Windows Analysis Report
https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push

Overview

General Information

Sample URL:	https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push
Analysis ID:	1445929
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Performs DNS queries to domains with low reputation

Detected suspicious crossdomain redirect

HTML body with high number of embedded SVGs detected

Classification

Signatures

HTML body with high number of embedded SVGs detected

Source: https://www.pdffiller.com/jsfiller-desk21/?flat_pdf_quality=low&lang=en&projectId=1523593296&PAGE_REARRANGE_V2_MVP=true&richTextFormatting=true&isPageRearrangeV2MVP=true&jsf-page-rearrange-v2=true&jsf-dss-v2=false&LATEST_PDFJS=true&jsf-document-scroll-zoom=true&jsf-redesign-full=true&act-notary-pro-integration=true&jsf-pdfjs-fourth=false&jsf-fake-edit-embedded=false&isSkipEditorLoadFrequency=true&routeId=c3fdfecce17e080a1ae875d1317f2557#bd5f464aa0694b0da0b05291e3614764

HTTP Parser: Total embedded SVG size: 316596

Source: https://td.doubleclick.net/td/rul/972636148?random=1716400535062&cv=11&fst=1716400535062&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv...	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/981120876?random=1716400539474&cv=11&fst=1716400539474&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=...	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.mr-prod.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.mr-prod.xyz

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: link.pdffiller.com to https://pdf.ac/2jvecj
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: pdf.ac to https://www.pdffiller.com/en/login/auto.htm?id=223342988&uid=38d66040-3507-4f79-a4be-d4330a000dae&hash=3f1cd57714ce9d4e0605875e97a6c318&t=1716230568&notloginagain=1

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push HTTP/1.1Host: link.pdffiller.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2jvecJ HTTP/1.1Host: pdf.acConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sks/js/sks_track.js HTTP/1.1Host: cdn.mr-prod.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: sks.mrkhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: sks.mrkhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sks_initial_page=eyJpdiI6Im95TUxrQnhoNkw1RFVSMWNuR0hSNmc9PSIsInZhbHVlIjoiQWZaTU5Fd2RJWUtNek9lYVpOL0dPbngvOHdIMUsrZ29OaVg4aWR3WFFXUThpQVRqTUJiMmFwVjFIbnNtT3BpT3AxcmIvM2NEV1ptZ3dPWHZoUTA1RmFOR25RdEl4WFVMNE1YUkxsUFhWMGs9IiwibWFjIjoiNWQ3MjlkZjM4OTVlNzM2OWVjNTlmYzgxZDZmYmU1NjgxMWIzNDZiYzIwZGU4M2IxNjZjNWNlYTlhNzQwZjNiNSIsInRhZyI6IiJ9; sks_referrer=eyJpdiI6Im9XZkRBWlYyVUxOcm9KdkZUUGRPQUE9PSIsInZhbHVlIjoiaThMU3pkYWN0NFB4M2JWbEJ6anpIL3UxWjl2Y0tReFVMODdkUnM2VE9rZEN2YzFTZmhJWTFIOTk1bVBjcU5UYyIsIm1hYyI6IjEyM2E3NjE4MDFjZDEwMWJkOGZmMzdjMDBlNzA4YTJiZWZmN2U0ZWRkZTE0MDlkODcyNzU5ZTcwNzY1YzY2N2EiLCJ0YWciOiIifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/pdffiller/chat/get-src HTTP/1.1Host: support-backend.usrsprt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/pdffiller/chat/get-src HTTP/1.1Host: support-backend.usrsprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /active/pdffiller.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/6384de6decd4010c99aefa80 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/jsfiller-desk21/?flat_pdf_quality=low&lang=en&projectId=1523593296&PAGE_REARRANGE_V2_MVP=true&richTextFormatting=true&isPageRearrangeV2MVP=true&jsf-page-rearrange-v2=true&jsf-dss-v2=false&LATEST_PDFJS=true&jsf-document-scroll-zoom=true&jsf-redesign-full=true&act-notary-pro-integration=true&jsf-pdfjs-fourth=false&jsf-fake-edit-embedded=false&isSkipEditorLoadFrequency=true&routeId=c3fdfecce17e080a1ae875d1317f2557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/972636148?random=1716400535062&cv=11&fst=1716400535062&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /locales/sv-locales/97/en/pdffiller-chat.json HTTP/1.1Host: cdn.usrsprt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlvwNi4t1ZnzngrhaT7u02h-kxBLwJRisoNA&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /locales/sv-locales/97/en/pdffiller-chat.json HTTP/1.1Host: cdn.usrsprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLpKay4eHB3ZOHafm-E9OhF643KMZSFCzas3q8_KJz4_jsdXRP&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlv33_koN7whVQbEwusYxHgTm5FelRJyIgJg&random=1857435326 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1441276/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLpKay4eHB3ZOHafm-E9OhF643KMZSFCzas3q8_KJz4_jsdXRP&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlv33_koN7whVQbEwusYxHgTm5FelRJyIgJg&random=1857435326 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.2bdc3040.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10193318.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/981120876?random=1716400539474&cv=11&fst=1716400539474&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPCch55xlb8r19ckPXIC0TCpXjOghZxZ-LJDT-dKgTPGbRwoCTjgRLmhOx
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/trc/3/json?tim=1716400539257&data=%7B%22id%22%3A306%2C%22ii%22%3A%22%2Fjsfiller-desk21%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1716400539249%2C%22cv%22%3A%2220240512-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dairslate-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1716400539256%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10193318.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/981120876/?random=1716400539474&cv=11&fst=1716400539474&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPCch55xlb8r19ckPXIC0TCpXjOghZxZ-LJDT-dKgTPGbRwoCTjgRLmhOx
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJ4xTmYCEJL9MiyiLFuo-Dg7eejklOsFEgEBAQGDT2ZYZtwr0iMA_eMAAA&S=AQAAAm7lST-DyZmyVM9PvKktZ2M
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d
Source: global traffic	HTTP traffic detected: GET /?uid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U= HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/981120876/?random=1716400539474&cv=11&fst=1716397200000&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLOTOFDL2RCQOnhFeI9mhy2Cikrds1MbXn5zLY1bzObSz4X0wm&random=1534636021&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=1649&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1716400540904&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/981120876/?random=1716400539474&cv=11&fst=1716397200000&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLOTOFDL2RCQOnhFeI9mhy2Cikrds1MbXn5zLY1bzObSz4X0wm&random=1534636021&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=4669&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1716400543924&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=10681&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=6000&msa=0&rv=1&tim=1716400549936&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=22696&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=12000&msa=0&rv=1&tim=1716400561951&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=46725&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=24000&msa=0&rv=1&tim=1716400585980&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1

Source: chromecache_165.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ka=0;ka<oa;ka++)if(!v&&c(R[ka],E.xe)){pI("https://www.youtube.com/iframe_api");v=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.D="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!EC&&LC(y[B],n.xe))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_132.2.dr, chromecache_142.2.dr	String found in binary or memory: return b}AC.K="internal.enableAutoEventOnTimer";var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: link.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: pdf.ac
Source: global traffic	DNS traffic detected: DNS query: www.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static-ak.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: jsfiller-cdn.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: desk21-rest.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mr-prod.xyz
Source: global traffic	DNS traffic detected: DNS query: sks.mrkhub.com
Source: global traffic	DNS traffic detected: DNS query: support-backend.usrsprt.com
Source: global traffic	DNS traffic detected: DNS query: www.upsellit.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.usrsprt.com
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: psb.taboola.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: pips.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cds.taboola.com

Source: unknown

HTTP traffic detected: POST /pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_163.2.dr	String found in binary or memory: http://opensource.org/licenses/BSD-2-Clause
Source: chromecache_163.2.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: chromecache_165.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_110.2.dr	String found in binary or memory: https://app.upsellit.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/cds-pips.js
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/eid.es5.js
Source: chromecache_147.2.dr, chromecache_114.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_165.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_123.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_123.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_165.2.dr	String found in binary or memory: https://google.com
Source: chromecache_165.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_134.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/972636148/?random
Source: chromecache_165.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_110.2.dr	String found in binary or memory: https://prod.upsellit.com
Source: chromecache_165.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: chromecache_165.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_114.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.2bdc3040.js
Source: chromecache_167.2.dr	String found in binary or memory: https://sks.mrkhub.com
Source: chromecache_165.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_115.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/frontend/SupportChat/9100/product.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/client.8f0f19f8.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/daf652ad120a6f9e18e7.png
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/defaultVendors~client.0ab755cf.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/init.2439b852.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/loader.f2f7302b.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/runtimeRequiredModules.00f5f018.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/styles.ecd4c963.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/vendors.fd3db64a.js
Source: chromecache_162.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_115.2.dr	String found in binary or memory: https://support-backend.usrsprt.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_157.2.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/981120876/?random
Source: chromecache_165.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_162.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_122.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp?v=1
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp?v=2
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?aff_click=
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?pixel_found=
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: classification engine

Classification label: sus21.troj.win@18/133@94/31

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,11921569596670741214,244101229723681260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,11921569596670741214,244101229723681260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.175.88	cdn.mr-prod.xyz	United States	16509	AMAZON-02US	true
52.3.139.40	unknown	United States	14618	AMAZON-AESUS	false
151.101.0.84	unknown	United States	54113	FASTLYUS	false
34.231.140.70	support-backend.usrsprt.com	United States	14618	AMAZON-AESUS	false
146.75.120.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false
87.248.119.251	unknown	United Kingdom	203220	YAHOO-DEBDE	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
44.208.192.78	sks.mrkhub.com	United States	14618	AMAZON-AESUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
34.117.39.58	www.upsellit.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
216.58.212.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.193.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
3.255.41.64	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
18.239.50.64	d22ae2h56hzn7.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
54.91.50.11	link.pdffiller.com	United States	14618	AMAZON-AESUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
52.20.83.147	q.quora.com	United States	14618	AMAZON-AESUS	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
99.86.4.25	d2rn6xhdztxqr5.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
34.206.16.59	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.81.234.172	pdf.ac	United States	14618	AMAZON-AESUS	false
18.65.39.22	cdn.usrsprt.com	United States	3	MIT-GATEWAYSUS	false
141.226.224.32	us-cds.taboola.com	Israel	200478	TABOOLA-ASIL	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.192.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
18.245.60.44	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

Contacted Domains

Name	IP	Active
tls13.taboola.map.fastly.net	151.101.193.44	true
sks.mrkhub.com	44.208.192.78	true
ws.zoominfo.com	104.16.118.43	true
d22ae2h56hzn7.cloudfront.net	18.239.50.64	true
us-cds.taboola.com	141.226.224.32	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
spdc-global.pbp.gysm.yahoodns.net	3.255.41.64	true
support-backend.usrsprt.com	34.231.140.70	true
www.upsellit.com	34.117.39.58	true
pdf.ac	54.81.234.172	true
bg.microsoft.map.fastly.net	199.232.214.172	true
cdn.usrsprt.com	18.65.39.22	true
prod.pinterest.global.map.fastly.net	151.101.192.84	true
link.pdffiller.com	54.91.50.11	true
cdn.mr-prod.xyz	18.245.175.88	true
googleads.g.doubleclick.net	172.217.16.194	true
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true
dualstack.pinterest.map.fastly.net	146.75.120.84	true
www.google.com	142.250.185.132	true
td.doubleclick.net	216.58.212.130	true
d2rn6xhdztxqr5.cloudfront.net	99.86.4.25	true
edge.gycpi.b.yahoodns.net	87.248.119.252	true
q.quora.com	52.20.83.147	true
am-vip001.taboola.com	141.226.228.48	true
www.pdffiller.com	unknown	unknown
sp.analytics.yahoo.com	unknown	unknown
a.quora.com	unknown	unknown
psb.taboola.com	unknown	unknown
ct.pinterest.com	unknown	unknown
desk21-rest.pdffiller.com	unknown	unknown
static-ak.pdffiller.com	unknown	unknown
trc-events.taboola.com	unknown	unknown
cds.taboola.com	unknown	unknown
jsfiller-cdn.pdffiller.com	unknown	unknown
www.linkedin.com	unknown	unknown
trc.taboola.com	unknown	unknown
px.ads.linkedin.com	unknown	unknown
s.yimg.com	unknown	unknown
snap.licdn.com	unknown	unknown
s.pinimg.com	unknown	unknown
cdn.taboola.com	unknown	unknown
cdn.pdffiller.com	unknown	unknown
pips.taboola.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://s.yimg.com/wi/config/10193318.json	false	Avira URL Cloud: safe	unknown
https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push	false		unknown
https://s.yimg.com/wi/ytc.js	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD	false	Avira URL Cloud: safe	unknown
https://ws.zoominfo.com/pixel/6384de6decd4010c99aefa80	false	Avira URL Cloud: safe	unknown
https://trc-events.taboola.com/1441276/log/3/unip?en=pre_d_eng_tb&tos=22696&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=12000&msa=0&rv=1&tim=1716400561951&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown
https://s.pinimg.com/ct/core.js	false	URL Reputation: safe	unknown
https://cdn.taboola.com/libtrc/unip/1441276/tfa.js	false	Avira URL Cloud: safe	unknown
https://trc-events.taboola.com/1441276/log/3/unip?en=pre_d_eng_tb&tos=4669&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1716400543924&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown
https://www.pdffiller.com/jsfiller-desk21/?flat_pdf_quality=low&lang=en&projectId=1523593296&PAGE_REARRANGE_V2_MVP=true&richTextFormatting=true&isPageRearrangeV2MVP=true&jsf-page-rearrange-v2=true&jsf-dss-v2=false&LATEST_PDFJS=true&jsf-document-scroll-zoom=true&jsf-redesign-full=true&act-notary-pro-integration=true&jsf-pdfjs-fourth=false&jsf-fake-edit-embedded=false&isSkipEditorLoadFrequency=true&routeId=c3fdfecce17e080a1ae875d1317f2557#bd5f464aa0694b0da0b05291e3614764	false		unknown
https://trc-events.taboola.com/1441276/log/3/unip?en=pre_d_eng_tb&tos=46725&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=24000&msa=0&rv=1&tim=1716400585980&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown
https://www.upsellit.com/active/pdffiller.jsp	false	Avira URL Cloud: safe	unknown
https://trc-events.taboola.com/1441276/log/3/unip?en=pre_d_eng_tb&tos=10681&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=6000&msa=0&rv=1&tim=1716400549936&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown
https://s.pinimg.com/ct/lib/main.2bdc3040.js	false	Avira URL Cloud: safe	unknown
https://cdn.taboola.com/scripts/eid.es5.js	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/ct.html	false	URL Reputation: safe	unknown
https://pips.taboola.com/	false	Avira URL Cloud: safe	unknown
https://cdn.mr-prod.xyz/sks/js/sks_track.js	false		unknown
https://ct.pinterest.com/static/ct/token_create.js	false	Avira URL Cloud: safe	unknown
https://pdf.ac/2jvecJ	false	Avira URL Cloud: safe	unknown
https://cds.taboola.com/?uid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U=	false	Avira URL Cloud: safe	unknown
https://support-backend.usrsprt.com/api/pdffiller/chat/get-src	false	Avira URL Cloud: safe	unknown
https://cdn.taboola.com/scripts/cds-pips.js	false	Avira URL Cloud: safe	unknown
https://trc.taboola.com/1441276/trc/3/json?tim=1716400539257&data=%7B%22id%22%3A306%2C%22ii%22%3A%22%2Fjsfiller-desk21%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1716400539249%2C%22cv%22%3A%2220240512-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dairslate-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1716400539256%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i	false	Avira URL Cloud: safe	unknown
https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm	false	Avira URL Cloud: safe	unknown
https://cdn.usrsprt.com/locales/sv-locales/97/en/pdffiller-chat.json	false	Avira URL Cloud: safe	unknown
https://sks.mrkhub.com/track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534	false	Avira URL Cloud: safe	unknown
https://psb.taboola.com/topics_api	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534	false	Avira URL Cloud: safe	unknown
https://trc-events.taboola.com/1441276/log/3/unip?en=pre_d_eng_tb&tos=1649&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1716400540904&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown
https://q.quora.com/_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	Web Open Font Format (Version 2), TrueType, length 133856, version 1.0	16B92FDA5835A47B196308CB38268F33	25738A01CE3A56F68D385DE9E819D97411DD8FB1	799D0EE512289D955A27DAEC97A96ED0FEB4708F253822E1CB9A3303385A1D16
Chrome Cache Entry: 101	ASCII text, with very long lines (65509)	58D5F240C86E32E9A1D9E1539ABAFA95	26017F572A17C11426FAFA08D2AFD2CB447624A0	D155824AFC2BA92848EB7BF02FD78F6920E04AB8853701D89A3EBB5D58FACDB3
Chrome Cache Entry: 102	Web Open Font Format (Version 2), TrueType, length 47028, version 1.6619	3ADA8B03A3E866F5C93B3EBF1174D627	CB2A4471D349D5D58FA60B170B7ED69F2B563508	BF1CA5CEF97FE56D2BE5C81677DA587B86C4392D454DA3793BBC76F67A078066
Chrome Cache Entry: 103	HTML document, Unicode text, UTF-8 text, with very long lines (35625)	F02DF3C64A4A9D9FF591B2A6DFD4CAD0	5FB3A12FBEDF1F78FFEF3294312FA9F6CB50071F	44A7C9EF0C8143A93E5E95B130401C98AAB82B2C9973E9BBC5DF4226EB7DD5BA
Chrome Cache Entry: 104	HTML document, ASCII text	2489B6BEDA4E86203D22D9C4D2E67094	590C361A0E91BB56D08DDEC98BF49A02E017D191	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
Chrome Cache Entry: 105	ASCII text, with very long lines (5991)	B6F791879DB717033584FB19BB0F4F89	1F72CDAC0851B477A9EEB010BF58CCBBDB88B6A3	5691D8D409C6C863010271A58172C7546CB90DF478722B768A38A6F81FF28981
Chrome Cache Entry: 106	ASCII text, with very long lines (51751), with no line terminators	D324CD5AED5DC65E2A8276364C6C3A8C	B0493AC37D9A79F1578BE9B7D3578793FE206332	C257A5476E7D7DA188BE6A6F4F350416E87CA8358A1F6F074DC7BA11A5BAFACE
Chrome Cache Entry: 107	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 108	ASCII text, with very long lines (65475)	3292E3E2CA96138ECD051DC739B6D4F6	45009E546AAEBD46FC45F368EDB6A3FAA0589B78	EDB4B3C0125B41A2EC47CEA007CF9D20BD42D6B742DCACCC3FBCA12B83631C70
Chrome Cache Entry: 109	HTML document, ASCII text	2489B6BEDA4E86203D22D9C4D2E67094	590C361A0E91BB56D08DDEC98BF49A02E017D191	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
Chrome Cache Entry: 110	ASCII text, with very long lines (8035), with CRLF, LF line terminators	3514958D3188E659CAA4C79791EC9C40	65B92923F31DECF257C1323DD5A46E724D9F2F60	B18F8776384B03BE357894ADFC394B7061ACBB4C5CD269E0F09413B9F19D0392
Chrome Cache Entry: 111	ASCII text, with no line terminators	3644A684F98EA8FE223C713B77189A77	9F9AF029585BA014E07CD3910CA976CF56160616	27BADC983DF1780B60C2B3FA9D3A19A00E46AAC798451F0FEBDCA52920FAADDF
Chrome Cache Entry: 112	Unicode text, UTF-8 text, with very long lines (47653)	48ED7AE7E685F5469D86B54CC802F8EB	E88318F6E8B0D255D2D5CB684A4DF120437AE610	899D1EC3C095342571D3BE2091EC6F984D4CC82390D1F61945C391FA035B00D9
Chrome Cache Entry: 113	ASCII text, with very long lines (15757)	7186A90FAC72ACA234B978623F145BB3	C1BAAC5AAC7204ACF77BD167DA046C8C9C79AB1E	2CD0207FD65865F4D51B63B88F094205FF2F79D5DAB579EFA0DB27D44C29512A
Chrome Cache Entry: 114	ASCII text, with very long lines (4779), with no line terminators	F1BBA52AB91FDAB0938377D8E6D7B533	C40DF235D4697579CA6348F767A36A5C94FF7E9A	0882BE2BB685D64AE46B56574B330FB1AFE5DFEF39F940D12CA776475248EAA8
Chrome Cache Entry: 115	ASCII text, with very long lines (4857)	1A00F1A7B319FB6558AD972312A9EFA5	E07EB97D832578BC826970A878B1991519026E8B	9B436AD4583C976D495BAB6C467F9E88A09E745BE6E7089146F3D4D2A9708929
Chrome Cache Entry: 116	GIF image data, version 89a, 1 x 1	DF3E567D6F16D040326C7A0EA29A4F41	EA7DF583983133B62712B5E73BFFBCD45CC53736	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
Chrome Cache Entry: 117	data	1889AB150305DE26C64296F750EFC3A5	135527F9659360D9B664AAC51A74DBC651BB7514	1C413B86478D4B3CCFD0DE88623EB9AC83EB53330257E50E9E5AF52145828128
Chrome Cache Entry: 118	HTML document, ASCII text, with very long lines (65536), with no line terminators	016E0F51F64FC3479337354A85445144	E5BFB5A1E5DF205DC420D44DC6D7A00303E0BFB1	3EFD500D195B37C79516D851072D6C69DC9AF33CF0038BAE7E4813E9BC483D97
Chrome Cache Entry: 119	Unicode text, UTF-8 text, with very long lines (65442)	628B1A053A1981FBADB96C067917FB86	3938836E0E78F4FD97B3CC44F861AE0AF7A9839E	10B83665CFB6A8F45032E78486EADECA7A841CAC0DA2F7F09B8B84EA08118F02
Chrome Cache Entry: 120	JSON data	692E9DED77E65AA816AE69551AF8D86E	075B28B939271A539442D060A85D14C1720690DB	A195296F4F6327B8EB503B8FACA4F68E59CF3B53635F542450C6EFA4CAE304C9
Chrome Cache Entry: 121	ASCII text	39BCBCE4B1F98419397AD0977300B8A1	0EAC9A03833A0D84B447BD8D370FF49C482A0B63	408E6F68A658A1100054763893DB43B6459BCB133D7D168A64905114061B77EC
Chrome Cache Entry: 122	HTML document, ASCII text, with very long lines (565), with no line terminators	433CBAC690542626F503B4269A8DA12A	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
Chrome Cache Entry: 123	ASCII text, with very long lines (65536), with no line terminators	06D553B7346A54F8D31A4B78D2E7329F	C64779D9DBCCAFC1A99AFCB900742CF2FD12B3CC	7EFAD4B4B0A47C60FB19C3F51147123DBC5722014D7F0F472F4CC0621077753B
Chrome Cache Entry: 124	ASCII text, with very long lines (65536), with no line terminators	F58F8A069DFCC816C746B71252860239	636EEAA3AE85EFE488814DABDFB15FC69A602C66	B4460E1F921BBEF5E5AE8CB52A60BB0891300D2C9343570658AB8A6ED19516CF
Chrome Cache Entry: 125	GIF image data, version 89a, 1 x 1	DF3E567D6F16D040326C7A0EA29A4F41	EA7DF583983133B62712B5E73BFFBCD45CC53736	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
Chrome Cache Entry: 126	gzip compressed data, was "main.2bdc3040.js", last modified: Wed May 1 18:11:28 2024, from Unix, original size modulo 2^32 70611	502643635C99771E124DE408718C65B3	AC111B326DB429D34F517ED197B8F4C02F95B6EF	43333E8FFEAC64D2470D49B30683A7D9A06A6CFAF3FFCB0EDC040563D0FCD033
Chrome Cache Entry: 127	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 128	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators	72BCA04FD669EB89FC65D59052D0FC00	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
Chrome Cache Entry: 129	ASCII text, with very long lines (65536), with no line terminators	201DEBCA65A483FCB0EC7A2059B6C471	DEED816C207B26B6CE52BE0E61D45EEDED0A10E4	2DC586202FAC898DFBBFA31C503731345DDFC6BDF118A46BD2179F46ADF1BC73
Chrome Cache Entry: 130	ASCII text, with very long lines (609)	8084DA3C9E7258595971AEFA1864CEE1	02F1E2F249863AE2F0F6296AED46DC96FA42EC16	B3F0A51197E77B186F31DE4B16A5281246CC58F540F510B3329BC236508A531E
Chrome Cache Entry: 131	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel	80A901D5EBC514F8CB2ED971A1F2DA0C	DEC11E9203546C4FA3C7C3A202319FD1EFD92587	21200A260F524190AAF936519C1DD7472DF32D3FB2E8840DBFD5105334B1BFF6
Chrome Cache Entry: 132	ASCII text, with very long lines (4179)	6F01E5272DB1C51B58D615AFF5E9D46B	099BC89F89DBA07BC0BD2568F1D79CEBD1671940	61CAC49B314567931BA94380980A8816873615B69CA26434A9D6F26A5A250DE6
Chrome Cache Entry: 133	JSON data	C4AF1078A5D64C9FC2E3DCBBC9F8E27E	4C27352ECE898F2440A7C60FA694E177F4E06821	3548757B6AD39D94FBF045E0CA57F35C269FB1751C2DBD4DA0349E24A56AD200
Chrome Cache Entry: 134	ASCII text, with very long lines (3416), with no line terminators	8DCF7A2A53D8F07885C16754386FFC96	3D1FCB321579C3C2DF0FE0EA4E0983C55EA5B55B	12DFBF897C1A8A46577438104122843CF360B7E8FF57E7D5DF0FED7AEAF56685
Chrome Cache Entry: 135	ASCII text, with very long lines (2452)	1E6EB3EBBB33B587C8740B59ADB494B7	EEBD2719C60942BAF1C665897402D0B549F26E16	F0C9C554B8CE27876E69E3CCB937905D42F8C76461B2F580BD2679C2778608C9
Chrome Cache Entry: 136	HTML document, ASCII text, with very long lines (65536), with no line terminators	45D281CEA5E93B88725DA37097FDE338	AB6E56358C394CBF6852FDE41A64AFEC9973BD6A	2C81A1DAEAD9C5DA94BDCCF1A96E283DF0E4058ECC318283A84DB67023AC2763
Chrome Cache Entry: 137	PNG image data, 208 x 224, 8-bit colormap, non-interlaced	5AD00487BC3D0E0E9E095C96B289D23E	AC229B07D345A579901CCD6D47458ED7CBDE1347	D510056EB2C11760709A610B073DC35DD73F10D309D86A092A5F2794F47AAAA4
Chrome Cache Entry: 138	ASCII text, with no line terminators	3644A684F98EA8FE223C713B77189A77	9F9AF029585BA014E07CD3910CA976CF56160616	27BADC983DF1780B60C2B3FA9D3A19A00E46AAC798451F0FEBDCA52920FAADDF
Chrome Cache Entry: 139	ASCII text, with very long lines (65536), with no line terminators	1A192B6D84BB85F28DF607F7FF29CECA	E818040CACD029BD0FC97701B7D61E6E8F1C425D	66679DB80DDF83BF29AF51229258916265DCB94EB84532F4CA89DB76EFEC7216
Chrome Cache Entry: 140	ASCII text	133B2F2F68781D807AAC35B8205D3BF4	A0570A3C35E1E965539E77EEE5FF5D99D48B8CA5	991AB3CAF1564D447548AD4EAAEECAF71B73DCA598558CE765FC98ACF33C86D1
Chrome Cache Entry: 141	ASCII text, with very long lines (2679), with no line terminators	63A5B6B3B923D5EF04C7DB5B2044DB65	E01CCB8E8643B164B1EB7F8216545920DA4828B9	6ACAAABEB54C4A26960AC6A44FCC200D7E8C53A1BAB84417C7D61CEE11819A17
Chrome Cache Entry: 142	ASCII text, with very long lines (16584)	8D4B65FEF937B820A3B139622B48E811	6B2B928D546D140C8E55033CC0B525ADC734FEEB	1FC47AE4770ED4B42316C9330F6E5BE71F9D3E3D916E6741075221DEAA843F35
Chrome Cache Entry: 143	ASCII text, with very long lines (18187), with no line terminators	5C6ED25DCE803FD84288922B8928409E	3CCC10546AE12F160BACAC1E9E422AF091EA4A41	480B06B23E574B4BF386FDE1A91145A4171F97AEB5EE800E4BE1850F29B1AD91
Chrome Cache Entry: 144	ASCII text, with very long lines (65536), with no line terminators	CB888899E7E0B4D4113FD1F46D4D81DB	40F4BD4C68D4CD6C8CF36AE3722A04A7560E27A0	F67ECCC1E6368EC69C73BC0D53AF06979C2A642F3EEDDBDA08F649048783185D
Chrome Cache Entry: 145	ASCII text, with very long lines (3567), with no line terminators	C52AA1EA682AEF8AD5EBF7AFF9662E35	E171DA979A8C5DFB1DEF6A4ED2F4C72BB787CD18	BCE4B47B8FC12DE49FAC0A00E9039E38AA568ABA0EE9154B93D20465F0289CFA
Chrome Cache Entry: 146	Unicode text, UTF-8 text, with very long lines (65452)	2F4E7D3DAACEF70DB768954FF63464AB	25E4BA1B94A953BA58706088EBD31329AC71FB92	D0DB97695EDC13A59FF8FC65C4E40BA4A38D8306AD3CB3F9AA3018F874471B98
Chrome Cache Entry: 147	ASCII text, with very long lines (4103), with no line terminators	19C94B308DEAF8FBF050B4FCA2FA21B7	27EC80C930408C635835426C194DCEFF81E3C15D	CD56592299C1C670FB97EF28BCB50048508C01879ECB23B71364AECC0483E202
Chrome Cache Entry: 148	ASCII text, with very long lines (5991)	B6F791879DB717033584FB19BB0F4F89	1F72CDAC0851B477A9EEB010BF58CCBBDB88B6A3	5691D8D409C6C863010271A58172C7546CB90DF478722B768A38A6F81FF28981
Chrome Cache Entry: 149	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 150	ASCII text, with very long lines (3184), with no line terminators	AF9D696B0A15C8438F31F1EACFCF43E2	7DE6EF9E78C0E2B811D657270E316F08AD15022C	ECE1FCD04BBA98F49580F8FA5E2D54FA80CB74C77C2C1A60DA619AF16553E0A3
Chrome Cache Entry: 151	JSON data	C4AF1078A5D64C9FC2E3DCBBC9F8E27E	4C27352ECE898F2440A7C60FA694E177F4E06821	3548757B6AD39D94FBF045E0CA57F35C269FB1751C2DBD4DA0349E24A56AD200
Chrome Cache Entry: 152	Web Open Font Format (Version 2), TrueType, length 45060, version 1.6619	7215053E93E9DF501DA2EAFD607DF7BC	A77F6DDF3236CA397F79ACFDF39FB9C7D9C9D875	2185B6BB6FAB199CCCC9C8824A1848711487EC443292473526C0016930C8B468
Chrome Cache Entry: 153	Web Open Font Format (Version 2), TrueType, length 46892, version 1.6619	2CAB599027E24B908B949BF7CAE18723	454DC08A1652AE3EA28F58C997C7EBD91574F241	01A6CA39B9C650AD35E28A6441C43F200E53D2950E7A44E31AEC1656A4AE0779
Chrome Cache Entry: 154	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 155	ASCII text, with very long lines (65465)	07D762754E6230114253B20EFCE552BD	2E09E1503FB4215992BB07F4587894493BE8855B	94E3D4A494DD0266D3D86DEB8C2722A3377D21E380204EE462E0FCBD18F9ED7E
Chrome Cache Entry: 156	ASCII text, with very long lines (65536), with no line terminators	C76186EE758D25B234B24F2926FA7E28	C4662B4E6E19FF3EFA38404D6F6061BEE68B6E4A	6E597E72E6F40EBB74C0083D6CA4D710601D050BD6D1A3685FE20D6C54644B78
Chrome Cache Entry: 157	ASCII text, with very long lines (2968), with no line terminators	306BC872A0D943BAA1DD369ECCD6ADDF	DFC575CBEDE680956CBD0CA1118A32A4991F4D5B	7EC04EBAFC29EDF9D28479A4E255EA5E34F439CADA69C30081595B44886905C1
Chrome Cache Entry: 158	ASCII text, with very long lines (12152)	6FF586F642F2EB8A97D0B7028CBDD3CB	9A54BDB5C94F4E8AB0B97320EAA051B303F3380A	4B63A4C250832FD8685309A7BF769A620064548DBC81AFEF36907C57F2753580
Chrome Cache Entry: 159	ASCII text, with very long lines (17320), with no line terminators	2FDF3E79D5E851201A0D52A886453D8B	0CCA49213DC761C62B82C185E3A7C597CBE47515	12B5EACCD8A9D81A6A12512566D2B72AA7C100B4A261A08EE6AAE4679A9E36B4
Chrome Cache Entry: 160	JSON data	692E9DED77E65AA816AE69551AF8D86E	075B28B939271A539442D060A85D14C1720690DB	A195296F4F6327B8EB503B8FACA4F68E59CF3B53635F542450C6EFA4CAE304C9
Chrome Cache Entry: 161	PNG image data, 208 x 224, 8-bit colormap, non-interlaced	5AD00487BC3D0E0E9E095C96B289D23E	AC229B07D345A579901CCD6D47458ED7CBDE1347	D510056EB2C11760709A610B073DC35DD73F10D309D86A092A5F2794F47AAAA4
Chrome Cache Entry: 162	ASCII text, with very long lines (22808)	55BCA7635C54DB38C9A23ECAF8097240	AA6689F8B2170B2FC753CF7F233DB2018B1B935A	8217E298444FCD4C0B52BF4421E57E975EEAFDA31D8953DBC7BFCD168C1E0F5E
Chrome Cache Entry: 163	ASCII text, with very long lines (24605)	87B5ECAAFD0E88097CBBB1BBB7695FE9	085D5B2112BB1AFA26B03B94183B6EEDC2F076B4	5AF5EE0B37B1F0EF31C42932BBF81424E4BB53E95E87A47E058625C1AF2245DB
Chrome Cache Entry: 164	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel	80A901D5EBC514F8CB2ED971A1F2DA0C	DEC11E9203546C4FA3C7C3A202319FD1EFD92587	21200A260F524190AAF936519C1DD7472DF32D3FB2E8840DBFD5105334B1BFF6
Chrome Cache Entry: 165	ASCII text, with very long lines (64777)	FD4963C2C124CCC6E316CE301AF5FD54	C4483C858695CD8E6C9C9043E34DDD83924859BE	780536B770CEC44B4E65623DC650554D455F0B5237561FF70F8500BB757F2158
Chrome Cache Entry: 166	ASCII text, with very long lines (65448)	4C93B8BA8DCA8650E3F0391F79787797	25B0E1E16971CAC4E729E4901859DDFDDCA5AAAE	4666978B6146D9E1C8BA8EA7F2E757B2DA19AD2CAC63ED199B39337437538CA7
Chrome Cache Entry: 167	ASCII text, with very long lines (815)	9365CBE10DD78C0B4EF7E7D22A93A3D0	76C8D615B24C601E713570E842C6960438D09C09	DD9F2C3E79124544892F1EC40689CAAA586F1DCE896A4ACFD7A426037BD02585
Chrome Cache Entry: 168	ASCII text, with no line terminators	9D1EAD73E678FA2F51A70A933B0BF017	D205CBD6783332A212C5AE92D73C77178C2D2F28	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
Chrome Cache Entry: 169	Unicode text, UTF-8 text, with very long lines (65502), with no line terminators	0C4D5BEEF4B39885EF481959458C24D1	835097D76A678549E33C672A91BD8EF60BFE3639	A2284BB337323AA71B55D3185645C84FEEED7234D6A199A294A333ACD0E75663
Chrome Cache Entry: 170	Web Open Font Format (Version 2), TrueType, length 145936, version 1.0	B3DBE2DD237F805FDEB5FEBE46EA2CB3	A98BE0A37D3208261904C413D438F038B69D10B4	EFC3A45A7051C3A268C03C2C74B92117577C601F5B1C81FB47E7AF2F4338AB8E
Chrome Cache Entry: 99	GIF image data, version 89a, 1 x 1	BFF56CE49DD485D195FDFA0A02342568	74FB4071DEAB7D3AB083562067B735DF32C43397	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39

HTML body with high number of embedded SVGs detected

HTTP Parser: Total embedded SVG size: 316596

Source: https://td.doubleclick.net/td/rul/972636148?random=1716400535062&cv=11&fst=1716400535062&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv...	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/981120876?random=1716400539474&cv=11&fst=1716400539474&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=...	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.mr-prod.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.mr-prod.xyz

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: link.pdffiller.com to https://pdf.ac/2jvecj
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: pdf.ac to https://www.pdffiller.com/en/login/auto.htm?id=223342988&uid=38d66040-3507-4f79-a4be-d4330a000dae&hash=3f1cd57714ce9d4e0605875e97a6c318&t=1716230568&notloginagain=1

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push HTTP/1.1Host: link.pdffiller.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2jvecJ HTTP/1.1Host: pdf.acConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sks/js/sks_track.js HTTP/1.1Host: cdn.mr-prod.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: sks.mrkhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: sks.mrkhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sks_initial_page=eyJpdiI6Im95TUxrQnhoNkw1RFVSMWNuR0hSNmc9PSIsInZhbHVlIjoiQWZaTU5Fd2RJWUtNek9lYVpOL0dPbngvOHdIMUsrZ29OaVg4aWR3WFFXUThpQVRqTUJiMmFwVjFIbnNtT3BpT3AxcmIvM2NEV1ptZ3dPWHZoUTA1RmFOR25RdEl4WFVMNE1YUkxsUFhWMGs9IiwibWFjIjoiNWQ3MjlkZjM4OTVlNzM2OWVjNTlmYzgxZDZmYmU1NjgxMWIzNDZiYzIwZGU4M2IxNjZjNWNlYTlhNzQwZjNiNSIsInRhZyI6IiJ9; sks_referrer=eyJpdiI6Im9XZkRBWlYyVUxOcm9KdkZUUGRPQUE9PSIsInZhbHVlIjoiaThMU3pkYWN0NFB4M2JWbEJ6anpIL3UxWjl2Y0tReFVMODdkUnM2VE9rZEN2YzFTZmhJWTFIOTk1bVBjcU5UYyIsIm1hYyI6IjEyM2E3NjE4MDFjZDEwMWJkOGZmMzdjMDBlNzA4YTJiZWZmN2U0ZWRkZTE0MDlkODcyNzU5ZTcwNzY1YzY2N2EiLCJ0YWciOiIifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/pdffiller/chat/get-src HTTP/1.1Host: support-backend.usrsprt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/pdffiller/chat/get-src HTTP/1.1Host: support-backend.usrsprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /active/pdffiller.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/6384de6decd4010c99aefa80 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/jsfiller-desk21/?flat_pdf_quality=low&lang=en&projectId=1523593296&PAGE_REARRANGE_V2_MVP=true&richTextFormatting=true&isPageRearrangeV2MVP=true&jsf-page-rearrange-v2=true&jsf-dss-v2=false&LATEST_PDFJS=true&jsf-document-scroll-zoom=true&jsf-redesign-full=true&act-notary-pro-integration=true&jsf-pdfjs-fourth=false&jsf-fake-edit-embedded=false&isSkipEditorLoadFrequency=true&routeId=c3fdfecce17e080a1ae875d1317f2557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/972636148?random=1716400535062&cv=11&fst=1716400535062&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /locales/sv-locales/97/en/pdffiller-chat.json HTTP/1.1Host: cdn.usrsprt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlvwNi4t1ZnzngrhaT7u02h-kxBLwJRisoNA&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /locales/sv-locales/97/en/pdffiller-chat.json HTTP/1.1Host: cdn.usrsprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLpKay4eHB3ZOHafm-E9OhF643KMZSFCzas3q8_KJz4_jsdXRP&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlv33_koN7whVQbEwusYxHgTm5FelRJyIgJg&random=1857435326 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1441276/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLpKay4eHB3ZOHafm-E9OhF643KMZSFCzas3q8_KJz4_jsdXRP&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlv33_koN7whVQbEwusYxHgTm5FelRJyIgJg&random=1857435326 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.2bdc3040.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10193318.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/981120876?random=1716400539474&cv=11&fst=1716400539474&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPCch55xlb8r19ckPXIC0TCpXjOghZxZ-LJDT-dKgTPGbRwoCTjgRLmhOx
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/trc/3/json?tim=1716400539257&data=%7B%22id%22%3A306%2C%22ii%22%3A%22%2Fjsfiller-desk21%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1716400539249%2C%22cv%22%3A%2220240512-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dairslate-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1716400539256%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10193318.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/981120876/?random=1716400539474&cv=11&fst=1716400539474&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPCch55xlb8r19ckPXIC0TCpXjOghZxZ-LJDT-dKgTPGbRwoCTjgRLmhOx
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJ4xTmYCEJL9MiyiLFuo-Dg7eejklOsFEgEBAQGDT2ZYZtwr0iMA_eMAAA&S=AQAAAm7lST-DyZmyVM9PvKktZ2M
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d
Source: global traffic	HTTP traffic detected: GET /?uid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U= HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/981120876/?random=1716400539474&cv=11&fst=1716397200000&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLOTOFDL2RCQOnhFeI9mhy2Cikrds1MbXn5zLY1bzObSz4X0wm&random=1534636021&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=1649&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1716400540904&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/981120876/?random=1716400539474&cv=11&fst=1716397200000&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLOTOFDL2RCQOnhFeI9mhy2Cikrds1MbXn5zLY1bzObSz4X0wm&random=1534636021&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=4669&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1716400543924&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=10681&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=6000&msa=0&rv=1&tim=1716400549936&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=22696&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=12000&msa=0&rv=1&tim=1716400561951&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=46725&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=24000&msa=0&rv=1&tim=1716400585980&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1

Source: chromecache_165.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ka=0;ka<oa;ka++)if(!v&&c(R[ka],E.xe)){pI("https://www.youtube.com/iframe_api");v=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.D="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!EC&&LC(y[B],n.xe))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_132.2.dr, chromecache_142.2.dr	String found in binary or memory: return b}AC.K="internal.enableAutoEventOnTimer";var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: link.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: pdf.ac
Source: global traffic	DNS traffic detected: DNS query: www.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static-ak.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: jsfiller-cdn.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: desk21-rest.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mr-prod.xyz
Source: global traffic	DNS traffic detected: DNS query: sks.mrkhub.com
Source: global traffic	DNS traffic detected: DNS query: support-backend.usrsprt.com
Source: global traffic	DNS traffic detected: DNS query: www.upsellit.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.usrsprt.com
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: psb.taboola.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: pips.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cds.taboola.com

Source: unknown

Source: chromecache_163.2.dr	String found in binary or memory: http://opensource.org/licenses/BSD-2-Clause
Source: chromecache_163.2.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: chromecache_165.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_110.2.dr	String found in binary or memory: https://app.upsellit.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/cds-pips.js
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/eid.es5.js
Source: chromecache_147.2.dr, chromecache_114.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_165.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_123.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_123.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_165.2.dr	String found in binary or memory: https://google.com
Source: chromecache_165.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_134.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/972636148/?random
Source: chromecache_165.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_110.2.dr	String found in binary or memory: https://prod.upsellit.com
Source: chromecache_165.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: chromecache_165.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_114.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.2bdc3040.js
Source: chromecache_167.2.dr	String found in binary or memory: https://sks.mrkhub.com
Source: chromecache_165.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_115.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/frontend/SupportChat/9100/product.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/client.8f0f19f8.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/daf652ad120a6f9e18e7.png
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/defaultVendors~client.0ab755cf.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/init.2439b852.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/loader.f2f7302b.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/runtimeRequiredModules.00f5f018.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/styles.ecd4c963.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/vendors.fd3db64a.js
Source: chromecache_162.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_115.2.dr	String found in binary or memory: https://support-backend.usrsprt.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_157.2.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/981120876/?random
Source: chromecache_165.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_162.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_122.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp?v=1
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp?v=2
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?aff_click=
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?pixel_found=
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: classification engine

Classification label: sus21.troj.win@18/133@94/31

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,11921569596670741214,244101229723681260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,11921569596670741214,244101229723681260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1445929
Product:	CloudBasic
Start time:	19:54:22
Start date:	22.05.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push