Play interactive tourEdit tour

Windows Analysis Report
https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push

Overview

General Information

Sample URL:	https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push
Analysis ID:	1445929
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Performs DNS queries to domains with low reputation

Detected suspicious crossdomain redirect

HTML body with high number of embedded SVGs detected

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML body with high number of embedded SVGs detected

Source: https://www.pdffiller.com/jsfiller-desk21/?flat_pdf_quality=low&lang=en&projectId=1523593296&PAGE_REARRANGE_V2_MVP=true&richTextFormatting=true&isPageRearrangeV2MVP=true&jsf-page-rearrange-v2=true&jsf-dss-v2=false&LATEST_PDFJS=true&jsf-document-scroll-zoom=true&jsf-redesign-full=true&act-notary-pro-integration=true&jsf-pdfjs-fourth=false&jsf-fake-edit-embedded=false&isSkipEditorLoadFrequency=true&routeId=c3fdfecce17e080a1ae875d1317f2557#bd5f464aa0694b0da0b05291e3614764

HTTP Parser: Total embedded SVG size: 316596

HTML page is missing a favicon

Source: https://td.doubleclick.net/td/rul/972636148?random=1716400535062&cv=11&fst=1716400535062&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv...

HTTP Parser: No favicon

Source: https://td.doubleclick.net/td/rul/981120876?random=1716400539474&cv=11&fst=1716400539474&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=...

HTTP Parser: No favicon

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.mr-prod.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.mr-prod.xyz

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: link.pdffiller.com to https://pdf.ac/2jvecj
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: pdf.ac to https://www.pdffiller.com/en/login/auto.htm?id=223342988&uid=38d66040-3507-4f79-a4be-d4330a000dae&hash=3f1cd57714ce9d4e0605875e97a6c318&t=1716230568&notloginagain=1

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push HTTP/1.1Host: link.pdffiller.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2jvecJ HTTP/1.1Host: pdf.acConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sks/js/sks_track.js HTTP/1.1Host: cdn.mr-prod.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: sks.mrkhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/impressions?origin=https://www.pdffiller.com&initialPage=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: sks.mrkhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sks_initial_page=eyJpdiI6Im95TUxrQnhoNkw1RFVSMWNuR0hSNmc9PSIsInZhbHVlIjoiQWZaTU5Fd2RJWUtNek9lYVpOL0dPbngvOHdIMUsrZ29OaVg4aWR3WFFXUThpQVRqTUJiMmFwVjFIbnNtT3BpT3AxcmIvM2NEV1ptZ3dPWHZoUTA1RmFOR25RdEl4WFVMNE1YUkxsUFhWMGs9IiwibWFjIjoiNWQ3MjlkZjM4OTVlNzM2OWVjNTlmYzgxZDZmYmU1NjgxMWIzNDZiYzIwZGU4M2IxNjZjNWNlYTlhNzQwZjNiNSIsInRhZyI6IiJ9; sks_referrer=eyJpdiI6Im9XZkRBWlYyVUxOcm9KdkZUUGRPQUE9PSIsInZhbHVlIjoiaThMU3pkYWN0NFB4M2JWbEJ6anpIL3UxWjl2Y0tReFVMODdkUnM2VE9rZEN2YzFTZmhJWTFIOTk1bVBjcU5UYyIsIm1hYyI6IjEyM2E3NjE4MDFjZDEwMWJkOGZmMzdjMDBlNzA4YTJiZWZmN2U0ZWRkZTE0MDlkODcyNzU5ZTcwNzY1YzY2N2EiLCJ0YWciOiIifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/pdffiller/chat/get-src HTTP/1.1Host: support-backend.usrsprt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/pdffiller/chat/get-src HTTP/1.1Host: support-backend.usrsprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /active/pdffiller.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/6384de6decd4010c99aefa80 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/jsfiller-desk21/?flat_pdf_quality=low&lang=en&projectId=1523593296&PAGE_REARRANGE_V2_MVP=true&richTextFormatting=true&isPageRearrangeV2MVP=true&jsf-page-rearrange-v2=true&jsf-dss-v2=false&LATEST_PDFJS=true&jsf-document-scroll-zoom=true&jsf-redesign-full=true&act-notary-pro-integration=true&jsf-pdfjs-fourth=false&jsf-fake-edit-embedded=false&isSkipEditorLoadFrequency=true&routeId=c3fdfecce17e080a1ae875d1317f2557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/972636148?random=1716400535062&cv=11&fst=1716400535062&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /locales/sv-locales/97/en/pdffiller-chat.json HTTP/1.1Host: cdn.usrsprt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlvwNi4t1ZnzngrhaT7u02h-kxBLwJRisoNA&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /locales/sv-locales/97/en/pdffiller-chat.json HTTP/1.1Host: cdn.usrsprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLpKay4eHB3ZOHafm-E9OhF643KMZSFCzas3q8_KJz4_jsdXRP&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlv33_koN7whVQbEwusYxHgTm5FelRJyIgJg&random=1857435326 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1441276/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/972636148/?random=687838039&cv=11&fst=1716400535062&bg=ffffff&guid=ON&async=1&gtm=45be45k0v890312743z878355092za201zb78355092&gcs=G111&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&label=5lebCLn80awBEPT_5M8D&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&value=0&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CLKiwNvpsMqTnQEiEwjK3q2i6qGGAxXmXR0JHf4JB2YyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoaaHR0cHM6Ly93d3cucGRmZmlsbGVyLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLpKay4eHB3ZOHafm-E9OhF643KMZSFCzas3q8_KJz4_jsdXRP&eitems=ChAI8K-2sgYQ74iGnOnq7upMEh0A1HBlv33_koN7whVQbEwusYxHgTm5FelRJyIgJg&random=1857435326 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1f2432c6f699452b81b3d5f5b9c48ac3/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.2bdc3040.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10193318.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/981120876?random=1716400539474&cv=11&fst=1716400539474&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPCch55xlb8r19ckPXIC0TCpXjOghZxZ-LJDT-dKgTPGbRwoCTjgRLmhOx
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/trc/3/json?tim=1716400539257&data=%7B%22id%22%3A306%2C%22ii%22%3A%22%2Fjsfiller-desk21%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1716400539249%2C%22cv%22%3A%2220240512-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dairslate-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1716400539256%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10193318.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1716400540146&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614372793101&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%222bdc3040%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1716400540147 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/981120876/?random=1716400539474&cv=11&fst=1716400539474&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPCch55xlb8r19ckPXIC0TCpXjOghZxZ-LJDT-dKgTPGbRwoCTjgRLmhOx
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2022%20May%202024%2017%3A55%3A40%20GMT&n=4d&b=PDFfiller&.yp=10193318&f=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764&enc=UTF-8&yv=1.15.1&auid=e370f97fc50ad2ee40246dd029a006fe4b644454158d4ea0b7edc5fe1ae0d148&tagmgr=gtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJ4xTmYCEJL9MiyiLFuo-Dg7eejklOsFEgEBAQGDT2ZYZtwr0iMA_eMAAA&S=AQAAAm7lST-DyZmyVM9PvKktZ2M
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d
Source: global traffic	HTTP traffic detected: GET /?uid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U= HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/981120876/?random=1716400539474&cv=11&fst=1716397200000&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLOTOFDL2RCQOnhFeI9mhy2Cikrds1MbXn5zLY1bzObSz4X0wm&random=1534636021&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=1649&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1716400540904&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/981120876/?random=1716400539474&cv=11&fst=1716397200000&bg=ffffff&guid=ON&async=1&gtm=45be45k0v9184618771z878355092za201zb78355092&gcd=13t3t3t3t5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557&hn=www.googleadservices.com&frm=0&tiba=PDFfiller&ga_uid=G-P4FNBN6SJM.1652782417&npa=0&pscdl=noapi&auid=557935299.1716400534&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=dynx_pagetype%3Dofferdetail%3Bdynx_itemid2%3Den%3Bdevice%3Ddesktop%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLOTOFDL2RCQOnhFeI9mhy2Cikrds1MbXn5zLY1bzObSz4X0wm&random=1534636021&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=4669&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1716400543924&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=10681&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=6000&msa=0&rv=1&tim=1716400549936&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=22696&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=12000&msa=0&rv=1&tim=1716400561951&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /1441276/log/3/unip?en=pre_d_eng_tb&tos=46725&scd=0&ssd=1&est=1716400539254&ver=36&isls=true&src=i&invt=24000&msa=0&rv=1&tim=1716400585980&vi=1716400539249&ri=c0ba93767e16b95a61e53b5be303aaa3&sd=v2_c2382194c0b4363c219715ec3d1452a0_a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d_1716400541_1716400541_CNawjgYQ_PtXGPGMx4v6MSABKAEw4QE4kaQOQNzPD0jPzNkDUKIEWABgAGiQgI6I5eeGxhBwAQ&ui=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d&ref=null&cv=20240512-6-RELEASE&item-url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F%3Fflat_pdf_quality%3Dlow%26lang%3Den%26projectId%3D1523593296%26PAGE_REARRANGE_V2_MVP%3Dtrue%26richTextFormatting%3Dtrue%26isPageRearrangeV2MVP%3Dtrue%26jsf-page-rearrange-v2%3Dtrue%26jsf-dss-v2%3Dfalse%26LATEST_PDFJS%3Dtrue%26jsf-document-scroll-zoom%3Dtrue%26jsf-redesign-full%3Dtrue%26act-notary-pro-integration%3Dtrue%26jsf-pdfjs-fourth%3Dfalse%26jsf-fake-edit-embedded%3Dfalse%26isSkipEditorLoadFrequency%3Dtrue%26routeId%3Dc3fdfecce17e080a1ae875d1317f2557%23bd5f464aa0694b0da0b05291e3614764 HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; t_pt_gid=a5e55d4a-fe4f-4e36-a829-32c814b7898b-tuctd47b71d; receive-cookie-deprecation=1

Found strings which match to known social media urls

Source: chromecache_165.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ka=0;ka<oa;ka++)if(!v&&c(R[ka],E.xe)){pI("https://www.youtube.com/iframe_api");v=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.D="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_162.2.dr	String found in binary or memory: e||f||g.length||h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(NC(w,"iframe_api")||NC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!EC&&LC(y[B],n.xe))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_132.2.dr, chromecache_142.2.dr	String found in binary or memory: return b}AC.K="internal.enableAutoEventOnTimer";var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: link.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: pdf.ac
Source: global traffic	DNS traffic detected: DNS query: www.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static-ak.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: jsfiller-cdn.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: desk21-rest.pdffiller.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mr-prod.xyz
Source: global traffic	DNS traffic detected: DNS query: sks.mrkhub.com
Source: global traffic	DNS traffic detected: DNS query: support-backend.usrsprt.com
Source: global traffic	DNS traffic detected: DNS query: www.upsellit.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.usrsprt.com
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: psb.taboola.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: pips.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cds.taboola.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /pagead/landing?gcs=G111&gcd=13t3t3t3t5&rnd=70885356.1716400534&url=https%3A%2F%2Fwww.pdffiller.com%2Fjsfiller-desk21%2F&dma=0&npa=0&gtm=45He45k0n81MJVML5Sv78355092za200&auid=557935299.1716400534 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.pdffiller.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.pdffiller.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

URLs found in memory or binary data

Source: chromecache_163.2.dr	String found in binary or memory: http://opensource.org/licenses/BSD-2-Clause
Source: chromecache_163.2.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: chromecache_165.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_110.2.dr	String found in binary or memory: https://app.upsellit.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/cds-pips.js
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/eid.es5.js
Source: chromecache_147.2.dr, chromecache_114.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_165.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_123.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_123.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_165.2.dr	String found in binary or memory: https://google.com
Source: chromecache_165.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_134.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/972636148/?random
Source: chromecache_165.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_110.2.dr	String found in binary or memory: https://prod.upsellit.com
Source: chromecache_165.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: chromecache_165.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_114.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.2bdc3040.js
Source: chromecache_167.2.dr	String found in binary or memory: https://sks.mrkhub.com
Source: chromecache_165.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_115.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/frontend/SupportChat/9100/product.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/client.8f0f19f8.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/daf652ad120a6f9e18e7.png
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/defaultVendors~client.0ab755cf.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/init.2439b852.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/loader.f2f7302b.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/runtimeRequiredModules.00f5f018.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/styles.ecd4c963.js
Source: chromecache_103.2.dr	String found in binary or memory: https://static-ak.pdffiller.com/jsfiller/v2.33.12.3607/assets/vendors.fd3db64a.js
Source: chromecache_162.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_115.2.dr	String found in binary or memory: https://support-backend.usrsprt.com
Source: chromecache_162.2.dr, chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_157.2.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/981120876/?random
Source: chromecache_165.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_132.2.dr, chromecache_142.2.dr, chromecache_165.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_162.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_122.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp?v=1
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/active/pdffiller_pixel.jsp?v=2
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?aff_click=
Source: chromecache_110.2.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?pixel_found=
Source: chromecache_162.2.dr, chromecache_165.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: sus21.troj.win@18/133@94/31

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,11921569596670741214,244101229723681260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://link.pdffiller.com/r?u=250097423&m=3611545849&t=29482&o=mMUGVhK9BR1L15C-koMYi4pAwcizd9YfR30fkq-9YQH3ZDFWEmgiqY3c&s=direct_push"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,11921569596670741214,244101229723681260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected