Play interactive tourEdit tour

Windows Analysis Report
https://mail.onelink.me/107872968?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000604&af_sub5=EmailSignature__Static_

Overview

General Information

Sample URL:	https://mail.onelink.me/107872968?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000604&af_sub5=EmailSignature_
Analysis ID:	1276589
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

HTML body contains password input but no form action

HTML body contains low number of good links

Found iframes

Classification

×

Joe Sandbox Signatures

• • AV Detection
• • Phishing
• • Compliance
• • Networking
• • System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mail.onelink.me/107872968?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000604&af_sub5=EmailSignature__Static_

Avira URL Cloud: detection malicious, Label: phishing

Phishing

HTML body contains password input but no form action

Source: https://login.yahoo.com/

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML body contains low number of good links

Source: https://login.yahoo.com/account/create?.done=https%3A%2F%2Fmail.yahoo.com

HTTP Parser: Number of links: 1

Found iframes

Source: https://login.yahoo.com/	HTTP Parser: Iframe src: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.html
Source: https://login.yahoo.com/	HTTP Parser: Iframe src: https://s.yimg.com/rq/darla/4-11-1/html/r-csc.html

HTML body contains password input

Source: https://login.yahoo.com/	HTTP Parser: <input type="password" .../> found
Source: https://login.yahoo.com/account/create?.done=https%3A%2F%2Fmail.yahoo.com	HTTP Parser: <input type="password" .../> found

META author tag missing

Source: https://login.yahoo.com/	HTTP Parser: No <meta name="author".. found
Source: https://login.yahoo.com/account/create?.done=https%3A%2F%2Fmail.yahoo.com	HTTP Parser: No <meta name="author".. found

HTML page is missing a favicon

Source: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lp	HTTP Parser: No favicon
Source: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lp	HTTP Parser: No favicon
Source: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lp	HTTP Parser: No favicon
Source: https://9513459.fls.doubleclick.net/activityi;dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp?	HTTP Parser: No favicon
Source: https://9513459.fls.doubleclick.net/ddm/fls/r/dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp	HTTP Parser: No favicon
Source: https://adservice.google.com/ddm/fls/i/dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp	HTTP Parser: No favicon
Source: https://9513459.fls.doubleclick.net/activityi;dc_pre=CL3IsP72nIADFcFOHgIdcsoPAg;src=9513459;type=ym6;cat=ym6lp;ord=1242130623712;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp?	HTTP Parser: No favicon
Source: https://s.yimg.com/rq/darla/4-11-1/html/r-csc.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.html	HTTP Parser: No favicon

META copyright tag missing

Source: https://login.yahoo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.yahoo.com/account/create?.done=https%3A%2F%2Fmail.yahoo.com	HTTP Parser: No <meta name="copyright".. found

Compliance

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Networking

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /107872968?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000604&af_sub5=EmailSignature__Static_ HTTP/1.1Host: mail.onelink.meConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_ HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/mailseven/1dac94075fa620cbf3ba.bundle.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.41.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cmpStub.min.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://overview.mail.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD
Source: global traffic	HTTP traffic detected: GET /jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://overview.mail.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/895/2cf6bab38ad425c4f0cc.chunk.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /assets/6467/ce59d9c0f632863b00cc.chunk.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/mail_en-US_h_100-70_white_rgb-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-gsd-1.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/2217/6c3e3bbef79379fcbf34.chunk.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/qr-yahoomail7.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/badge-apple-store-en-US-1.0.0.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/badge-play-store-1.0.0.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-csc-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/keep-tabs-on-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-bg-left-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-bg-right-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/spot-receipts-easily-1-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-lsmf-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/view-by-sender-1-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/1cd5c3b4cc0bd1557060.woff HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://overview.mail.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /assets/291a0ceed24603e66ffa.woff HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://overview.mail.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-bbc-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/icon-customize-3x-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/icon-emails-3x-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-bg-center-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/global-en-tracking-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/bf77ac380666317b7714.woff HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://overview.mail.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-left-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-right-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/magnifing-glass_copy_4@2x-1.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-lsmf-hero-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/paperplane@2x-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/ap-bg-middle-top-1.0.1.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/addAccount-en.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/IMAP_shadow-en-US.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/Receipts-en-US.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/unsubscribe-en.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /107872968/overview?af_qr=true HTTP/1.1Host: mail.onelink.meConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-model: ""sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_Overview HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/mail_en-US_h_100-70_white_rgb-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/badge-play-store-1.0.0.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/badge-apple-store-en-US-1.0.0.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-gsd-1.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/qr-yahoomail7.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-csc-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/keep-tabs-on-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-bg-left-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-bg-right-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-lsmf-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/view-by-sender-1-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/spot-receipts-easily-1-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/icon-customize-3x-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/icon-emails-3x-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-bbc-1.0.1.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-bg-center-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-left-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/box-right-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/magnifing-glass_copy_4@2x-1.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/mailseven/1dac94075fa620cbf3ba.bundle.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"1265f3-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/global-en-tracking-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/yahoo-mail7-lsmf-hero-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/ap-bg-middle-top-1.0.1.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/paperplane@2x-1.0.0.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/addAccount-en.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/895/2cf6bab38ad425c4f0cc.chunk.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"4103-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /assets/6467/ce59d9c0f632863b00cc.chunk.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"484f-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /mi/yahoo/favicon.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overview.mail.yahoo.com/?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub4=100000604&af_sub5=EmailSignature__Static_Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/2217/6c3e3bbef79379fcbf34.chunk.js HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"bf01-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /assets/1cd5c3b4cc0bd1557060.woff HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://overview.mail.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"9754-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /assets/291a0ceed24603e66ffa.woff HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://overview.mail.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"bfa8-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /assets/bf77ac380666317b7714.woff HTTP/1.1Host: overview.mail.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://overview.mail.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overview.mail.yahoo.com/?af_xp=qr&af_sub1=Acquisition&af_qr=true&source_caller=ui&pid=QR_code&is_retargeting=true&af_click_lookback=7d&af_sub5=Overview_QRCode&af_sub4=100000388&shortlink=overview&af_sub2=Globa_YMktg&deep_link_value=https%3A%2F%2Fymail%3A%2F%2Ftab%2Fhome&c=Global_Acquisition_YMktg_315_YM7_OverviewAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1If-None-Match: W/"b9ec-188fa23c420"If-Modified-Since: Mon, 26 Jun 2023 23:57:08 GMT
Source: global traffic	HTTP traffic detected: GET /usermatch.gif?partner=yahoo_hguid&partner_uid=%pu1=!;&gtmcb=2062217616 HTTP/1.1Host: beacon.krxd.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /event.gif?event_id=M-apL1NM&event_type=default&gtmcb=770180526 HTTP/1.1Host: beacon.krxd.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /usermatch.gif?partner=yahoo_hguid&partner_uid=%pu1=!;&gtmcb=120656265 HTTP/1.1Host: beacon.krxd.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /tr?id=655642628197250&ev=8983125_LP_ym7&noscript=1&dl=https://overview.mail.yahoo.com&gtmcb=1725547578 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /event.gif?event_id=M-apL1NM&event_type=default&gtmcb=2092349487 HTTP/1.1Host: beacon.krxd.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10189170&ea=1&gtmcb=1420234397 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/IMAP_shadow-en-US.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /activityi;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp? HTTP/1.1Host: 9513459.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /tr?id=655642628197250&ev=8983125_LP_ym7&noscript=1&dl=https://overview.mail.yahoo.com&gtmcb=1744308833 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10189170&ea=1&gtmcb=158965638 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G11-&gcd=G10-&rnd=1226911676.1689843872&url=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html&gdpr_consent=tcempty&gdpr=0&gtm=45He37h0n81PH8Z3T7 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /activityi;src=9513459;type=ym6;cat=ym6lp;ord=1242130623712;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp? HTTP/1.1Host: 9513459.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp? HTTP/1.1Host: 9513459.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CL3IsP72nIADFcFOHgIdcsoPAg;src=9513459;type=ym6;cat=ym6lp;ord=1242130623712;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp? HTTP/1.1Host: 9513459.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/i/dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G11-&gcd=G10-&rnd=479610436.1689843873&url=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html&gdpr_consent=tcempty&gdpr=0&gtm=45He37h0n81PH8Z3T7 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lpAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: IDE=AHWqTUmD8giGjm369XpccUHQ6830llVKgOh6njWaGxwGQ-EsgXSCFL-1YMZZfG8U8uw
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10100069 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092709 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/i/dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp HTTP/1.1Host: adservice.google.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://adservice.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ddm/fls/r/dc_pre=CM28pP72nIADFfpGwgodTpEE_w;src=9513459;type=ym6;cat=ym6lp;ord=6397152986045;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp HTTP/1.1Host: 9513459.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://adservice.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: IDE=AHWqTUmD8giGjm369XpccUHQ6830llVKgOh6njWaGxwGQ-EsgXSCFL-1YMZZfG8U8uw
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092037 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092036 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CL3IsP72nIADFcFOHgIdcsoPAg;src=9513459;type=ym6;cat=ym6lp;ord=1242130623712;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10100069 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092709 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092037 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092036 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9513459.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/Receipts-en-US.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/animation/unsubscribe-en.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/bcg/norrin/images/icon-customize-3x-1.0.0.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /mi/yahoo/favicon.ico HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /tr?id=655642628197250&ev=8983125_LP_ym7&noscript=1&dl=https://overview.mail.yahoo.com&gtmcb=1725547578 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10189170&ea=1&gtmcb=1420234397 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /tr?id=655642628197250&ev=8983125_LP_ym7&noscript=1&dl=https://overview.mail.yahoo.com&gtmcb=1744308833 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10189170&ea=1&gtmcb=158965638 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092709 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10100069 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CL3IsP72nIADFcFOHgIdcsoPAg;src=9513459;type=ym6;cat=ym6lp;ord=1242130623712;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIlaHLAQiQvMwBCJq9zAEIwL/MAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092036 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092037 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092709 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10100069 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092036 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10092037 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.53.30.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794340018&ref=https%3A%2F%2Flogin.yahoo.com%2F&sa=geminifed%253D1%2520y-bucket%253Dmbr-pref-auth%252Cmbr-block-tpa-linking%252Cmbr-enbl-commchnl-rev-trap-sess-ext%252Cmbr-backup-code-2fa%252Cmbr-app-password-classifier%252C HTTP/1.1Host: fc.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /rq/darla/boot.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rq/darla/4-11-1/js/g-r-min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rq/darla/4-11-1/html/r-csc.html HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rq/darla/4-11-1/html/r-sf.html HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /adcount%7C2.0%7C1065.1%7C6650159%7C0%7C0%7CAdId=-41;BnId=0;ct=1911927292;st=5260;adcid=0;itime=843909297;reqtype=5;guid=3jkmdfhibhu4f;;impref=16898439092164689023;imprefseq=159620509791682892;imprefts=1689843909;adclntid=1004;spaceid=794340018;adposition=RICH;lmsid=;revshare=;pvid=KiBeJzEwLjI50s18ZLj4jwGPMTAyLgAAAABx9XDA;sectionid=;kvsecure-darla=4-11-1%7Cysd%7C2;kvsecure=true;kvmn=y963896099;kvy-bucket=mbr-pref-auth%2Cmbr-block-tpa-linking%2Cmbr-enbl-commchnl-rev-trap-sess-ext%2Cmbr-backup-code-2fa%2Cmbr-app-password-classifier%2C;kvpgcolo=ir2;kvssp=ssp;kvadtc_dvmktname=unknown;kvadtc_dvosplt=windows_10;kvadtc_dvbrand=google;kvadtc_dvtype=desktop;kvadtc_dvmodel=chrome_-_windows;kvrepo_dvosplt=windows_10;kvadtc_dvosversion=NT%2010.0;kvadtc_crmcc=UNKNOWN;kvadtc_crmnc=UNKNOWN;gdpr=0;gpp=DBAA;gpp_sid=-1; HTTP/1.1Host: 22.ras.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-csc.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /rq/darla/4-11-1/js/sfext-min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /dy/ads/gemini.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/eng/externals/131110/a/p.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /adcount%7C2.0%7C1065.1%7C6650159%7C0%7C0%7CAdId=-41;BnId=0;ct=1911927292;st=5260;adcid=0;itime=843909297;reqtype=5;guid=3jkmdfhibhu4f;;impref=16898439092164689023;imprefseq=159620509791682892;imprefts=1689843909;adclntid=1004;spaceid=794340018;adposition=RICH;lmsid=;revshare=;pvid=KiBeJzEwLjI50s18ZLj4jwGPMTAyLgAAAABx9XDA;sectionid=;kvsecure-darla=4-11-1%7Cysd%7C2;kvsecure=true;kvmn=y963896099;kvy-bucket=mbr-pref-auth%2Cmbr-block-tpa-linking%2Cmbr-enbl-commchnl-rev-trap-sess-ext%2Cmbr-backup-code-2fa%2Cmbr-app-password-classifier%2C;kvpgcolo=ir2;kvssp=ssp;kvadtc_dvmktname=unknown;kvadtc_dvosplt=windows_10;kvadtc_dvbrand=google;kvadtc_dvtype=desktop;kvadtc_dvmodel=chrome_-_windows;kvrepo_dvosplt=windows_10;kvadtc_dvosversion=NT%2010.0;kvadtc_crmcc=UNKNOWN;kvadtc_crmnc=UNKNOWN;gdpr=0;gpp=DBAA;gpp_sid=-1; HTTP/1.1Host: 22.ras.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /libraries/Espresso-1.7.7.js HTTP/1.1Host: cdn.cmp.advertising.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/24064d362d364f7bdcf0af33299a569a.jpeg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /logads?delay=1823&spid=794340018 HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1; AS=v=1&s=oFzqqNgg&d=A64ba4a44|7Y0N0BH.2Sqm.MyeJ27FU49XJpXkM8cRAHi3VPEaaJi45EE.l8XqDRg1Uw6C6lhW836afXZimgs2U.um42yCOgBHoI2.kPvK7Ude3el32MAs9hhTaef_wuEJZg9OHYM.Bb5.GLQHsj7ePYv6rcjNay1.qGdINoCOz1po8yfEhhLaoa0FA2ijPE8KrhLNpsB3_ap74S4Y8j34pXNImC0hKdtUd5n7mpxfYK0iteXPdZbQlh7bD46as1F6x.k4XgLncmc6yiOfjd4p3dSfjtYiFpLD8pzMnvbLlamm_RCPva1EtKHsNYNhw9.90.744GDs_Oz6LvpIg3rwJ6Wl9Bm3A5Us37UBlGSF_uKLvFdITXqCSoLQ9gAjaKAl3f.vWGK3SgVgnkRdXkYMpO6W4_k6PZbgWSKx65EeQNK2yvUfPdpQmWv9W4zfemuOgXW399rOiChSwGCMZTlt30s.bJWKJxm7jGhwMsghFTFaBI0lx9U3CsKEf6YG31h3RXCqNf11SKvDYQGQrZu8rkQ_OJjd.UEfsuqcr0zJtEg_0B_LDc5Y8sN5Pph8Mm9NhCXvnseChrfwlsPt8svLJKK1Yhfx11O6stg.vJSI_NNH2t.hLvfAk4QzHapgzqb1o6suqKDOx2txNiVLdvYKFfteoBURfdbIjaI91oCV7ulWSGOyPZlPmWDHcv3jYLr7_u.WqFtCDDh_FFRNjYtbWuKpHjKGfDV.X4pjjOsUNjYHQmVNNTzYgsaIOFlISWAfIpgH9QCUhROlt.64ArDX27sbq0uhQdKMKdoPwoW3X.O0KXaf3kmR4jcEgEsqst6rFpelcXuPXw_HMtfFLQIyEpipaaM-~A
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /p?_E=adperf&outcm=performance&etrg=backgroundPost&usergenf=0&etag=performance%2Cdarla&s=794340018&pvid=KiBeJzEwLjI50s18ZLj4jwGPMTAyLgAAAABx9XDA&D_bv=1.0.0&D_ts=0&D_v=sdarla_4-11-1&D_l=35%2C45%2C2583%2C1904%2C0%2C0%2C724%2C36%2C40&D_m=0%2C%2C4g%2C0%2C794340018&test=&D_e=&D_p=10%2C0%2CRICH%2C1440x1024%2C999999%2C999999%2C999999%2C0%2C0%2C1072%2C-1%2C-1%2C-1%2C-1%2C2%2CKiBeJzEwLjI50s18ZLj4jwGPMTAyLgAAAABx9XDA%3A-1%3ARICH%2C2%2C2%2C0%2C2%2C0%2C2%2C0%2C0%2C1%2C1%2C1%2C2%2C0%2C0%2C0%2C0%2C0%2C0%2C3%2Chttps%253A%2F%2Flogin.yahoo.com%2C%2C0%2C2%2C3%2C0%2C0%2C5000%2C0%2C0%2C-1%2C-1%2C470%2C497%3B&D_res=%7B%22RICH%22%3A%5B%7B%22name%22%3A%22https%3A%2F%2Fcdn.cmp.advertising.com%2Flibraries%2FEspresso-1.7.7.js%22%2C%22dur%22%3A272%2C%22st%22%3A433%2C%22ssl%22%3Anull%2C%22dns%22%3Anull%2C%22conn%22%3Anull%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Fav%2Fcurveball%2Fads%2Fpr%2FRESIZE_AND_CROP%2F1200x627%2F24064d362d364f7bdcf0af33299a569a.jpeg%22%2C%22dur%22%3A225%2C%22st%22%3A787%2C%22ssl%22%3A63%2C%22dns%22%3A0%2C%22conn%22%3A64.1%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Fcv%2Feng%2Fexternals%2F131110%2Fa%2Fp.gif%22%2C%22dur%22%3A140%2C%22st%22%3A301%2C%22ssl%22%3A75%2C%22dns%22%3A0.1%2C%22conn%22%3A76%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Fdy%2Fads%2Fgemini.js%22%2C%22dur%22%3A140%2C%22st%22%3A285%2C%22ssl%22%3A69%2C%22dns%22%3A0%2C%22conn%22%3A69.6%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F4-11-1%2Fjs%2Fsfext-min.js%22%2C%22dur%22%3A136%2C%22st%22%3A130%2C%22ssl%22%3A52%2C%22dns%22%3A0%2C%22conn%22%3A52.7%7D%2C%7B%22first-paint%22%3A470%2C%22first-contentful-paint%22%3A497%7D%5D%7D&t=1689843911378 HTTP/1.1Host: geo.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /mbcsc?bv=1.0.0&es=0AbryfkGIS9BDXMgQcUQZ1bElc2zvpVnEztfH8l0YPh.dKXqwxXUgGxW.ZvZofktRLV5rENTfYumRNcHnsmYgKd0mD_gRuI9CKdCbuoXwOeRAlIAAhcHF2DDfVMAcHe4W4NtlV6.13LD0tcAYuUy6GDCWg.fcfknxSIz2vZ1XbwUqapcODU7VBJhZqyqrV30tUW6fftma3IxySESq0wYRUJPR8zPCottKQYztYcs2.PEVQ6Q6X.L6S1OIiOJYcc4PbTr9URxD5S5m.As56IbcsQGP6ryHfG1CWx2ucIhBDMV2sSMq8AHoWMUSOwsMm5W5hw3khgVyD9v.vO5yJ.IiQUHxJfNZbLi36cCIrYjxDeHUypp3HEYOucLS_2.xIzZHM1.eMbwZxBkga6j_mDIBRa.fQpSAXYAqhY_FxbHDkQpO7gXK9fdjPmcCIUWJlf99CuoFr13wIK6NIRUu7gZwzRBHZbVIva5Q8o9QIa5ONO22WXctEX1c_oWOf4XETADMwE-&ap=pp%3Dm%2Cpi%3D1 HTTP/1.1Host: ir2.beap.gemini.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rq/darla/4-11-1/html/r-sf.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/eng/externals/131110/a/p.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /av/curveball/ads/pr/RESIZE_AND_CROP/1200x627/24064d362d364f7bdcf0af33299a569a.jpeg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /logads?delay=1823&spid=794340018 HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1; AS=v=1&s=oFzqqNgg&d=A64ba4a44|7Y0N0BH.2Sqm.MyeJ27FU49XJpXkM8cRAHi3VPEaaJi45EE.l8XqDRg1Uw6C6lhW836afXZimgs2U.um42yCOgBHoI2.kPvK7Ude3el32MAs9hhTaef_wuEJZg9OHYM.Bb5.GLQHsj7ePYv6rcjNay1.qGdINoCOz1po8yfEhhLaoa0FA2ijPE8KrhLNpsB3_ap74S4Y8j34pXNImC0hKdtUd5n7mpxfYK0iteXPdZbQlh7bD46as1F6x.k4XgLncmc6yiOfjd4p3dSfjtYiFpLD8pzMnvbLlamm_RCPva1EtKHsNYNhw9.90.744GDs_Oz6LvpIg3rwJ6Wl9Bm3A5Us37UBlGSF_uKLvFdITXqCSoLQ9gAjaKAl3f.vWGK3SgVgnkRdXkYMpO6W4_k6PZbgWSKx65EeQNK2yvUfPdpQmWv9W4zfemuOgXW399rOiChSwGCMZTlt30s.bJWKJxm7jGhwMsghFTFaBI0lx9U3CsKEf6YG31h3RXCqNf11SKvDYQGQrZu8rkQ_OJjd.UEfsuqcr0zJtEg_0B_LDc5Y8sN5Pph8Mm9NhCXvnseChrfwlsPt8svLJKK1Yhfx11O6stg.vJSI_NNH2t.hLvfAk4QzHapgzqb1o6suqKDOx2txNiVLdvYKFfteoBURfdbIjaI91oCV7ulWSGOyPZlPmWDHcv3jYLr7_u.WqFtCDDh_FFRNjYtbWuKpHjKGfDV.X4pjjOsUNjYHQmVNNTzYgsaIOFlISWAfIpgH9QCUhROlt.64ArDX27sbq0uhQdKMKdoPwoW3X.O0KXaf3kmR4jcEgEsqst6rFpelcXuPXw_HMtfFLQIyEpipaaM-~A
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /p?_E=adperf&outcm=performance&etrg=backgroundPost&usergenf=0&etag=performance%2Cdarla&s=794340018&pvid=KiBeJzEwLjI50s18ZLj4jwGPMTAyLgAAAABx9XDA&D_bv=1.0.0&D_ts=0&D_v=sdarla_4-11-1&D_l=35%2C45%2C2583%2C1904%2C0%2C0%2C724%2C36%2C40&D_m=0%2C%2C4g%2C0%2C794340018&test=&D_e=&D_p=10%2C0%2CRICH%2C1440x1024%2C999999%2C999999%2C999999%2C0%2C0%2C1072%2C-1%2C-1%2C-1%2C-1%2C2%2CKiBeJzEwLjI50s18ZLj4jwGPMTAyLgAAAABx9XDA%3A-1%3ARICH%2C2%2C2%2C0%2C2%2C0%2C2%2C0%2C0%2C1%2C1%2C1%2C2%2C0%2C0%2C0%2C0%2C0%2C0%2C3%2Chttps%253A%2F%2Flogin.yahoo.com%2C%2C0%2C2%2C3%2C0%2C0%2C5000%2C0%2C0%2C-1%2C-1%2C470%2C497%3B&D_res=%7B%22RICH%22%3A%5B%7B%22name%22%3A%22https%3A%2F%2Fcdn.cmp.advertising.com%2Flibraries%2FEspresso-1.7.7.js%22%2C%22dur%22%3A272%2C%22st%22%3A433%2C%22ssl%22%3Anull%2C%22dns%22%3Anull%2C%22conn%22%3Anull%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Fav%2Fcurveball%2Fads%2Fpr%2FRESIZE_AND_CROP%2F1200x627%2F24064d362d364f7bdcf0af33299a569a.jpeg%22%2C%22dur%22%3A225%2C%22st%22%3A787%2C%22ssl%22%3A63%2C%22dns%22%3A0%2C%22conn%22%3A64.1%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Fcv%2Feng%2Fexternals%2F131110%2Fa%2Fp.gif%22%2C%22dur%22%3A140%2C%22st%22%3A301%2C%22ssl%22%3A75%2C%22dns%22%3A0.1%2C%22conn%22%3A76%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Fdy%2Fads%2Fgemini.js%22%2C%22dur%22%3A140%2C%22st%22%3A285%2C%22ssl%22%3A69%2C%22dns%22%3A0%2C%22conn%22%3A69.6%7D%2C%7B%22name%22%3A%22https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F4-11-1%2Fjs%2Fsfext-min.js%22%2C%22dur%22%3A136%2C%22st%22%3A130%2C%22ssl%22%3A52%2C%22dns%22%3A0%2C%22conn%22%3A52.7%7D%2C%7B%22first-paint%22%3A470%2C%22first-contentful-paint%22%3A497%7D%5D%7D&t=1689843911378 HTTP/1.1Host: geo.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /mbcsc?bv=1.0.0&es=0AbryfkGIS9BDXMgQcUQZ1bElc2zvpVnEztfH8l0YPh.dKXqwxXUgGxW.ZvZofktRLV5rENTfYumRNcHnsmYgKd0mD_gRuI9CKdCbuoXwOeRAlIAAhcHF2DDfVMAcHe4W4NtlV6.13LD0tcAYuUy6GDCWg.fcfknxSIz2vZ1XbwUqapcODU7VBJhZqyqrV30tUW6fftma3IxySESq0wYRUJPR8zPCottKQYztYcs2.PEVQ6Q6X.L6S1OIiOJYcc4PbTr9URxD5S5m.As56IbcsQGP6ryHfG1CWx2ucIhBDMV2sSMq8AHoWMUSOwsMm5W5hw3khgVyD9v.vO5yJ.IiQUHxJfNZbLi36cCIrYjxDeHUypp3HEYOucLS_2.xIzZHM1.eMbwZxBkga6j_mDIBRa.fQpSAXYAqhY_FxbHDkQpO7gXK9fdjPmcCIUWJlf99CuoFr13wIK6NIRUu7gZwzRBHZbVIva5Q8o9QIa5ONO22WXctEX1c_oWOf4XETADMwE-&ap=pp%3Dm%2Cpi%3D1 HTTP/1.1Host: ir2.beap.gemini.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /account/create?.done=https%3A%2F%2Fmail.yahoo.com HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1; AS=v=1&s=oFzqqNgg&d=A64ba4a44|7Y0N0BH.2Sqm.MyeJ27FU49XJpXkM8cRAHi3VPEaaJi45EE.l8XqDRg1Uw6C6lhW836afXZimgs2U.um42yCOgBHoI2.kPvK7Ude3el32MAs9hhTaef_wuEJZg9OHYM.Bb5.GLQHsj7ePYv6rcjNay1.qGdINoCOz1po8yfEhhLaoa0FA2ijPE8KrhLNpsB3_ap74S4Y8j34pXNImC0hKdtUd5n7mpxfYK0iteXPdZbQlh7bD46as1F6x.k4XgLncmc6yiOfjd4p3dSfjtYiFpLD8pzMnvbLlamm_RCPva1EtKHsNYNhw9.90.744GDs_Oz6LvpIg3rwJ6Wl9Bm3A5Us37UBlGSF_uKLvFdITXqCSoLQ9gAjaKAl3f.vWGK3SgVgnkRdXkYMpO6W4_k6PZbgWSKx65EeQNK2yvUfPdpQmWv9W4zfemuOgXW399rOiChSwGCMZTlt30s.bJWKJxm7jGhwMsghFTFaBI0lx9U3CsKEf6YG31h3RXCqNf11SKvDYQGQrZu8rkQ_OJjd.UEfsuqcr0zJtEg_0B_LDc5Y8sN5Pph8Mm9NhCXvnseChrfwlsPt8svLJKK1Yhfx11O6stg.vJSI_NNH2t.hLvfAk4QzHapgzqb1o6suqKDOx2txNiVLdvYKFfteoBURfdbIjaI91oCV7ulWSGOyPZlPmWDHcv3jYLr7_u.WqFtCDDh_FFRNjYtbWuKpHjKGfDV.X4pjjOsUNjYHQmVNNTzYgsaIOFlISWAfIpgH9QCUhROlt.64ArDX27sbq0uhQdKMKdoPwoW3X.O0KXaf3kmR4jcEgEsqst6rFpelcXuPXw_HMtfFLQIyEpipaaM-~A
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/show-v0.0.1.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/47a35f8d492b78f231596b4e3dac133bc4c4115b/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/show-v0.0.1.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /policies/ HTTP/1.1Host: verizonmedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /policies/ HTTP/1.1Host: www.verizonmedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: legal.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: legal.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: A1=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A3=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM; A1S=d=AQABBI_4uGQCEEpwz4vwgLiitqXrfXzN0jkFEgEBAQFKumTCZLti0CMA_eMAAA&S=AQAAAtCCXHed5E30yrQLHyHzVbM&j=WORLD; cmp=t=1689843857&j=0&u=1---; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /zz/combo?ge/oath/policies/fonts/font_awesome_min_v1.1.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/api/toc/ass/css/v2/tocCustom_min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ge/oath/policies/css/oathstyles_min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/chrome-fieldset-fix.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zz/combo?ge/oath/policies/css/oathplcy_custom_min_v1.5.css&ge/oath/policies/css/ckeditor_min.css&ge/oath/policies/css/header_fixes_min_v1.2.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/oathsites/overlay/css/verizon-overlay-v1-min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/policies/css/yahooinc-policies-v1.11.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/policies/css/yahooinc-privacy-page-emea-v1.06b.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ge/toc/ass/js/modernizr.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ss/rapid3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zz/combo?ge/toc/ass/js/2.2.4/jquery.min.js&ge/toc/ass/js/libs.min.js&ge/toc/ass/js/tocCustom.js&cv/apiv2/oath/policies/js/app-min-v2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ge/oath/policies/fonts/oath-icons.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://s.yimg.com/ge/oath/policies/css/oathstyles_min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zz/ge/oath/policies/js/oathplcy_custom_min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zz/combo?ge/oath/policies/v1/dist/scripts/aimdata-min.js&ge/policies/js/v2/redirectTool_links_replacement_v2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/cd/yahooinc/fonts/YahooSans-Regular.woff HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://legal.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/cv/apiv2/yahooincsites/policies/css/yahooinc-policies-v1.11.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/oathsites/overlay/js/verizon-overlay-v3-min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/policies/js/yahooinc-policies-v1.03.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/vzmsites/policies/js/cpqp_v2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/policies/js/yahooinc-privacy-page-emea-v1.04.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/images/yahoo_logo_purple.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/cd/yahooinc/fonts/YahooSans-Semibold.woff HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://legal.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/cv/apiv2/yahooincsites/policies/css/yahooinc-policies-v1.11.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rz/l/favicon.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://legal.yahoo.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahooincsites/images/yahoo_logo_purple.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rz/l/favicon.ico HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /relevantads/ HTTP/1.1Host: info.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Found strings which match to known social media urls

Source: chromecache_318.1.dr	String found in binary or memory: <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://*.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.googlesyndication.com https://apps.rokt.com; frame-src *.fls.doubleclick.net https://s.yimg.com https://apps.rokt.com; connect-src https://www.google.com https://googleads.g.doubleclick.net;"> equals www.facebook.com (Facebook)
Source: chromecache_318.1.dr	String found in binary or memory: <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://*.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.googlesyndication.com https://apps.rokt.com; frame-src *.fls.doubleclick.net https://s.yimg.com https://apps.rokt.com; connect-src https://www.google.com https://googleads.g.doubleclick.net;"> equals www.twitter.com (Twitter)
Source: chromecache_318.1.dr	String found in binary or memory: <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://*.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.googlesyndication.com https://apps.rokt.com; frame-src *.fls.doubleclick.net https://s.yimg.com https://apps.rokt.com; connect-src https://www.google.com https://googleads.g.doubleclick.net;"> equals www.yahoo.com (Yahoo)
Source: chromecache_318.1.dr	String found in binary or memory: "https://www.yahoo.com", equals www.yahoo.com (Yahoo)
Source: chromecache_207.1.dr	String found in binary or memory: "tags":[{"function":"__flc","metadata":["map"],"vtp_enableConversionLinker":true,"vtp_groupTag":"ym6","vtp_useImageTag":false,"vtp_activityTag":"ym6lp","vtp_ordinalType":"STANDARD","vtp_conversionCookiePrefix":"_gcl","vtp_advertiserId":"9513459","vtp_ordinalStandard":["macro",2],"vtp_url":["macro",3],"vtp_enableGoogleAttributionOptions":false,"vtp_showConversionLinkingControls":true,"tag_id":1},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"\/\/beacon.krxd.net\/usermatch.gif?partner=yahoo_hguid\u0026partner_uid=%pu1=!;","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":3},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"https:\/\/beacon.krxd.net\/event.gif?event_id=M-apL1NM\u0026event_type=default","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":4},{"function":"__gclidw","metadata":["map"],"once_per_event":true,"vtp_enableCrossDomain":false,"vtp_enableCookieOverrides":false,"vtp_enableCrossDomainFeature":true,"tag_id":6},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"https:\/\/www.facebook.com\/tr?id=655642628197250\u0026ev=8983125_LP_ym7\u0026noscript=1\u0026dl=https:\/\/overview.mail.yahoo.com","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":7},{"function":"__paused","vtp_originalTagType":"img","tag_id":8},{"function":"__paused","vtp_originalTagType":"img","tag_id":9},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"https:\/\/sp.analytics.yahoo.com\/spp.pl?a=10000\u0026.yp=10189170\u0026ea=1","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":221},{"function":"__sp","metadata":["map"],"once_per_event":true,"vtp_enableConversionLinker":true,"vtp_enableDynamicRemarketing":false,"vtp_conversionCookiePrefix":"_gcl","vtp_conversionId":"1021203955","vtp_customParamsFormat":"NONE","vtp_conversionLabel":"t4EcCJGKo-ADEPOr-eYD","vtp_rdp":false,"vtp_enableOgtRmktParams":true,"vtp_enableUserId":true,"vtp_url":["macro",3],"vtp_enableRdpCheckbox":true,"vtp_enableConversionLinkingSettings":true,"tag_id":222},{"function":"__html","vtp_html":"\n\t\u003Cscript type=\"text\/gtmscript\"\u003E!function(d,g,e){d.TiktokAnalyticsObject=e;var a=d[e]=d[e]||[];a.methods=\"page track identify instances debug on off once ready alias group enableCookie disableCookie\".split(\" \");a.setAndDefer=function(b,c){b[c]=function(){b.push([c].concat(Array.prototype.slice.call(arguments,0)))}};for(d=0;d\u003Ca.methods.length;d++)a.setAndDefer(a,a.methods[d]);a.instance=function(b){b=a._i[b]||[];for(var c=0;c\u003Ca.methods.length;c++)a.setAndDefer(b,a.methods[c]);return b};a.load=function(b,c){var f=\"https:\/\/analytics.tiktok.com\/i18n\/pixel\/events.js\";\na._i=a._i||{};a._i[b]=[];a._i[b]._u=f;a._t=a._t||{};a._t[b]=+new Date;a._o=a._o||{};a._o[b]=c||{};c=document.createElement
Source: chromecache_207.1.dr	String found in binary or memory: "tags":[{"function":"__flc","metadata":["map"],"vtp_enableConversionLinker":true,"vtp_groupTag":"ym6","vtp_useImageTag":false,"vtp_activityTag":"ym6lp","vtp_ordinalType":"STANDARD","vtp_conversionCookiePrefix":"_gcl","vtp_advertiserId":"9513459","vtp_ordinalStandard":["macro",2],"vtp_url":["macro",3],"vtp_enableGoogleAttributionOptions":false,"vtp_showConversionLinkingControls":true,"tag_id":1},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"\/\/beacon.krxd.net\/usermatch.gif?partner=yahoo_hguid\u0026partner_uid=%pu1=!;","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":3},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"https:\/\/beacon.krxd.net\/event.gif?event_id=M-apL1NM\u0026event_type=default","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":4},{"function":"__gclidw","metadata":["map"],"once_per_event":true,"vtp_enableCrossDomain":false,"vtp_enableCookieOverrides":false,"vtp_enableCrossDomainFeature":true,"tag_id":6},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"https:\/\/www.facebook.com\/tr?id=655642628197250\u0026ev=8983125_LP_ym7\u0026noscript=1\u0026dl=https:\/\/overview.mail.yahoo.com","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":7},{"function":"__paused","vtp_originalTagType":"img","tag_id":8},{"function":"__paused","vtp_originalTagType":"img","tag_id":9},{"function":"__img","metadata":["map"],"once_per_event":true,"vtp_useCacheBuster":true,"vtp_url":"https:\/\/sp.analytics.yahoo.com\/spp.pl?a=10000\u0026.yp=10189170\u0026ea=1","vtp_cacheBusterQueryParam":"gtmcb","vtp_randomNumber":["macro",2],"tag_id":221},{"function":"__sp","metadata":["map"],"once_per_event":true,"vtp_enableConversionLinker":true,"vtp_enableDynamicRemarketing":false,"vtp_conversionCookiePrefix":"_gcl","vtp_conversionId":"1021203955","vtp_customParamsFormat":"NONE","vtp_conversionLabel":"t4EcCJGKo-ADEPOr-eYD","vtp_rdp":false,"vtp_enableOgtRmktParams":true,"vtp_enableUserId":true,"vtp_url":["macro",3],"vtp_enableRdpCheckbox":true,"vtp_enableConversionLinkingSettings":true,"tag_id":222},{"function":"__html","vtp_html":"\n\t\u003Cscript type=\"text\/gtmscript\"\u003E!function(d,g,e){d.TiktokAnalyticsObject=e;var a=d[e]=d[e]||[];a.methods=\"page track identify instances debug on off once ready alias group enableCookie disableCookie\".split(\" \");a.setAndDefer=function(b,c){b[c]=function(){b.push([c].concat(Array.prototype.slice.call(arguments,0)))}};for(d=0;d\u003Ca.methods.length;d++)a.setAndDefer(a,a.methods[d]);a.instance=function(b){b=a._i[b]||[];for(var c=0;c\u003Ca.methods.length;c++)a.setAndDefer(b,a.methods[c]);return b};a.load=function(b,c){var f=\"https:\/\/analytics.tiktok.com\/i18n\/pixel\/events.js\";\na._i=a._i||{};a._i[b]=[];a._i[b]._u=f;a._t=a._t||{};a._t[b]=+new Date;a._o=a._o||{};a._o[b]=c||{};c=document.createElement
Source: chromecache_213.1.dr	String found in binary or memory: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10100069"/><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10092709"/><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10092037"/><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10092036"/></body></html> equals www.yahoo.com (Yahoo)
Source: chromecache_205.1.dr	String found in binary or memory: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10100069"/><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10092709"/><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10092037"/><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10092036"/><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CL3IsP72nIADFcFOHgIdcsoPAg;src=9513459;type=ym6;cat=ym6lp;ord=1242130623712;gdpr=0;gdpr_consent=tcempty;gtm=45He37h0;gcs=G11-;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uamb=0;uam=;uap=Windows;uapv=6.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-PH8Z3T7%26type%3Dym6%26cat%3Dym6lp"/></body></html> equals www.yahoo.com (Yahoo)
Source: chromecache_270.1.dr	String found in binary or memory: ais)</a> <a href="/ie/it/yahoo/terms/otos/index.html">Switzerland (italiano)</a> <a href="/sg/en/yahoo/terms/otos/index.html">Singapore (English)</a><a href="https://www.beboundless.jp/policies/terms-of-service"> equals www.yahoo.com (Yahoo)
Source: chromecache_207.1.dr	String found in binary or memory: function aB(a,b){var c=this;return b}aB.I="internal.enableAutoEventOnScroll";var cc=ea(["data-gtm-yt-inspected-"]),bB=["www.youtube.com","www.youtube-nocookie.com"],cB,dB=!1; equals www.youtube.com (Youtube)

URLs found in memory or binary data

Source: chromecache_230.1.dr	String found in binary or memory: http://createjs.com/
Source: chromecache_278.1.dr, chromecache_304.1.dr	String found in binary or memory: http://creativecommons.org/ns#
Source: chromecache_312.1.dr	String found in binary or memory: http://l.yimg.com/d/
Source: chromecache_230.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_318.1.dr	String found in binary or memory: https://5237.xg4ken.com
Source: chromecache_207.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_207.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_207.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_207.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_318.1.dr	String found in binary or memory: https://apps.rokt.com/
Source: chromecache_318.1.dr	String found in binary or memory: https://beacon.krxd.net
Source: chromecache_318.1.dr	String found in binary or memory: https://canary-www.aol.com
Source: chromecache_318.1.dr	String found in binary or memory: https://canary.www.aol.com
Source: chromecache_207.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_318.1.dr	String found in binary or memory: https://currently.att.yahoo.com
Source: chromecache_318.1.dr	String found in binary or memory: https://dev.checkout.aol.com
Source: chromecache_318.1.dr	String found in binary or memory: https://dev.subscriptions.yahoo.com
Source: chromecache_318.1.dr	String found in binary or memory: https://discover.aol.com
Source: chromecache_318.1.dr	String found in binary or memory: https://events.xg4ken.com
Source: chromecache_318.1.dr	String found in binary or memory: https://finance.yahoo.com
Source: chromecache_318.1.dr	String found in binary or memory: https://football.fantasysports.yahoo.com
Source: chromecache_199.1.dr	String found in binary or memory: https://github.com/yui/pure/blob/master/LICENSE.md
Source: chromecache_207.1.dr	String found in binary or memory: https://google.com/ccm/form-data/
Source: chromecache_207.1.dr	String found in binary or memory: https://google.com/pagead/form-data/
Source: chromecache_318.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_207.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_207.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/
Source: chromecache_318.1.dr	String found in binary or memory: https://live.rezync.com
Source: chromecache_318.1.dr	String found in binary or memory: https://membership-cdn.s3.amazonaws.com
Source: chromecache_318.1.dr	String found in binary or memory: https://membership-ycs-cdn.s3.amazonaws.com
Source: chromecache_320.1.dr	String found in binary or memory: https://mobileexchange.yahoo.com/dismiss
Source: chromecache_318.1.dr	String found in binary or memory: https://overview.mail.yahoo.com
Source: chromecache_207.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_207.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_207.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_318.1.dr	String found in binary or memory: https://pubads.g.doubleclick.net
Source: chromecache_318.1.dr	String found in binary or memory: https://qa.subscriptions.aol.com
Source: chromecache_318.1.dr	String found in binary or memory: https://s.amazon-adsystem.com
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot);src:url(https://s.yimg.com/cv/ae/sp
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot);src:url(https://s.yimg.com/cv/ae/spo
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot);src:url(https://s.yimg.com/cv/a
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/s
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sp
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot);src:url(https://s.yimg.com/cv/ae/s
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot);src:url(https://s.yimg.com/cv/ae/
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.eot);src:url(https://s.yimg.com/cv/ae
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff)
Source: chromecache_199.1.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2)
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/api/toc/ass/css/v2/tocCustom_min.css
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/oathsites/overlay/css/verizon-overlay-v1-min.css
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/oathsites/overlay/js/verizon-overlay-v3-min.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/vzmsites/policies/js/cpqp_v2.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/yahooincsites/chrome-fieldset-fix.css
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/yahooincsites/images/yahoo_logo_purple.svg
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/yahooincsites/policies/css/yahooinc-policies-v1.11.min.css
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/yahooincsites/policies/css/yahooinc-privacy-page-emea-v1.06b.min.css
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/yahooincsites/policies/js/yahooinc-policies-v1.03.min.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/yahooincsites/policies/js/yahooinc-privacy-page-emea-v1.04.min.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/ge/oath/policies/css/oathstyles_min.css
Source: chromecache_206.1.dr	String found in binary or memory: https://s.yimg.com/ge/oath/policies/fonts/fontawesome-webfont.eot?#iefix&v=4.4.0
Source: chromecache_206.1.dr	String found in binary or memory: https://s.yimg.com/ge/oath/policies/fonts/fontawesome-webfont.eot?v=4.4.0
Source: chromecache_206.1.dr	String found in binary or memory: https://s.yimg.com/ge/oath/policies/fonts/fontawesome-webfont.svg?v=4.4.0#fontawesomeregular
Source: chromecache_206.1.dr	String found in binary or memory: https://s.yimg.com/ge/oath/policies/fonts/fontawesome-webfont.woff2?v=4.4.0
Source: chromecache_206.1.dr	String found in binary or memory: https://s.yimg.com/ge/oath/policies/fonts/fontawesome-webfont.woff?v=4.4.0
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/ge/toc/ass/js/1.4.2/respond.min.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/ge/toc/ass/js/3.7.3/html5shiv.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/ge/toc/ass/js/modernizr.min.js
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/ge/toc/assets/safari-pinned-tab.svg
Source: chromecache_264.1.dr, chromecache_236.1.dr	String found in binary or memory: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-PH8Z3T7&type=ym6&cat=ym6lp
Source: chromecache_312.1.dr	String found in binary or memory: https://s.yimg.com/lq/
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/rz/l/favicon.ico
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/ss/rapid3.js
Source: chromecache_320.1.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/images/pfs/g/profile.svg
Source: chromecache_320.1.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/images/profile
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/zz/combo?ge/oath/policies/css/oathplcy_custom_min_v1.5.css&ge/oath/policies/css/c
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/zz/combo?ge/oath/policies/fonts/font_awesome_min_v1.1.css
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/zz/combo?ge/oath/policies/v1/dist/scripts/aimdata-min.js&ge/policies/js/v2/redire
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/zz/combo?ge/toc/ass/js/2.2.4/jquery.min.js&ge/toc/ass/js/libs.min.js&ge/toc/ass/j
Source: chromecache_270.1.dr	String found in binary or memory: https://s.yimg.com/zz/ge/oath/policies/js/oathplcy_custom_min.js
Source: chromecache_318.1.dr	String found in binary or memory: https://secure.adnxs.com
Source: chromecache_234.1.dr, chromecache_223.1.dr	String found in binary or memory: https://sketch.com
Source: chromecache_318.1.dr	String found in binary or memory: https://sp.analytics.yahoo.com
Source: chromecache_318.1.dr	String found in binary or memory: https://sports.yahoo.com
Source: chromecache_318.1.dr	String found in binary or memory: https://subscriptions.aol.com
Source: chromecache_207.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_318.1.dr	String found in binary or memory: https://trc.taboola.com
Source: chromecache_318.1.dr	String found in binary or memory: https://www.aol.ca
Source: chromecache_318.1.dr	String found in binary or memory: https://www.aol.co.uk
Source: chromecache_318.1.dr	String found in binary or memory: https://www.aol.com
Source: chromecache_318.1.dr	String found in binary or memory: https://www.aol.de
Source: chromecache_270.1.dr	String found in binary or memory: https://www.beboundless.jp/policies/terms-of-service
Source: chromecache_207.1.dr, chromecache_318.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_207.1.dr	String found in binary or memory: https://www.google.com/
Source: chromecache_318.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_207.1.dr	String found in binary or memory: https://www.googleadservices.com/
Source: chromecache_318.1.dr	String found in binary or memory: https://www.googleadservices.com;img-src
Source: chromecache_207.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_207.1.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_318.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_318.1.dr	String found in binary or memory: https://www.yahoo.com
Source: chromecache_270.1.dr	String found in binary or memory: https://www.yahooinc.com/
Source: chromecache_318.1.dr	String found in binary or memory: https://www5.yahoo.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

System Summary

Classification label

Source: classification engine

Classification label: mal48.win@41/148@43/22

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1684,i,11320740415322720567,10123611787667772548,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.onelink.me/107872968?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000604&af_sub5=EmailSignature__Static_
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://mail.onelink.me/107872968/overview?af_qr=true
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1816 --field-trial-handle=1840,i,4668591896201694391,7806035017809185636,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1684,i,11320740415322720567,10123611787667772548,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1816 --field-trial-handle=1840,i,4668591896201694391,7806035017809185636,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Found GUI installer (many successful clicks)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior