AEEC0E3F675432B4BA1E0FD966C0; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=53B046B0B24543D8813271B87B6E0A58&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:05 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=2EB7AEEC0E3F675432B4BA1E0FD966C0; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646565.2b7d637a
GET

https://www.bing.com/qbox?query=262.3&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=da9177365cce492983541e279a846f5e&oit=4&cp=5&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.3&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=da9177365cce492983541e279a846f5e&oit=4&cp=5&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 168
content-type: application/json; charset=utf-8
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66db46e694e74b10b6fbd7547f0bf40a
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-sg+aHEyV/36+s2viaLrxsvKMOSAzwbLaNNZ213blQ4A='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Fri, 06 Sep 2024 18:16:06 GMT
set-cookie: MUID=1B3B35A2AECA66470E822150AF536786; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=1B3B35A2AECA66470E822150AF536786; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=1409524151F565142DE746B3506C6423; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=3D91267FF1554E308C35EFFBA1B25125&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:06 GMT; path=/; secure; SameSite=None
set-cookie: _SS=SID=1409524151F565142DE746B3506C6423; domain=.bing.com; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646566.2b7d6418
GET

https://www.bing.com/qbox?query=262.33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=6aff813b84ea435981be67cdc42e9219&oit=4&cp=6&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=6aff813b84ea435981be67cdc42e9219&oit=4&cp=6&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: text/html; charset=utf-8
cache-control: private, max-age=0
content-encoding: br
expires: Fri, 06 Sep 2024 18:15:10 GMT
vary: Accept-Encoding
x-eventid: 66db46ea4dec45d9b26d6cd02bde37a5
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-jYrG2tynussFNJd6YcCyXK6nE8+5VlR+W2Osf5w5epo='; base-uri 'self';report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingserp&ndcParam=QWthbWFp"}]}
report-to: {"group":"crossorigin-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingserp"}]}
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0,"include_subdomains":true}
cross-origin-embedder-policy-report-only: 'require-corp; report-to=\"crossorigin-errors\"'
cross-origin-opener-policy-report-only: 'same-origin; report-to=\"crossorigin-errors\"'
date: Fri, 06 Sep 2024 18:16:10 GMT
set-cookie: MUID=2E9426EC66466CE0093A321E670C6D13; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=2E9426EC66466CE0093A321E670C6D13; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=065BABC598E76F4E3A9CBF3799AD6E2C; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; HttpOnly
set-cookie: USRLOC=HS=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: _SS=PC=U531&SID=065BABC598E76F4E3A9CBF3799AD6E2C; domain=.bing.com; path=/; secure; SameSite=None
set-cookie: SRCHS=PC=U531; domain=.bing.com; path=/; secure; SameSite=None
set-cookie: SRCHD=AF=ANAB01; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=282A38FA15274460B10EAC3FDD1B0AFB&dmnchg=1; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240906; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Wed, 01-Oct-2025 18:16:10 GMT; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.3d367a5c.1725646570.2b7d7586
set-cookie: ak_bmsc=8B9CA56EEA1BA3E041D12A156223B9DA~000000000000000000000000000000~YAAQPTZ6XHeBCZiRAQAA1QWNyBnhm3iJ3njJIE3IEvzk2cu4qXPD1xo/OCRE+FQystQvyffSpfESGnBS8wFeSk7szJn9Feb1eTfVbW7YrXHutGZjZMuRqh2XxdIxMRuzZ9IIOgyI4r2j/wyoGwYex2LP+rapEjzLeFGihdQz/C+ZcOxI0mtUdPKTAZE9nLFEuWiby3AVpIVbDjN7QfAtQfIB3AdRxA+Xh5ZSFpNcl5EAOTh2ehn5tHZOF2VGBe5ExWxD+UqEvhfSCc+D1pIHZ2wUeh41W1uz9KtEJs70MibAZ8laAKSjOavziZdjkvRc5dqom0V9usWNdwuIS2TdaHStIQxe2mkzwbkc1J0ilRBYXzS9dMJbqnHwxRbz4q1zbMvk1BpXSUo=; Domain=.bing.com; Path=/; Expires=Fri, 06 Sep 2024 20:16:10 GMT; Max-Age=7200
GET

https://www.bing.com/qbox?query=262.33-&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e32ba2b7fe054dd9bd04008b59f19ce5&oit=1&cp=7&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.33-&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e32ba2b7fe054dd9bd04008b59f19ce5&oit=1&cp=7&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/qbox?query=262.33-5&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=fb85e05832ee4347a4c589aa52b34013&oit=1&cp=8&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.33-5&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=fb85e05832ee4347a4c589aa52b34013&oit=1&cp=8&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/qbox?query=262.33-59&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=8db0f006789144bfb4d9c7a5456dc522&oit=1&cp=9&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.33-59&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=8db0f006789144bfb4d9c7a5456dc522&oit=1&cp=9&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/qbox?query=262.33-59.&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=2a5d498e18164ff18818b99f1a7e2037&oit=1&cp=10&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.33-59.&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=2a5d498e18164ff18818b99f1a7e2037&oit=1&cp=10&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/qbox?query=262.33-59.8&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=1bc40f381c8f4332b051cc5ca80cae4c&oit=1&cp=11&pgcl=4

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /qbox?query=262.33-59.8&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=1bc40f381c8f4332b051cc5ca80cae4c&oit=1&cp=11&pgcl=4 HTTP/2.0
host: www.bing.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/search?q=262.33-59.8&cvid=bf0693b351ca4dabbd062810277ffaa1&aqs=edge..69i57j0.14496j0j4&FORM=ANAB01&PC=U531

msedge.exe

Remote address:

88.221.135.33:443

Request

GET /search?q=262.33-59.8&cvid=bf0693b351ca4dabbd062810277ffaa1&aqs=edge..69i57j0.14496j0j4&FORM=ANAB01&PC=U531 HTTP/2.0
host: www.bing.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://signaler-pa.googleapis.com/punctual/v1/chooseServer?key=AIzaSyBK4Jek59hl05JpbITG8AHxRTXZfrATQn8

msedge.exe

Remote address:

142.250.27.95:443

Request

OPTIONS /punctual/v1/chooseServer?key=AIzaSyBK4Jek59hl05JpbITG8AHxRTXZfrATQn8 HTTP/2.0
host: signaler-pa.googleapis.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type
origin: https://accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

142.250.102.139:443

Request

POST /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
content-length: 760
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "90.0.818.66"
sec-ch-ua-platform-version: "10.0"
x-goog-authuser: 0
content-type: application/x-www-form-urlencoded;charset=UTF-8
sec-ch-ua-model:
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://accounts.google.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://accounts.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __Secure-ENID=22.SE=TEeHiM0CCZ4i23Vk2OsQmK-sy2PKkml2oxsZ4kT0W59WxqxxWGKACLYNtJ1GqLVri1tv4xNTTAagLtfSRrS0kPlKSM8ZsY8XOYsFzJM6UNbmoEEzelaMOrQimdgtTH9sOjUcFaVr9k3OyKBYEf2O1IiX6t8TmCcU_u0kKi2u4stYRHxAO584HEE

142.250.102.17:80

mail.google.com

msedge.exe

466 B
144 B
10
3
142.250.102.17:80

http://gmail.com/

http

msedge.exe

901 B
987 B
10
8

HTTP Request

GET http://gmail.com/

HTTP Response

301
142.250.102.18:443

https://mail.google.com/mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646595743

tls, http2

msedge.exe

3.4kB
7.6kB
29
34

HTTP Request

GET https://mail.google.com/mail/u/0/

HTTP Request

GET https://mail.google.com/mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646584613

HTTP Request

GET https://mail.google.com/mail/gxlu?email=casoperchen7%40gmail.com&zx=1725646595743

HTTP Response

204

HTTP Response

204

HTTP Response

204

HTTP Response

204

HTTP Response

204

HTTP Response

204
142.250.102.84:443

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=Ab5oB3oubTupXOHw48OdwfjGsj9vPs76252prHtvEdlcuAciSXOpOJD_m_1CIIylSoFs8OrJp7_nOg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1136881135%3A1725646550970752&ddm=0

tls, http2

msedge.exe

5.7kB
140.5kB
78
124

HTTP Request

GET https://accounts.google.com/ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1

HTTP Request

GET https://accounts.google.com/InteractiveLogin?continue=https://mail.google.com/mail/u/0/&emr=1&followup=https://mail.google.com/mail/u/0/&osid=1&passive=1209600&service=mail&ifkv=Ab5oB3pDLQr9b6XoQJYmtk6R5Xz_AmYzSjL9n_72J7v4LOGqc5x_KD8M5Fw1qWQbyr8QjJ9Lt0vOqg

HTTP Request

GET https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=Ab5oB3oubTupXOHw48OdwfjGsj9vPs76252prHtvEdlcuAciSXOpOJD_m_1CIIylSoFs8OrJp7_nOg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1136881135%3A1725646550970752&ddm=0
142.250.102.139:443

https://play.google.com/log?format=json&hasfast=true&authuser=0

tls, http2

msedge.exe

2.5kB
9.0kB
27
25

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0
142.250.102.139:443

play.google.com

msedge.exe

98 B
52 B
2
1
142.250.27.99:443

https://www.google.com/favicon.ico

tls, http2

msedge.exe

2.3kB
7.8kB
23
20

HTTP Request

GET https://www.google.com/favicon.ico
88.221.135.33:443

https://www.bing.com/search?q=262.33-59.8&cvid=bf0693b351ca4dabbd062810277ffaa1&aqs=edge..69i57j0.14496j0j4&FORM=ANAB01&PC=U531

tls, http2

msedge.exe

14.4kB
195.6kB
163
207

HTTP Request

GET https://www.bing.com/qbox?query=2&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=58154fca660d4259a5fae72dc9e19ae4&oit=4&cp=1&pgcl=1

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=26&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=91cc757c265d46d884855842c14b49e2&oit=4&cp=2&pgcl=1

HTTP Request

GET https://www.bing.com/qbox?query=262&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=7cd4d62bae4744a698680c92a6b03611&oit=4&cp=3&pgcl=1

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=262.&language=en-US&pt=EdgBox&cvid=efe9df6c00c34b61b814e244a93d8adc&ig=058e3a126efb4049873a0ed3342ef5f4&oit=4&cp=4&pgcl=1

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e49e973806124dbabc972e1b7a7b99e9&oit=4&cp=2&pgcl=4

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=33-&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=8447023ed7454f96badfabf98cc7ab39&oit=1&cp=3&pgcl=4

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=3a6c938d334a4a97807b361699f7d0ea&oit=4&cp=2&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=3&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=2aee3070008d4ee8ac495e5ef774c6a5&oit=4&cp=1&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=2&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=fec31fccdf854374ad2cda425b304a36&oit=4&cp=1&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=26&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=0fb5c404e09f4ed9b7b2f4737ae9be59&oit=4&cp=2&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=262&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=efd4dd4928f44a1b93fa395930449c1a&oit=4&cp=3&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=262.&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e11fcb1845864e09a521710867495edf&oit=4&cp=4&pgcl=4

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=262.3&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=da9177365cce492983541e279a846f5e&oit=4&cp=5&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=262.33&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=6aff813b84ea435981be67cdc42e9219&oit=4&cp=6&pgcl=4

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=262.33-&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=e32ba2b7fe054dd9bd04008b59f19ce5&oit=1&cp=7&pgcl=4

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=262.33-5&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=fb85e05832ee4347a4c589aa52b34013&oit=1&cp=8&pgcl=4

HTTP Request

GET https://www.bing.com/qbox?query=262.33-59&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=8db0f006789144bfb4d9c7a5456dc522&oit=1&cp=9&pgcl=4

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=262.33-59.&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=2a5d498e18164ff18818b99f1a7e2037&oit=1&cp=10&pgcl=4

HTTP Response

200

HTTP Request

GET https://www.bing.com/qbox?query=262.33-59.8&language=en-US&pt=EdgBox&cvid=bf0693b351ca4dabbd062810277ffaa1&ig=1bc40f381c8f4332b051cc5ca80cae4c&oit=1&cp=11&pgcl=4

HTTP Response

200

HTTP Request

GET https://www.bing.com/search?q=262.33-59.8&cvid=bf0693b351ca4dabbd062810277ffaa1&aqs=edge..69i57j0.14496j0j4&FORM=ANAB01&PC=U531

HTTP Response

200
142.250.27.95:443

https://signaler-pa.googleapis.com/punctual/v1/chooseServer?key=AIzaSyBK4Jek59hl05JpbITG8AHxRTXZfrATQn8

tls, http2

msedge.exe

2.5kB
6.3kB
17
16

HTTP Request

OPTIONS https://signaler-pa.googleapis.com/punctual/v1/chooseServer?key=AIzaSyBK4Jek59hl05JpbITG8AHxRTXZfrATQn8
52.111.227.13:443

322 B
7
142.250.102.139:443

play.google.com

msedge.exe

260 B
5
142.250.102.139:443

https://play.google.com/log?format=json&hasfast=true&authuser=0

tls, http2

msedge.exe

3.1kB
8.6kB
18
17

HTTP Request

POST https://play.google.com/log?format=json&hasfast=true&authuser=0
142.250.102.101:443

play.google.com

msedge.exe

260 B
5
142.250.102.138:443

play.google.com

msedge.exe

260 B
5
142.250.102.113:443

play.google.com

msedge.exe

260 B
5
142.250.102.102:443

play.google.com

tls, http2

msedge.exe

970 B
1.1kB
7
6

8.8.8.8:53

gmail.com

dns

msedge.exe

750 B
898 B
12
7

DNS Request

gmail.com

DNS Response

142.250.102.18

142.250.102.19

142.250.102.83

142.250.102.17

DNS Request

gmail.com

DNS Response

142.250.102.17

142.250.102.18

142.250.102.83

142.250.102.19

DNS Request

mail.google.com

DNS Response

142.250.102.18

142.250.102.17

142.250.102.83

142.250.102.19

DNS Request

ocsp.digicert.com

DNS Response

192.229.221.95

DNS Request

17.102.250.142.in-addr.arpa

DNS Request

play.google.com

DNS Response

142.250.102.139

142.250.102.101

142.250.102.138

142.250.102.113

142.250.102.102

142.250.102.100

DNS Request

signaler-pa.googleapis.com

DNS Response

142.250.27.95

142.250.102.95

DNS Request

dns.msftncsi.com

DNS Request

dns.msftncsi.com

DNS Request

dns.msftncsi.com

DNS Request

dns.msftncsi.com

DNS Request

dns.msftncsi.com
142.250.102.84:443

accounts.google.com

https

msedge.exe

25.0kB
67.9kB
81
106
8.8.8.8:53

18.102.250.142.in-addr.arpa

dns

503 B
669 B
7
5

DNS Request

18.102.250.142.in-addr.arpa

DNS Request

www.google.com

DNS Response

142.250.27.99

142.250.27.104

142.250.27.105

142.250.27.103

142.250.27.106

142.250.27.147

DNS Request

95.27.250.142.in-addr.arpa

DNS Request

self.events.data.microsoft.com

DNS Response

20.189.173.10

DNS Request

102.102.250.142.in-addr.arpa

DNS Request

102.102.250.142.in-addr.arpa

DNS Request

102.102.250.142.in-addr.arpa
8.8.8.8:53

172.214.232.199.in-addr.arpa

dns

290 B
527 B
4
4

DNS Request

172.214.232.199.in-addr.arpa

DNS Request

139.102.250.142.in-addr.arpa

DNS Request

73.144.22.2.in-addr.arpa

DNS Request

10.173.189.20.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

563 B
387 B
8
3

DNS Request

95.221.229.192.in-addr.arpa

DNS Request

94.102.250.142.in-addr.arpa

DNS Request

33.135.221.88.in-addr.arpa

DNS Request

ctldl.windowsupdate.com

DNS Request

ctldl.windowsupdate.com

DNS Request

ctldl.windowsupdate.com

DNS Request

ctldl.windowsupdate.com

DNS Request

ctldl.windowsupdate.com
8.8.8.8:53

84.102.250.142.in-addr.arpa

dns

574 B
508 B
8
3

DNS Request

84.102.250.142.in-addr.arpa

DNS Request

fonts.gstatic.com

DNS Response

142.250.102.94

DNS Request

www.bing.com

DNS Response

88.221.135.33

95.101.143.34

88.221.135.40

88.221.135.57

95.101.143.177

88.221.135.11

95.101.143.193

88.221.135.51

88.221.135.27

DNS Request

nexusrules.officeapps.live.com

DNS Request

nexusrules.officeapps.live.com

DNS Request

nexusrules.officeapps.live.com

DNS Request

nexusrules.officeapps.live.com

DNS Request

nexusrules.officeapps.live.com
142.250.102.139:443

play.google.com

https

msedge.exe

36.1kB
15.0kB
69
54
224.0.0.251:5353

531 B
8
142.250.27.95:443

signaler-pa.googleapis.com

https

msedge.exe

9.9kB
10.1kB
72
63

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4c3889d3f0d2246f800c495aec7c3f7c

SHA1
dd38e6bf74617bfcf9d6cceff2f746a094114220

SHA256
0a4781bca132edf11500537cbf95ff840c2b6fd33cd94809ca9929f00044bea4

SHA512
2d6cb23e2977c0890f69751a96daeb71e0f12089625f32b34b032615435408f21047b90c19de09f83ef99957681440fdc0c985e079bb196371881b5fdca68a37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c4a10f6df4922438ca68ada540730100

SHA1
4c7bfbe3e2358a28bf5b024c4be485fa6773629e

SHA256
f286c908fea67163f02532503b5555a939f894c6f2e683d80679b7e5726a7c02

SHA512
b4d407341989e0bbbe0cdd64f7757bea17f0141a89104301dd7ffe45e7511d3ea27c53306381a29c24df68bdb9677eb8c07d4d88874d86aba41bb6f0ce7a942c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
13ff6977a6aec87858decd139f6e2add

SHA1
022babbf0f80d7911815f5fddd0cea284fdd13d5

SHA256
fe153df2040696cf67b97d5aac9433035aab83de18be4a98d63db432347674c6

SHA512
d776b45a6b430ddebdaa8a9b4646f5124c80898bbc0d4b123276cb8f8afce86abb498a937dae2755af1fbe2d49417aeded85e50534b4d4e1298f177ea4cc540f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
d6777d0e6131d348f41146183b6e68e0

SHA1
464c7aa5442e992ca18dfa321b851845ffeb32df

SHA256
930750e03c7fec41467d9e043b865c96e22075c5138fe8c99681b14f67848466

SHA512
c7855ce21d08dde0ba5840472dd79ad34da68f1c489be381b09724e1904625240f37259d5e858c41c9cc8a0dab8bea911e3e8382548aab12e8d7e82586c9e6f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c6e8755f686daa36d4991c18bd8bd476

SHA1
99a294a8f52c034cdae152ff7b7f10060474ea5d

SHA256
5d4db6f803fa8636b47c2e7add75590c4d7fbb183231d9065a22fe4d88942f7b

SHA512
d7393325fe41cf99220b5b2adbc24f8dbbca7d0d680e965f5c153b49fcb72459e173cdd2964cc209102e5c48fc294b8fd9b5b7e85c1f1a3f3d5dff1d6ac2083a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
67a8fb61c975ee6c92769816aec28f55

SHA1
9bb10ef63190d651caaa43e0529a05cafa8dd08b

SHA256
3029fd04ada3181fafb570fa63633e6722ded0586796af9d7b10244ef7b143f2

SHA512
f3678019bcb617e4c815823aa3024647f43689d3ff4659d86a1b57636932631d669869c5a5889ef5b765877ae5d2b92d24ba6e3644c5740bf78c95507c7fd7c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a8da532c42012be510ef02f73c5df78c

SHA1
92aa08257954d7d6416028301aa8ba217cc73530

SHA256
98be040c21d1ab5915e88a47d272cf99e46f5eed9739e63f152360bed4475625

SHA512
3d60cc1fc88a512867695b2ad2539bcb3d5230cbcbe0fedcd52d256c11222cb92f40173ead340322a32e81a12544cdb87a9de2033fd154f3b6c7689b508ff7ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8b0f168eadd27a344c879f71002c2773

SHA1
1d0f4eb5b0cbe05e04763121a5fd63ac3ca165c3

SHA256
5cbcae998eb4c1dd6d3039081803d58d4f691973954aff5b35d9b8ada6bc65b2

SHA512
5fa97ad277685738c589b4136a083becbffea203a18b7b73bf1b88a0a2f27bfa98d853e2135cb3ba9a9a7f874822a7aae881200229ae29475a7f3df585495df6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
99e1ffeb48ba3a87996a1b24717b1d89

SHA1
550a841ec3a8ffe764c2529e15c668601191890c

SHA256
b48e18a9a1a5e35c9547299626a51d83022ace24d01c3cb7147093785669de5b

SHA512
0c8838300fb5f1e253f4157bef556b48a61a03ba730eec981acc38bb5ff8d8732cb0989c1257c8b67c75dbcd86279fcd45e476f37c7b2bfc30802aedb937b04f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
bbc00d2011e94a6979c369b39ff08316

SHA1
0e5aa5c987d2ee4570261c138035fdd4d86ec480

SHA256
2a6a28d4dcdad1a8a653f4e53030589ff1f580e52eb48843170feb25b03d7b37

SHA512
29023811f0c102f541d5c4a0c602f82a22f38e482bed90c2008a8b7594bc28a251cd41ebf408a457bde37a5e7a4039ea706e92ce39dbcb929cb2204d883b6b60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
df7d7146717b9bea0faea731b37ebaba

SHA1
2d74e80e84f748765e5eb80cc2ac5743958ee064

SHA256
bb71e9e595629053d1f4a8d755eb9314a9a4d7c7336595295537db0b405a191f

SHA512
882a53e3f21175eea68193182682119d06d609559033789fd5269f3961cb8782ad3c61de928022a51f8796ad0bcfafb76f2e06d526170a4c54881c45aaa1c557

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
358e8bc21276ffc834aa5c9e391ac342

SHA1
08567c0683906fa466a63a382d8d9626a808552c

SHA256
81d7c69a95e168b2f7bba101802110ed473912e9a51ee0c41e3959538f3eb529

SHA512
d30e09f2e3ade23557e32a36e63ca11eb093854b2161c36207a5263c8d854a33066f46cb5c628f0288c648b34c9657691723fe6ebcf6c4283cac6476e9efa687

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
c464abea4eb9ddfb980928aa4e594ca3

SHA1
d54e51455dd7776afdd4a4b59204c16b569e203f

SHA256
ff98704c45151993405dcdb7b989da7a35cf8e453c83b68e60a11f2b5fdec126

SHA512
739a208a73d78b6e1cce190ef993f392175feece0f3173d71d9af68fb9e0efb34c584dc9fb08b180467c08caf35427f07af77d8a71e337a81655bf5ea190e232

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f656.TMP

Filesize
370B

MD5
e1998e18c4f4ab2bede7402ee701a521

SHA1
52641cd49a1c53607b1bce2150baac8ef8d10330

SHA256
801cf956b3fd418a1aa75693ad80db9e0e471c3b58ecd84b98913f91add468c7

SHA512
39f554d0a09f00de7e4653130aec67fa3f607b7df438e8bf4bbaaaffbcd30d5beaf7b281785926bbe75885fdc5914a6d51d019b94d6f8ece69c7b7da4f51ee0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0a2628f3221b39ae0014b8b844f99eba

SHA1
36fc7fa73145541b5a2dd7b3023c454d852bd629

SHA256
228b5b7ebad79cf4ed5239e0226a13292af547e1f3983a2d3cb4c6278cf64128

SHA512
c530b2fd18fac2bf0a2f48c60a8116cb04e83f30c6cfd4f74354fe03b6663c775c863ffa9d64ef2463fc5b73a1e5d55385f5b2503804dcaff8dee197d1af8307

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request