Edit tour

Windows Analysis Report
http://www.msftconnecttest.com/redirect

Overview

General Information

Sample URL:	http://www.msftconnecttest.com/redirect
Analysis ID:	1486081
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.msftconnecttest.com/redirect MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,9801599905912969861,11260221539091602833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5900 --field-trial-handle=1964,i,9801599905912969861,11260221539091602833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:02.124622+0200
SID:	2012510
Source Port:	443
Destination Port:	49989
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.184.226 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:36.230761+0200
SID:	2012510
Source Port:	443
Destination Port:	50488
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 184.28.88.227 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:55:12.969002+0200
SID:	2012510
Source Port:	443
Destination Port:	50636
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.184.226 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:14.176035+0200
SID:	2012510
Source Port:	443
Destination Port:	50151
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.186.98 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:15.560418+0200
SID:	2012510
Source Port:	443
Destination Port:	50181
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.186.98 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:37.548918+0200
SID:	2012510
Source Port:	443
Destination Port:	50503
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 151.101.65.108 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:55:14.255821+0200
SID:	2012510
Source Port:	443
Destination Port:	50644
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.184.226 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:22.911614+0200
SID:	2012510
Source Port:	443
Destination Port:	50291
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:00.661544+0200
SID:	2012510
Source Port:	443
Destination Port:	49971
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 2.23.209.19 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:53:53.929157+0200
SID:	2012510
Source Port:	443
Destination Port:	49874
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 2.23.209.19 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:25.054593+0200
SID:	2012510
Source Port:	443
Destination Port:	50344
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.186.98 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:24.478474+0200
SID:	2012510
Source Port:	443
Destination Port:	50336
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 2.23.209.39 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:26.714992+0200
SID:	2012510
Source Port:	443
Destination Port:	50386
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.184.226 - Destination IP: 192.168.2.16

Timestamp:	2024-08-01T15:54:41.588831+0200
SID:	2012510
Source Port:	443
Destination Port:	50540
Protocol:	TCP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://login.microsoftonline.de

Avira URL Cloud: Label: phishing

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19&sso_reload=true

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://www.msn.com/?ocid=wispr&pc=u477

HTTP Parser: Base64 decoded: /scripts/chatur.js

Source: https://www.msn.com/?ocid=wispr&pc=u477

HTTP Parser: Found new string: script try {!function(){function e(e,t){return"function"==typeof __an_obj_extend_thunk?__an_obj_extend_thunk(e,t):e}function t(e,t){"function"==typeof __an_err_thunk&&__an_err_thunk(e,t)}function n(e,t){if("function"==typeof __an_redirect_thunk)__an_redirect_thunk(e);else{var n=navigator.connection;navigator.__an_connection&&(n=navigator.__an_connection),window==window.top&&n&&n.downlinkMax<=.115&&"function"==typeof HTMLIFrameElement&&HTMLIFrameElement.prototype.hasOwnProperty("srcdoc")?(window.__an_resize=function(e,t,n){var r=e.frameElement;r&&"__an_if"==r.getAttribute("name")&&(t&&(r.style.width=t+"px"),n&&(r.style.height=n+"px"))},document.write('<iframe name="__an_if" style="width:0;height:0" srcdoc="<script type=\'text/javascript\' src=\''+e+"&"+t.bdfif+"=1'></sc"),document.write('ript>" frameborder="0" scrolling="no" marginheight=0 marginwidth=0 topmargin="0" leftmargin="0" allowtransparency="true"></iframe>')):document.write('<script language="javascript" src="'+e+'"></scr'+'ipt>')}};var r=function(e){this.r...

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19&sso_reload=true	HTTP Parser: Title: Redirecting does not match URL

Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://www.msn.com/?ocid=wispr&pc=u477	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19&sso_reload=true	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=0&seller_id=280&pub_id=43801	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://ef0907a215607cc63970622481622b84.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://aa22f4e5eb16a3867aba37b34c0a0de8.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1	HTTP Parser: No favicon
Source: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.16:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.16:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:50431 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /b?rn=1722520420876&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477%26content%3D1%26mkt%3Den-us&c8=MSN&c9=&cs_fpid=2167C29B4B9F6D7B2E5BD6554A866C84&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2?rn=1722520420876&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477%26content%3D1%26mkt%3Den-us&c8=MSN&c9=&cs_fpid=2167C29B4B9F6D7B2E5BD6554A866C84&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CDa2c5839d994a042551271722520422; XID=1CDa2c5839d994a042551271722520422
Source: global traffic	HTTP traffic detected: GET /uidmappixel?ext_uid=2167C29B4B9F6D7B2E5BD6554A866C84&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=516415&c=2167C29B4B9F6D7B2E5BD6554A866C84&mode=inverse&msn_src=ntp&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/msn-sync.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=nms&cs=3&ovsid=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: hbx.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/msn-sync.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=2167C29B4B9F6D7B2E5BD6554A866C84 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uidmappixel?ext_uid=2167C29B4B9F6D7B2E5BD6554A866C84&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=58669f0d-a9ee-47b8-8b7a-ff09a3e4d02d
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=nms&cs=3&ovsid=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: hbx.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3655220266390502000V10; data-nms=2167C29B4B9F6D7B2E5BD6554A866C84~~3
Source: global traffic	HTTP traffic detected: GET /mapuid?suid=2167C29B4B9F6D7B2E5BD6554A866C84&sid=16&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=2167C29B4B9F6D7B2E5BD6554A866C84 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=2167C29B4B9F6D7B2E5BD6554A866C84
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=2167C29B4B9F6D7B2E5BD6554A866C84&external=true&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGqTq2YCEFZxBdBS_Wk_SfAFEaSEX3sFEgEBAQHkrGa1ZgAAAAAA_eMAAA&S=AQAAAoyFP6CTH2SiTxjrZeMOlAw
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.popin.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid?member=280&user=2167C29B4B9F6D7B2E5BD6554A866C84;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2167C29B4B9F6D7B2E5BD6554A866C84%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://c.bing.com/c.gif?anx_uid=$UID&Red3=MSAN_pd&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=msn&id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: code.yengo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2393155272910869609235; tluid=2393155272910869609235
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.mediago.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca7b47d2d021ootlg00lzbc6s5a
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=2167C29B4B9F6D7B2E5BD6554A866C84; t_pt_gid=2167C29B4B9F6D7B2E5BD6554A866C84
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc.bing.com%2Fc.gif%3Fanx_uid%3D%24UID%26Red3%3DMSAN_pd%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=9xaBrdxDx_6cE-bNSVUiJ8lsEh_W_Xrc_s2L9FH_aXgEMYq4BQwvinsLPDLJGZouwxphtXOGGlQARf2SrOdUX_hhHSYLRQHSqrbtP9y0cqM.; receive-cookie-deprecation=1; uuid2=2303540712821283440
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=2167C29B4B9F6D7B2E5BD6554A866C84&external=true&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=2b844770202bdc6d5ea525561b472683
Source: global traffic	HTTP traffic detected: GET /imid/set?cid=1003212&tid=tblid&uid=2167C29B4B9F6D7B2E5BD6554A866C84 HTTP/1.1Host: sync.im-apps.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fmapuid%3Fmember%3D280%26user%3D2167C29B4B9F6D7B2E5BD6554A866C84%3B%26gdpr%3D0%26gdpr_consent%3D%26redir%3Dhttps%253A%252F%252Fm.adnxs.com%252Fseg%253Fadd%253D5159620%2526redir%253Dhttps%25253A%25252F%25252Fib.adnxs.com%25252Fsetuid%25253Fentity%25253D483%252526code%25253D2167C29B4B9F6D7B2E5BD6554A866C84%252526gdpr%25253D0%252526gdpr_consent%25253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.popin.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca7b47d2d0216ms6j00lzbc6shf
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2393155272910869609235
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=2167C29B4B9F6D7B2E5BD6554A866C84; t_pt_gid=2167C29B4B9F6D7B2E5BD6554A866C84
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2167C29B4B9F6D7B2E5BD6554A866C84%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; anj=dTM7k!M4/8CxrEQF']wIg2E?`r''6C!]tbP6j2F-XstGt!@E/m%d.x; uuid2=6450743212348071798
Source: global traffic	HTTP traffic detected: GET /imid/set?cid=1003212&tid=tblid&uid=2167C29B4B9F6D7B2E5BD6554A866C84 HTTP/1.1Host: sync.im-apps.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: imid_secure=RHYuC2z-RcqC0fEv2gtwKA; imid_created_secure=1722520429
Source: global traffic	HTTP traffic detected: GET /sync?ssp=msn&id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: code.yengo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mapuid?member=280&user=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2167C29B4B9F6D7B2E5BD6554A866C84%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; anj=dTM7k!M4/8CxrEQF']wIg2E?`r''6C!]tbP6j2F-XstGt!@E/m%d.x; uuid2=6450743212348071798
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4/8D>6NRF']wIg2E?`r''6C!fsuh'^yS%PlZ[C[-kX-m)[]T
Source: global traffic	HTTP traffic detected: GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2167C29B4B9F6D7B2E5BD6554A866C84%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4/8CxrEQF']wIg2E?`r''6C!]tbh8bhzs#DIgl#Xsfg8rf:h
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sdLWpR8Fcdlu5Rg&MD=VlBhdP2t HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!fsuh-k15Sp?cM9Z<b=AE<$XGGm5iDnfm>hp%rfmoH-zDDZ3Dnng5g7p'sLQs>))']daY^!AXTO:4=sB!3g?@E/qX3
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4/8D>6NRF']wIg2E?`r''6C!w#xY#MOY-PlZ[C[-kX-m9VT>
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe%8m0Z=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/`.5Jc-RIbpRzqF1`*bbpE+2tUY
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=6208086025961472&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ast/ast.js HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]
Source: global traffic	HTTP traffic detected: GET /tag?o=6208086025961472&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_L1o9fm_mTyE4OcaNwBLkVg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_L1o9fm_mTyE4OcaNwBLkVg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYASABKAEw_KautQY4AUABSAEQ_KautQYYAA..
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html?gdpr=0&seller_id=280&pub_id=43801 HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYASABKAEw_KautQY4AUABSAEQ_KautQYYAA..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK6D-i6BwAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-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_ICEQoGQURWX0lEEgc1aYww8gISCgZDUEdfSUQSCHF3GPICCgoFQ1ABFDgBMPICDQoIQURWX0ZSRVEREBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8BUREPEAsKB0NQFQ4QEQoFSU8BWQgIMTBp-QDyASIESU8VIjgTCg9DVVNUT01fTU9ERUwBLBQA8gIaChYyFgAcTEVBRl9OQU0FcggeCho2HQAIQVNUAT4QSUZJRUQBPhwNCghTUExJVAFN8JUBMIADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTc4MtoEAggB4AQB8AThk4LTAYgFAZgFAKAF______8BBRQBwAUAyQWhrxwAAPA_0gUJCQkM8EMAANgFAeAFAeoFDwoLa3Ztc2Z0X3llYXISAOoFJwoDcmlkEiA2NjM4Y2FmMjAwZDQ0M2I2OGY2NjAwOTAwNTFmOThkNS48AAxtYWtlATwIEAoMDU4QbW9kZWwBEyAKCgZmbGlnaHQBDQwRCgxtAWwkcmVmcmVzaBIBMAFG8DwJcGFnZV90eXBlEgJocOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPwBQH6BQQIABAAkAYAmAYAuAYAwQYABdEo8D_QBpJC2gYWChAFEB0BiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAem2QXSBw0JES4BKwjaBwYBYvCcGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44GHg6w2TG76b1QYuCcdQe8vKO3sTb6e6k-RZQZiMnlkPIjhzBUd2O_TZI5mdZKS5H46FNk1ELHY32a7_gEd2jcFmLuYG09fpHst3ul9-e6dk4jRSXNZNi66XeCi9nnJzlG9lPUxABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=b379d55f16be25ca72a9e2158e9a4854f3aa82a6&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-D
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYASABKAEw_KautQY4AUABSAEQ_KautQYYAA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYASABKAEw_KautQY4AUABSAEQ_KautQYYAA..
Source: global traffic	HTTP traffic detected: GET /strikeforce/script.js HTTP/1.1Host: acdn.adnxs-simple.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK6D-i6BwAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-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_ICEQoGQURWX0lEEgc1aYww8gISCgZDUEdfSUQSCHF3GPICCgoFQ1ABFDgBMPICDQoIQURWX0ZSRVEREBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8BUREPEAsKB0NQFQ4QEQoFSU8BWQgIMTBp-QDyASIESU8VIjgTCg9DVVNUT01fTU9ERUwBLBQA8gIaChYyFgAcTEVBRl9OQU0FcggeCho2HQAIQVNUAT4QSUZJRUQBPhwNCghTUExJVAFN8JUBMIADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTc4MtoEAggB4AQB8AThk4LTAYgFAZgFAKAF______8BBRQBwAUAyQWhrxwAAPA_0gUJCQkM8EMAANgFAeAFAeoFDwoLa3Ztc2Z0X3llYXISAOoFJwoDcmlkEiA2NjM4Y2FmMjAwZDQ0M2I2OGY2NjAwOTAwNTFmOThkNS48AAxtYWtlATwIEAoMDU4QbW9kZWwBEyAKCgZmbGlnaHQBDQwRCgxtAWwkcmVmcmVzaBIBMAFG8DwJcGFnZV90eXBlEgJocOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPwBQH6BQQIABAAkAYAmAYAuAYAwQYABdEo8D_QBpJC2gYWChAFEB0BiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAem2QXSBw0JES4BKwjaBwYBYvCcGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44GHg6w2TG76b1QYuCcdQe8vKO3sTb6e6k-RZQZiMnlkPIjhzBUd2O_TZI5mdZKS5H46FNk1ELHY32a7_gEd2jcFmLuYG09fpHst3ul9-e6dk4jRSXNZNi66XeCi9nnJzlG9lPUxABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=b379d55f16be25ca72a9e2158e9a4854f3aa82a6&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpjgrnd6i7dk0/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js;ord=2019921736 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /dpjgrnd6i7dk0/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK5D-i5BwAAAwDWAAUBCICnrrUGEO6lm9zAztXhMRj2vpPq4pjpwlkqNgl7FK5H4XrUPxF7FK5H4XrUPxkAAAECCERAIREbACkRCcgxAAAAYGZm7j8w0K7IATiYAkDyVkgCUOzcie8BWOS1A2AAaO4CeMqGBoABAYoBA1VTRJIFBvBVmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xMooCVHVmKCdhJywgNTU4NjgwNywgMCk7dWYoJ2knLCAxMDQ1MTA4NCwRFQBnARUUODIxNjM0GSo0cicsIDUwMTM3ODY2OCwBK_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_b2NpZD13aXNwciZwYz11NDc38gIRCgZBRFZfSUQSBzU1ODY4MDfyAhIKBkNQR19JRBIIMTgyMTYzNDfyAgoKBUNQX0lEEgEw8gINCghBRFZfRlJFURIBMPICDQoIUkVNX1VTRVIFEAAMCSAYQ09ERRIA8gEPCENQRxUPEAsKB0NQFQ4YEQoFSU9fSQFtBDA0ZfkA8gEiBElPFSI4EwoPQ1VTVE9NX01PREVMASwUAPICGgoWMhYAHExFQUZfTkFNBXIIHgoaNh0ACEFTVAE-EElGSUVEAT4cDQoIU1BMSVQBTfCVATCAAwCIAwGQA7GEZZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBA8IABABGNgFIFooADAAOAK4BADABI-XvSLIBADSBA8xMTEyMiNGUkExOjY1NDnaBAIIAeAEAfAE7NyJ7wGIBQGYBQCgBf______AQUUAcAFAMkFoa4cAADwP9IFCQkJDHgAANgFAeAFAeoFDwoLa3Ztc2Z0X21ha2USAOoFEQoMBRAkcmVmcmVzaBIBMC4mAAx5ZWFyASawJwoDcmlkEiA2NjM4Y2FmMjAwZDQ0M2I2OGY2NjAwOTAwNTFmOThkNeoFEAoMEWIMb2RlbAE9IAoKBmZsaWdodAENWBYKC3Byb3ZpZGVyX2lkEgc3SEQ2NkZDAXWICXBhZ2VfdHlwZRICaHDwBQH6BQQIABAAkAYAmAYAuAYAwQYJ0CjwP9AGkkLaBhYKEAkRGQGIEAAYAOAGAfIGAggAgAcBiAcAoAcBugcCQAHIB8qGBtIHDQkRLQErCNoHBgFi8JwYAOAHAOoHAggA8AeTtPIPighuCmoAAAGRDjgsADHDVnQLhtLuz8vK-1vUFj8NaTa1dYU0NX3ZzVO_U5G--5AIP_Vs6bI0TVYcr6V1bAb0Y9b_qtZiyv7khVmmmzQoenkbJO9ZpxGlKWf_euYWCATwPrpdL0WAKMlzfRIxFYEnEAGVCAAAgD-YCAHACAHSCAYIABAAGADaCAQIACAA&s=1e2800f2437bb149794eeee71b6f5745111634b0&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-cors
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202407250101/pubads_impl.js?cb=31085684 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK6D-i6BwAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-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_ICEQoGQURWX0lEEgc1aYww8gISCgZDUEdfSUQSCHF3GPICCgoFQ1ABFDgBMPICDQoIQURWX0ZSRVEREBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8BUREPEAsKB0NQFQ4QEQoFSU8BWQgIMTBp-QDyASIESU8VIjgTCg9DVVNUT01fTU9ERUwBLBQA8gIaChYyFgAcTEVBRl9OQU0FcggeCho2HQAIQVNUAT4QSUZJRUQBPhwNCghTUExJVAFN8JUBMIADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTc4MtoEAggB4AQB8AThk4LTAYgFAZgFAKAF______8BBRQBwAUAyQWhrxwAAPA_0gUJCQkM8EMAANgFAeAFAeoFDwoLa3Ztc2Z0X3llYXISAOoFJwoDcmlkEiA2NjM4Y2FmMjAwZDQ0M2I2OGY2NjAwOTAwNTFmOThkNS48AAxtYWtlATwIEAoMDU4QbW9kZWwBEyAKCgZmbGlnaHQBDQwRCgxtAWwkcmVmcmVzaBIBMAFG8DwJcGFnZV90eXBlEgJocOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPwBQH6BQQIABAAkAYAmAYAuAYAwQYABdEo8D_QBpJC2gYWChAFEB0BiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAem2QXSBw0JES4BKwjaBwYBYvCcGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44GHg6w2TG76b1QYuCcdQe8vKO3sTb6e6k-RZQZiMnlkPIjhzBUd2O_TZI5mdZKS5H46FNk1ELHY32a7_gEd2jcFmLuYG09fpHst3ul9-e6dk4jRSXNZNi66XeCi9nnJzlG9lPUxABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=b379d55f16be25ca72a9e2158e9a4854f3aa82a6&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-D
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1Host: 36ef074cd71c02fbc2579d0cd7240a1b.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK5D-i5BwAAAwDWAAUBCICnrrUGEO6lm9zAztXhMRj2vpPq4pjpwlkqNgl7FK5H4XrUPxF7FK5H4XrUPxkAAAECCERAIREbACkRCcgxAAAAYGZm7j8w0K7IATiYAkDyVkgCUOzcie8BWOS1A2AAaO4CeMqGBoABAYoBA1VTRJIFBvBVmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xMooCVHVmKCdhJywgNTU4NjgwNywgMCk7dWYoJ2knLCAxMDQ1MTA4NCwRFQBnARUUODIxNjM0GSo0cicsIDUwMTM3ODY2OCwBK_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_b2NpZD13aXNwciZwYz11NDc38gIRCgZBRFZfSUQSBzU1ODY4MDfyAhIKBkNQR19JRBIIMTgyMTYzNDfyAgoKBUNQX0lEEgEw8gINCghBRFZfRlJFURIBMPICDQoIUkVNX1VTRVIFEAAMCSAYQ09ERRIA8gEPCENQRxUPEAsKB0NQFQ4YEQoFSU9fSQFtBDA0ZfkA8gEiBElPFSI4EwoPQ1VTVE9NX01PREVMASwUAPICGgoWMhYAHExFQUZfTkFNBXIIHgoaNh0ACEFTVAE-EElGSUVEAT4cDQoIU1BMSVQBTfCVATCAAwCIAwGQA7GEZZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBA8IABABGNgFIFooADAAOAK4BADABI-XvSLIBADSBA8xMTEyMiNGUkExOjY1NDnaBAIIAeAEAfAE7NyJ7wGIBQGYBQCgBf______AQUUAcAFAMkFoa4cAADwP9IFCQkJDHgAANgFAeAFAeoFDwoLa3Ztc2Z0X21ha2USAOoFEQoMBRAkcmVmcmVzaBIBMC4mAAx5ZWFyASawJwoDcmlkEiA2NjM4Y2FmMjAwZDQ0M2I2OGY2NjAwOTAwNTFmOThkNeoFEAoMEWIMb2RlbAE9IAoKBmZsaWdodAENWBYKC3Byb3ZpZGVyX2lkEgc3SEQ2NkZDAXWICXBhZ2VfdHlwZRICaHDwBQH6BQQIABAAkAYAmAYAuAYAwQYJ0CjwP9AGkkLaBhYKEAkRGQGIEAAYAOAGAfIGAggAgAcBiAcAoAcBugcCQAHIB8qGBtIHDQkRLQErCNoHBgFi8JwYAOAHAOoHAggA8AeTtPIPighuCmoAAAGRDjgsADHDVnQLhtLuz8vK-1vUFj8NaTa1dYU0NX3ZzVO_U5G--5AIP_Vs6bI0TVYcr6V1bAb0Y9b_qtZiyv7khVmmmzQoenkbJO9ZpxGlKWf_euYWCATwPrpdL0WAKMlzfRIxFYEnEAGVCAAAgD-YCAHACAHSCAYIABAAGADaCAQIACAA&s=1e2800f2437bb149794eeee71b6f5745111634b0&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK6D-i6BwAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-gGoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTWKAlR1ZignYScsIDU1ODY4MDcsIDApO3VmKCdpJywgMTA0NTEwODQVFSxnJywgMjA5NDM3MjUVFTByJywgNDQyNTM0MzY5BRbwi5ICvQQhd1cyVjJBakc0dGdhRU9HVGd0TUJHQUFnNUxVRE1BQTRBRUFBU1BKV1VLN01udzVZQUdDZUJtZ0FjQUI0QUlBQkFJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0JnazBNTGo0SzV6X0JBWUpOREM0LUN1Y195UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FZenhfUVQxQWV4Uk9ELVlBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnRFlBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRExnQTRGSGdBU096OTBPaUFUN3FOOE9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbGkyUUJiT0VaYWtGDSsYQThELXhCUREOPEFBd1FVSzE2TndQUXJuUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGd0xJRThBWHRwdjRKLUFYM190UUNnZ1lEVlZORWlBWUFrQVlCbUFZQW9RWRlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUlDdGVqY0QwSzV6LUlDQUNRQ0FBLpoCmQEhSHhYcTFRajZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvBldy4usgIgMjE2N0MyOUI0QjlGNkQ3QjJFNUJENjU1NEE4NjZDODTYAgHgArvOVOoCJ2h0dHBzOi8vd3d3Lm1zbi5jb20vP29jaWQ9d2lzcHImcGM9dTQ3N_ICEQoGQURWX0lEEgc1aYww8gISCgZDUEdfSUQSCHF3GPICCgoFQ1ABFDgBMPICDQoIQURWX0ZSRVEREBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8BUREPEAsKB0NQFQ4QEQoFSU8BWQgIMTBp-QDyASIESU8VIjgTCg9DVVNUT01fTU9ERUwBLBQA8gIaChYyFgAcTEVBRl9OQU0FcggeCho2HQAIQVNUAT4QSUZJRUQBPhwNCghTUExJVAFN8JUBMIADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTc4MtoEAggB4AQB8AThk4LTAYgFAZgFAKAF______8BBRQBwAUAyQWhrxwAAPA_0gUJCQkM8EMAANgFAeAFAeoFDwoLa3Ztc2Z0X3llYXISAOoFJwoDcmlkEiA2NjM4Y2FmMjAwZDQ0M2I2OGY2NjAwOTAwNTFmOThkNS48AAxtYWtlATwIEAoMDU4QbW9kZWwBEyAKCgZmbGlnaHQBDQwRCgxtAWwkcmVmcmVzaBIBMAFG8DwJcGFnZV90eXBlEgJocOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPwBQH6BQQIABAAkAYAmAYAuAYAwQYABdEo8D_QBpJC2gYWChAFEB0BiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAem2QXSBw0JES4BKwjaBwYBYvCcGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44GHg6w2TG76b1QYuCcdQe8vKO3sTb6e6k-RZQZiMnlkPIjhzBUd2O_TZI5mdZKS5H46FNk1ELHY32a7_gEd2jcFmLuYG09fpHst3ul9-e6dk4jRSXNZNi66XeCi9nnJzlG9lPUxABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=b379d55f16be25ca72a9e2158e9a4854f3aa82a6&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3148313419078216&correlator=3069092958954086&eid=31079956%2C31085620%2C31085684%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202407250101&ptt=17&impl=fif&iu_parts=78792240%3A22569761985%2CMSN_US_300x600&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C200x600%7C300x600%7C160x600%7C120x600%7C234x600&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie_enabled=1&cdm=www.msn.com&abxe=1&dt=1722520450865&adxs=804&adys=584&biw=1263&bih=907&isw=300&ish=600&scr_x=0&scr_y=0&btvi=0&ucis=nku0b0v6tufy&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&top=www.msn.com&vis=1&psz=300x600&msz=300x0&fws=256&ohw=0&td=1&egid=59579&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1722520444619&idt=6211&adks=835149226&frm=23&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvecfPZFeijqnvXpSp_Z6KvCY7jM-EuUJqajtyofH_C_gNYoJuIVXWwEnH2wfAaXDeiG4nhuo1pxOzve5K2Pa-HvNsxqxg6ZhqGoXVr3i3YuD5wXSL1PhOc5WeuZhOMG8tTIN7JcO5CPmVVdUWqqAR5NjqSB_kRoam5JS0nyHMSlbnlG7cg33F9yKgZy8vqeXdX_YykMxrcjiOT5Z9yDJocy3uR-1CKkLXxVGBhtV0VXMlvy3zEOy7esSrCQ0kFeq9lSM8evW86XwbPqiccU0wVVTpU_7sJIMog6oWkeq8vm90gAJEDnTgBcbu3Zqzyphe9DFwqCu8UyjxOX45uftvkDgWeiyiBQAsNoKkEjP45e-cd&sai=AMfl-YRjUlbOJAlguvXPcZXIQr7gT7oI0evbU06h2rnl1iRSA_jB6KjCeDKhKCfgwaFzW6JziUM8DsHE3Rbp2y_WGT9UeQ3jh3YLckgeQJxy_ur05RTAAuIwFo19AENNxH9_WFqT0Gs5nJCmLi8b7qpkH7g&sig=Cg0ArKJSzDDJhTZfPPJdEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnibvZEE0oW3-nFL5caOXXOZL57csJsZXsHCnRAsqIOK4LSEe6qTrc0PrlwPqw
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.6843595059444718 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.07525667424297344 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.6843595059444718 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.07525667424297344 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /country?o=6208086025961472 HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=CRPcUF0q&w=5671737388695552&o=6208086025961472&cv=2.1.46-1-ge6dd43d&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&sid=gxDI46l6D&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsth5c9py4D9SpNOA_-yTdGrdMLi-Cn-dAGLwTFuTbO8sKDElq9mzXKnl1cF7wIhxNX_zZe_5ftxV7pqRTkOEem0NsdC_I__o6XCTcsnrpk7TIoRdJPTR7hkvOvPP8wGbx_flFPV2GkweMVfg_yhrBVC9JYRK72Q_c7S580pbNDYmpvgVaMT6V2KrpcR3fko6O5iTDi6UTs7ieEzPknHJxZhH0jMUarUjJIvtp1jeEUz4ly7OYWdKMzJNwlhcVN8XnorqV6NCepdPChkdZDi_iw25J6zj_Io08GjEEbBbi0oGpgGSRcR19rWKNUSBIg44CBxDAeEAEv1_3I0lNPU-VYoWPdTQ0AxZdm_iQt-sPUZuCUjFJY&sai=AMfl-YQSaHBxBpaf7sl5mcEy9kDr6Y2yYYMxiBUGAiRbEFZew_ijPQ4XfEb-pVB2TJ_O-nsokGuV5E_OFP3BaRr4gEBOGi8KRsIL1DSA_cywEMvhJwYy85mulkBZ42c_6Q-_qhfgIoQmQaCz7DYdqjb_9Z0&sig=Cg0ArKJSzPOqpsbS3-5iEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY
Source: global traffic	HTTP traffic detected: GET /country?o=6208086025961472 HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=msnews&market=en-us HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=msnews&market=en-us HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKNDOgNBgAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-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____________AcAFAMkFgaccAADwP9IFCQkJDHAAANgFAeAFAfAFAfoFBAgAEACQBgCYBgC4BgDBBgkjKPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4OsNkxu-m9UGLgnHUHvLyjt7E2-nupPkWUGYjJ5ZDyI4cwVHdjv02SOZnWSkuR-OhTZNRCx2N9mu_4BHdo3BZi7mBtPX6R7Ld7pffnunZOI0UlzWTYuul3govZ5yc5RvZT1MQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=890e37e5facbdf59d28d5559e29864121613ac3e HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKQDOgQBgAAAwDWAAUBCPumrrUGEL-y2fGfyc6MARj2vpPq4pjpwlkqNgm4HoXrUbjmPxG4HoXrUbjmPxkAAAECCERAIREbACkRCcgxAAAAwMzM_D8wz67IATiYAkDyVkgCULuJye4BWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAGsAqAB2ASoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGKAlR1ZignYScsIDQwODUwNTQsIDApO3VmKCdpJywgMTA0NTExMDkVFSxnJywgMTYzNjYxOTYVFTByJywgNTAwMzE5NDE5BRbwi5ICvQQhd1hSUEp3ajg0ckVZRUx1SnllNEJHQUFnNUxVRE1BQTRBRUFBU1BKV1VNLXV5QUZZQUdDZUJtZ0FjQUI0QUlBQkFJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0J4Q0ZNcGxLNDVqX0JBY1FoVEtaU3VPWV95UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FhWHhfUVQxQVlfQ05ULVlBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnRFlBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRExnQTRGSGdBVHl6OTBPaUFUcnRlQU9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbGkyUUJZT2hWYWtGDSsYQThELXhCUREOPEFBd1FXNEhvWHJVYmptUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGMktvRThBWDA5T1lILUFXLXF2a0JnZ1lEVlZORWlBWUFrQVlCbUFZQW9RYRlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUl1QjZGNjFHNDVqLUlDQUNRQ0FBLpoCmQEhY1JZdlNRajZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvQFAXcuLrICIDIxNjdDMjlCNEI5RjZEN0IyRTVCRDY1NTRBODY2Qzg02AIB4AK7zlTqAidodHRwczovL3d3dy5tc24uY29tLz9vY2lkPXdpc3ByJnBjPXU0NzeAAwCIAwGQA4OhVZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI6XvSLIBADSBA8xMTEyMiNGUkExOjU3ODLaBAIIAeAEAfAEu4nJ7gGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQCBt3QAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYBHzAAAPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4ARk6Sf42WT_e1rL7-S5airC9inbX2rV9WWaVnd71ZzC3iSjEK53cuVTLaiU1sUnS0jphANKlXhF-feg0_Xk2pDqErxvf0ELB9JC4cdCL3o9V5GCVyFeusYB9Td4zo9Xm-9sQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=039927e721fe0f032cd728e4541d83c6408a0926 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKQDOgQBgAAAwDWAAUBCPumrrUGEL-y2fGfyc6MARj2vpPq4pjpwlkqNgm4HoXrUbjmPxG4HoXrUbjmPxkAAAECCERAIREbACkRCcgxAAAAwMzM_D8wz67IATiYAkDyVkgCULuJye4BWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAGsAqAB2ASoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGKAlR1ZignYScsIDQwODUwNTQsIDApO3VmKCdpJywgMTA0NTExMDkVFSxnJywgMTYzNjYxOTYVFTByJywgNTAwMzE5NDE5BRbwi5ICvQQhd1hSUEp3ajg0ckVZRUx1SnllNEJHQUFnNUxVRE1BQTRBRUFBU1BKV1VNLXV5QUZZQUdDZUJtZ0FjQUI0QUlBQkFJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0J4Q0ZNcGxLNDVqX0JBY1FoVEtaU3VPWV95UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FhWHhfUVQxQVlfQ05ULVlBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnRFlBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRExnQTRGSGdBVHl6OTBPaUFUcnRlQU9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbGkyUUJZT2hWYWtGDSsYQThELXhCUREOPEFBd1FXNEhvWHJVYmptUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGMktvRThBWDA5T1lILUFXLXF2a0JnZ1lEVlZORWlBWUFrQVlCbUFZQW9RYRlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUl1QjZGNjFHNDVqLUlDQUNRQ0FBLpoCmQEhY1JZdlNRajZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvQFAXcuLrICIDIxNjdDMjlCNEI5RjZEN0IyRTVCRDY1NTRBODY2Qzg02AIB4AK7zlTqAidodHRwczovL3d3dy5tc24uY29tLz9vY2lkPXdpc3ByJnBjPXU0NzeAAwCIAwGQA4OhVZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI6XvSLIBADSBA8xMTEyMiNGUkExOjU3ODLaBAIIAeAEAfAEu4nJ7gGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQCBt3QAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYBHzAAAPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4ARk6Sf42WT_e1rL7-S5airC9inbX2rV9WWaVnd71ZzC3iSjEK53cuVTLaiU1sUnS0jphANKlXhF-feg0_Xk2pDqErxvf0ELB9JC4cdCL3o9V5GCVyFeusYB9Td4zo9Xm-9sQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=039927e721fe0f032cd728e4541d83c6408a0926 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /v/s/245/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKNDOgNBgAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-gGoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTWKAlR1ZignYScsIDU1ODY4MDcsIDApO3VmKCdpJywgMTA0NTEwODQVFSxnJywgMjA5NDM3MjUVFTByJywgNDQyNTM0MzY5BRbwi5ICvQQhd1cyVjJBakc0dGdhRU9HVGd0TUJHQUFnNUxVRE1BQTRBRUFBU1BKV1VLN01udzVZQUdDZUJtZ0FjQUI0QUlBQkFJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0JnazBNTGo0SzV6X0JBWUpOREM0LUN1Y195UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FZenhfUVQxQWV4Uk9ELVlBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnRFlBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRExnQTRGSGdBU096OTBPaUFUN3FOOE9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbGkyUUJiT0VaYWtGDSsYQThELXhCUREOPEFBd1FVSzE2TndQUXJuUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGd0xJRThBWHRwdjRKLUFYM190UUNnZ1lEVlZORWlBWUFrQVlCbUFZQW9RWRlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUlDdGVqY0QwSzV6LUlDQUNRQ0FBLpoCmQEhSHhYcTFRajZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvD1dy4usgIgMjE2N0MyOUI0QjlGNkQ3QjJFNUJENjU1NEE4NjZDODTYAgHgArvOVOoCJ2h0dHBzOi8vd3d3Lm1zbi5jb20vP29jaWQ9d2lzcHImcGM9dTQ3N4ADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTc4MtoEAggB4AQB8AThk4LTAYgFAZgFAKAF____________AcAFAMkFgaccAADwP9IFCQkJDHAAANgFAeAFAfAFAfoFBAgAEACQBgCYBgC4BgDBBgkjKPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4OsNkxu-m9UGLgnHUHvLyjt7E2-nupPkWUGYjJ5ZDyI4cwVHdjv02SOZnWSkuR-OhTZNRCx2N9mu_4BHdo3BZi7mBtPX6R7Ld7pffnunZOI0UlzWTYuul3govZ5yc5RvZT1MQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=890e37e5facbdf59d28d5559e29864121613ac3e HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js;ord=2019921736 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZYRange: bytes=95274-95274If-Range: 278 / 19936 / 31085685 / config-hash: 558971391453262836
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1Host: ef0907a215607cc63970622481622b84.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=6208086025961472&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"7a284fd55fcf373a6b31c799aae5807d"If-Modified-Since: Thu, 01 Aug 2024 13:15:12 GMT
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1922570158344932&correlator=2269465471470056&eid=31079957%2C31083340%2C31083341%2C31085728%2C31085684%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202407250101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_US_970x250_2023&enc_prev_ius=%2F0%2F1&prev_iu_szs=970x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D11f65a8e04c65a0c%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZ35rF4OO7lFb9jYCtF6ta7GzqNSQ&gpic=UID%3D00000e825459448b%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZFa-lTuYD19Ok3_rZle9UEElAp8w&cdm=www.msn.com&abxe=1&dt=1722520458920&adxs=147&adys=275&biw=1263&bih=907&isw=970&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=cet2jt2fqf8i&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&top=www.msn.com&vis=1&psz=970x250&msz=970x0&fws=256&ohw=0&td=1&egid=46240&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1722520444604&idt=14285&adks=192829894&frm=23&eo_id_str=ID%3Def2b815864208f51%3AT%3D1722520452%3ART%3D1722520452%3AS%3DAA-AfjYO7LU-u_JfCdMG8cQGaIKn HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstZHuVXJr--QDQh5yV8e5VDwSiH26chTxZlqlr286wsjB4StJUI4-9gGZLk7Ls6NSO_5l2B5VW7LJvQuBij3-RrrqpXQmLr1t0K8m063MvTblCUNdelLemF5xUUSL2lGaIFd8txpnu8Ut3kqrwxYNycBRLJqRAoZnuePjOyTzQvM5sNfO2rYu3k1HNif0VirBz55IK0hoD_ljt6rX_WDLKASqiZw6xdDqlXvLd-DJN1m7P-T5N9jtm6EFaCylJkCrL_UeqcWwhqFzaYctBFOsDKyw5KokdMzTqJpkfmkFSG3Ql1PefyMDxgjniUHdkn_XY6piKCpg247Ne-awLyyBLtNikQmcFYxgrpMkxIHL-34gPVZkOZirh23RTqeTS-NSr9iYvLyrw9ETkZuNWWWupfOzkWsNxoeka4C8MQZu6EZ2JsxHr50C1S5Qhuxe5sPR5nhAYyIALMX9AT78jiNPYYbcwAb37M9QR4TFPmM1ej73qT76B25anc3PnnQciWjNJZn2EZCTZgOJIepxRUP9S3cq5u9c7uNBNY4QXZBSI3gt1zu2W_JaXeqj6BfVAT7Cac68wWZ5mu67jBnG8gUt5UODW5ytQ1fQ3nwfucyeYEeCMGpc2VwBYon9Cpo6FEO4JT_aKPUJssFjZpu8NISINJcolYJ0sT06808m9D8yIItKUENuZRbhrWPh7vLcpAJFjJbVZiZ_ow1lYfRdjDULW92EYK0xmHQ6PtbN--o5sN2igT8KQOZ2g1F3Z20Y4vuoog1HFDRvnDzduFBkejfNSSi653a9onQzm-AZ0_5rZ_UwBRixfIYA6TRjU2JNcS81kCw49TUbvvbh74YUyBCGgy9KaG7I2Ku-GgQfobP5ECO6BwRe2SDfUtcMlGcqlIeXfdVYQD9nrDfsuwG5w3JYV83TeYjiu0EDNsxk8pipXSVacJnn3B8BnIkBvKkpcUVHIgbh90FxOZ8TKvVflx0iF51X8fNVC6dG4jKXZCA8qafliUMjBKBdpd18YZ-FczrH2PekdACcCyASEqqKe1_tc5g62cK-0-QQ_jsVsKDE3h1wZOJh6spv4-nCL-S2xWJN6uCnQ-HcqINzAheeBevU4Etk2aovuWBqc8jGde_54Ag6ONiDWATrZsP4OMslBBDF9GJt6LsWMMZi1x3biILe3cZSqpj33TcDR1umfANKXIKnXCO_jAfTKo4QdAp0Hlmf-ynVrzN7WZ3j9e-MJ8_U4eEob89Ltblrl2Qko1k31WfTo4catCwjyx3SN1YYo7enQrRn_sW7l5BzoAKRVDy-zZ7oar2jQTf2qNn4vZB4e4Pk1nDLBIdKVhDR5RdWzH5RfDJP6rcfxMCOaapGS1DUZ1o4Ry8v7Hg6MEK1GPKSlVwuv44MMUxa7jm1zHfOxLGZs_pMLkwCG-03VYhbcWu31zKwEOpG5wokbspdCJUV0DHYHsN443593upxYGCWvabY2iHDM9LRmo3BLHmymHSBenObc-mIJ6ftbvSWIe19-n89FUD-xNM7c8CvZPjESki2Pjgzt6C7jXiI8agk7PlXJGWKCIIPpIKpIMFcBHDX7-c9OjuMUshUhq53HK37dRCtskgQhhch_eBo8J&sai=AMfl-YRgcTHDIeTLitQuJcYXe9jIU6_NFoD61HoCS-T-kSd-RzFPCJIFDVgSKj70LsgAUGAiclYsyYln9rgKD5ZfFatOGqsAOxE5qt5wcCSS_0Iklr-b6ucbikxYND4ltJfNLUlEsClli9oKljV3g08LoZW7djuWXaH99kKy21khYNry00lTWa-aU6FqmgqpEksm7jDFF5SFB2cRDgVP1pscy8g3JUbYG2Qesxs5e3ZFUa8ILtJBFAO-zY7MDNZ-ersl7C-6h4a7kud6Xwfi40wIa1YysLQGQL_wQJaVKD_bbXJt0t1B7QEhjdZGBvPi6mTikY-s0HCyhlOTNAfSFgYZbcu6SOO9pPSbTOkdtnExT2oabzsthmvRJfFZNRoUWvk8MoBz6n9CxtClLzkaEOVayTGHBMbIX4du9IcgfpcYF46xvurwJnQ&sig=Cg0ArKJSzLL3zJIAJ5teEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9oZXJ0ei5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240729.04415&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-navigation-source;triggerReferer: https://ef0907a215607cc63970622481622b84.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Lan
Source: global traffic	HTTP traffic detected: GET /simgad/16178903522924948873 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ef0907a215607cc63970622481622b84.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=6208086025961472&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"7a284fd55fcf373a6b31c799aae5807d"If-Modified-Since: Thu, 01 Aug 2024 13:15:12 GMT
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstZHuVXJr--QDQh5yV8e5VDwSiH26chTxZlqlr286wsjB4StJUI4-9gGZLk7Ls6NSO_5l2B5VW7LJvQuBij3-RrrqpXQmLr1t0K8m063MvTblCUNdelLemF5xUUSL2lGaIFd8txpnu8Ut3kqrwxYNycBRLJqRAoZnuePjOyTzQvM5sNfO2rYu3k1HNif0VirBz55IK0hoD_ljt6rX_WDLKASqiZw6xdDqlXvLd-DJN1m7P-T5N9jtm6EFaCylJkCrL_UeqcWwhqFzaYctBFOsDKyw5KokdMzTqJpkfmkFSG3Ql1PefyMDxgjniUHdkn_XY6piKCpg247Ne-awLyyBLtNikQmcFYxgrpMkxIHL-34gPVZkOZirh23RTqeTS-NSr9iYvLyrw9ETkZuNWWWupfOzkWsNxoeka4C8MQZu6EZ2JsxHr50C1S5Qhuxe5sPR5nhAYyIALMX9AT78jiNPYYbcwAb37M9QR4TFPmM1ej73qT76B25anc3PnnQciWjNJZn2EZCTZgOJIepxRUP9S3cq5u9c7uNBNY4QXZBSI3gt1zu2W_JaXeqj6BfVAT7Cac68wWZ5mu67jBnG8gUt5UODW5ytQ1fQ3nwfucyeYEeCMGpc2VwBYon9Cpo6FEO4JT_aKPUJssFjZpu8NISINJcolYJ0sT06808m9D8yIItKUENuZRbhrWPh7vLcpAJFjJbVZiZ_ow1lYfRdjDULW92EYK0xmHQ6PtbN--o5sN2igT8KQOZ2g1F3Z20Y4vuoog1HFDRvnDzduFBkejfNSSi653a9onQzm-AZ0_5rZ_UwBRixfIYA6TRjU2JNcS81kCw49TUbvvbh74YUyBCGgy9KaG7I2Ku-GgQfobP5ECO6BwRe2SDfUtcMlGcqlIeXfdVYQD9nrDfsuwG5w3JYV83TeYjiu0EDNsxk8pipXSVacJnn3B8BnIkBvKkpcUVHIgbh90FxOZ8TKvVflx0iF51X8fNVC6dG4jKXZCA8qafliUMjBKBdpd18YZ-FczrH2PekdACcCyASEqqKe1_tc5g62cK-0-QQ_jsVsKDE3h1wZOJh6spv4-nCL-S2xWJN6uCnQ-HcqINzAheeBevU4Etk2aovuWBqc8jGde_54Ag6ONiDWATrZsP4OMslBBDF9GJt6LsWMMZi1x3biILe3cZSqpj33TcDR1umfANKXIKnXCO_jAfTKo4QdAp0Hlmf-ynVrzN7WZ3j9e-MJ8_U4eEob89Ltblrl2Qko1k31WfTo4catCwjyx3SN1YYo7enQrRn_sW7l5BzoAKRVDy-zZ7oar2jQTf2qNn4vZB4e4Pk1nDLBIdKVhDR5RdWzH5RfDJP6rcfxMCOaapGS1DUZ1o4Ry8v7Hg6MEK1GPKSlVwuv44MMUxa7jm1zHfOxLGZs_pMLkwCG-03VYhbcWu31zKwEOpG5wokbspdCJUV0DHYHsN443593upxYGCWvabY2iHDM9LRmo3BLHmymHSBenObc-mIJ6ftbvSWIe19-n89FUD-xNM7c8CvZPjESki2Pjgzt6C7jXiI8agk7PlXJGWKCIIPpIKpIMFcBHDX7-c9OjuMUshUhq53HK37dRCtskgQhhch_eBo8J&sai=AMfl-YRgcTHDIeTLitQuJcYXe9jIU6_NFoD61HoCS-T-kSd-RzFPCJIFDVgSKj70LsgAUGAiclYsyYln9rgKD5ZfFatOGqsAOxE5qt5wcCSS_0Iklr-b6ucbikxYND4ltJfNLUlEsClli9oKljV3g08LoZW7djuWXaH99kKy21khYNry00lTWa-aU6FqmgqpEksm7jDFF5SFB2cRDgVP1pscy8g3JUbYG2Qesxs5e3ZFUa8ILtJBFAO-zY7MDNZ-ersl7C-6h4a7kud6Xwfi40wIa1YysLQGQL_wQJaVKD_bbXJt0t1B7QEhjdZGBvPi6mTikY-s0HCyhlOTNAfSFgYZbcu6SOO9pPSbTOkdtnExT2oabzsthmvRJfFZNRoUWvk8MoBz6n9CxtClLzkaEOVayTGHBMbIX4du9IcgfpcYF46xvurwJnQ&sig=Cg0ArKJSzLL3zJIAJ5teEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9oZXJ0ei5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240729.04415&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQKaVRG6zUEFBR94KtJ4OC3_2LW8zHMFF2b4fXkb1z4Yw70OezRMr2717l-uOhBdBfC02QM HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ef0907a215607cc63970622481622b84.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstZHuVXJr--QDQh5yV8e5VDwSiH26chTxZlqlr286wsjB4StJUI4-9gGZLk7Ls6NSO_5l2B5VW7LJvQuBij3-RrrqpXQmLr1t0K8m063MvTblCUNdelLemF5xUUSL2lGaIFd8txpnu8Ut3kqrwxYNycBRLJqRAoZnuePjOyTzQvM5sNfO2rYu3k1HNif0VirBz55IK0hoD_ljt6rX_WDLKASqiZw6xdDqlXvLd-DJN1m7P-T5N9jtm6EFaCylJkCrL_UeqcWwhqFzaYctBFOsDKyw5KokdMzTqJpkfmkFSG3Ql1PefyMDxgjniUHdkn_XY6piKCpg247Ne-awLyyBLtNikQmcFYxgrpMkxIHL-34gPVZkOZirh23RTqeTS-NSr9iYvLyrw9ETkZuNWWWupfOzkWsNxoeka4C8MQZu6EZ2JsxHr50C1S5Qhuxe5sPR5nhAYyIALMX9AT78jiNPYYbcwAb37M9QR4TFPmM1ej73qT76B25anc3PnnQciWjNJZn2EZCTZgOJIepxRUP9S3cq5u9c7uNBNY4QXZBSI3gt1zu2W_JaXeqj6BfVAT7Cac68wWZ5mu67jBnG8gUt5UODW5ytQ1fQ3nwfucyeYEeCMGpc2VwBYon9Cpo6FEO4JT_aKPUJssFjZpu8NISINJcolYJ0sT06808m9D8yIItKUENuZRbhrWPh7vLcpAJFjJbVZiZ_ow1lYfRdjDULW92EYK0xmHQ6PtbN--o5sN2igT8KQOZ2g1F3Z20Y4vuoog1HFDRvnDzduFBkejfNSSi653a9onQzm-AZ0_5rZ_UwBRixfIYA6TRjU2JNcS81kCw49TUbvvbh74YUyBCGgy9KaG7I2Ku-GgQfobP5ECO6BwRe2SDfUtcMlGcqlIeXfdVYQD9nrDfsuwG5w3JYV83TeYjiu0EDNsxk8pipXSVacJnn3B8BnIkBvKkpcUVHIgbh90FxOZ8TKvVflx0iF51X8fNVC6dG4jKXZCA8qafliUMjBKBdpd18YZ-FczrH2PekdACcCyASEqqKe1_tc5g62cK-0-QQ_jsVsKDE3h1wZOJh6spv4-nCL-S2xWJN6uCnQ-HcqINzAheeBevU4Etk2aovuWBqc8jGde_54Ag6ONiDWATrZsP4OMslBBDF9GJt6LsWMMZi1x3biILe3cZSqpj33TcDR1umfANKXIKnXCO_jAfTKo4QdAp0Hlmf-ynVrzN7WZ3j9e-MJ8_U4eEob89Ltblrl2Qko1k31WfTo4catCwjyx3SN1YYo7enQrRn_sW7l5BzoAKRVDy-zZ7oar2jQTf2qNn4vZB4e4Pk1nDLBIdKVhDR5RdWzH5RfDJP6rcfxMCOaapGS1DUZ1o4Ry8v7Hg6MEK1GPKSlVwuv44MMUxa7jm1zHfOxLGZs_pMLkwCG-03VYhbcWu31zKwEOpG5wokbspdCJUV0DHYHsN443593upxYGCWvabY2iHDM9LRmo3BLHmymHSBenObc-mIJ6ftbvSWIe19-n89FUD-xNM7c8CvZPjESki2Pjgzt6C7jXiI8agk7PlXJGWKCIIPpIKpIMFcBHDX7-c9OjuMUshUhq53HK37dRCtskgQhhch_eBo8J&sai=AMfl-YRgcTHDIeTLitQuJcYXe9jIU6_NFoD61HoCS-T-kSd-RzFPCJIFDVgSKj70LsgAUGAiclYsyYln9rgKD5ZfFatOGqsAOxE5qt5wcCSS_0Iklr-b6ucbikxYND4ltJfNLUlEsClli9oKljV3g08LoZW7djuWXaH99kKy21khYNry00lTWa-aU6FqmgqpEksm7jDFF5SFB2cRDgVP1pscy8g3JUbYG2Qesxs5e3ZFUa8ILtJBFAO-zY7MDNZ-ersl7C-6h4a7kud6Xwfi40wIa1YysLQGQL_wQJaVKD_bbXJt0t1B7QEhjdZGBvPi6mTikY-s0HCyhlOTNAfSFgYZbcu6SOO9pPSbTOkdtnExT2oabzsthmvRJfFZNRoUWvk8MoBz6n9CxtClLzkaEOVayTGHBMbIX4du9IcgfpcYF46xvurwJnQ&sig=Cg0ArKJSzLL3zJIAJ5teEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9oZXJ0ei5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1249&vt=11&dtpt=1248&dett=2&cstd=0&cisv=r20240729.04415&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no
Source: global traffic	HTTP traffic detected: GET /simgad/16178903522924948873 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKMDOgMBgAAAwDWAAUBCICnrrUGEO6lm9zAztXhMRj2vpPq4pjpwlkqNgl7FK5H4XrUPxF7FK5H4XrUPxkAAAECCERAIREbACkRCcgxAAAAYGZm7j8w0K7IATiYAkDyVkgCUOzcie8BWOS1A2AAaO4CeMqGBoABAYoBA1VTRJIFBvBVmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xMooCVHVmKCdhJywgNTU4NjgwNywgMCk7dWYoJ2knLCAxMDQ1MTA4NCwRFQBnARUUODIxNjM0GSo0cicsIDUwMTM3ODY2OCwBK_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_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAOxhGWYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQAsgQPCAAQARjYBSBaKAAwADgCuAQAwASPl70iyAQA0gQPMTExMjIjRlJBMTo2NTQ52gQCCAHgBAHwBOzcie8BiAUBmAUAoAX___________8BwAUAyQWBphwAAPA_0gUJCQkMcAAA2AUB4AUB8AUB-gUECAAQAJAGAJgGALgGAMEGCSMo8D_QBpJC2gYWChAJERkBiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAfKhgbSBw0JES0BKwjaBwYBYvCkGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44LAAxw1Z0C4bS7s_Lyvtb1BY_DWk2tXWFNDV92c1Tv1ORvvuQCD_1bOmyNE1WHK-ldWwG9GPW_6rWYsr-5IVZpps0KHp5GyTvWacRpSln_3rmFggE8D66XS9FgCjJc30SMRWBJxABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=06177c3d9abe793597d50774564d100ef3846cf6 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstZHuVXJr--QDQh5yV8e5VDwSiH26chTxZlqlr286wsjB4StJUI4-9gGZLk7Ls6NSO_5l2B5VW7LJvQuBij3-RrrqpXQmLr1t0K8m063MvTblCUNdelLemF5xUUSL2lGaIFd8txpnu8Ut3kqrwxYNycBRLJqRAoZnuePjOyTzQvM5sNfO2rYu3k1HNif0VirBz55IK0hoD_ljt6rX_WDLKASqiZw6xdDqlXvLd-DJN1m7P-T5N9jtm6EFaCylJkCrL_UeqcWwhqFzaYctBFOsDKyw5KokdMzTqJpkfmkFSG3Ql1PefyMDxgjniUHdkn_XY6piKCpg247Ne-awLyyBLtNikQmcFYxgrpMkxIHL-34gPVZkOZirh23RTqeTS-NSr9iYvLyrw9ETkZuNWWWupfOzkWsNxoeka4C8MQZu6EZ2JsxHr50C1S5Qhuxe5sPR5nhAYyIALMX9AT78jiNPYYbcwAb37M9QR4TFPmM1ej73qT76B25anc3PnnQciWjNJZn2EZCTZgOJIepxRUP9S3cq5u9c7uNBNY4QXZBSI3gt1zu2W_JaXeqj6BfVAT7Cac68wWZ5mu67jBnG8gUt5UODW5ytQ1fQ3nwfucyeYEeCMGpc2VwBYon9Cpo6FEO4JT_aKPUJssFjZpu8NISINJcolYJ0sT06808m9D8yIItKUENuZRbhrWPh7vLcpAJFjJbVZiZ_ow1lYfRdjDULW92EYK0xmHQ6PtbN--o5sN2igT8KQOZ2g1F3Z20Y4vuoog1HFDRvnDzduFBkejfNSSi653a9onQzm-AZ0_5rZ_UwBRixfIYA6TRjU2JNcS81kCw49TUbvvbh74YUyBCGgy9KaG7I2Ku-GgQfobP5ECO6BwRe2SDfUtcMlGcqlIeXfdVYQD9nrDfsuwG5w3JYV83TeYjiu0EDNsxk8pipXSVacJnn3B8BnIkBvKkpcUVHIgbh90FxOZ8TKvVflx0iF51X8fNVC6dG4jKXZCA8qafliUMjBKBdpd18YZ-FczrH2PekdACcCyASEqqKe1_tc5g62cK-0-QQ_jsVsKDE3h1wZOJh6spv4-nCL-S2xWJN6uCnQ-HcqINzAheeBevU4Etk2aovuWBqc8jGde_54Ag6ONiDWATrZsP4OMslBBDF9GJt6LsWMMZi1x3biILe3cZSqpj33TcDR1umfANKXIKnXCO_jAfTKo4QdAp0Hlmf-ynVrzN7WZ3j9e-MJ8_U4eEob89Ltblrl2Qko1k31WfTo4catCwjyx3SN1YYo7enQrRn_sW7l5BzoAKRVDy-zZ7oar2jQTf2qNn4vZB4e4Pk1nDLBIdKVhDR5RdWzH5RfDJP6rcfxMCOaapGS1DUZ1o4Ry8v7Hg6MEK1GPKSlVwuv44MMUxa7jm1zHfOxLGZs_pMLkwCG-03VYhbcWu31zKwEOpG5wokbspdCJUV0DHYHsN443593upxYGCWvabY2iHDM9LRmo3BLHmymHSBenObc-mIJ6ftbvSWIe19-n89FUD-xNM7c8CvZPjESki2Pjgzt6C7jXiI8agk7PlXJGWKCIIPpIKpIMFcBHDX7-c9OjuMUshUhq53HK37dRCtskgQhhch_eBo8J&sai=AMfl-YRgcTHDIeTLitQuJcYXe9jIU6_NFoD61HoCS-T-kSd-RzFPCJIFDVgSKj70LsgAUGAiclYsyYln9rgKD5ZfFatOGqsAOxE5qt5wcCSS_0Iklr-b6ucbikxYND4ltJfNLUlEsClli9oKljV3g08LoZW7djuWXaH99kKy21khYNry00lTWa-aU6FqmgqpEksm7jDFF5SFB2cRDgVP1pscy8g3JUbYG2Qesxs5e3ZFUa8ILtJBFAO-zY7MDNZ-ersl7C-6h4a7kud6Xwfi40wIa1YysLQGQL_wQJaVKD_bbXJt0t1B7QEhjdZGBvPi6mTikY-s0HCyhlOTNAfSFgYZbcu6SOO9pPSbTOkdtnExT2oabzsthmvRJfFZNRoUWvk8MoBz6n9CxtClLzkaEOVayTGHBMbIX4du9IcgfpcYF46xvurwJnQ&sig=Cg0ArKJSzLL3zJIAJ5teEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9oZXJ0ei5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1249&vt=11&dtpt=1248&dett=2&cstd=0&cisv=r20240729.04415&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKMDOgMBgAAAwDWAAUBCICnrrUGEO6lm9zAztXhMRj2vpPq4pjpwlkqNgl7FK5H4XrUPxF7FK5H4XrUPxkAAAECCERAIREbACkRCcgxAAAAYGZm7j8w0K7IATiYAkDyVkgCUOzcie8BWOS1A2AAaO4CeMqGBoABAYoBA1VTRJIFBvBVmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xMooCVHVmKCdhJywgNTU4NjgwNywgMCk7dWYoJ2knLCAxMDQ1MTA4NCwRFQBnARUUODIxNjM0GSo0cicsIDUwMTM3ODY2OCwBK_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_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAOxhGWYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQAsgQPCAAQARjYBSBaKAAwADgCuAQAwASPl70iyAQA0gQPMTExMjIjRlJBMTo2NTQ52gQCCAHgBAHwBOzcie8BiAUBmAUAoAX___________8BwAUAyQWBphwAAPA_0gUJCQkMcAAA2AUB4AUB8AUB-gUECAAQAJAGAJgGALgGAMEGCSMo8D_QBpJC2gYWChAJERkBiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAfKhgbSBw0JES0BKwjaBwYBYvCkGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44LAAxw1Z0C4bS7s_Lyvtb1BY_DWk2tXWFNDV92c1Tv1ORvvuQCD_1bOmyNE1WHK-ldWwG9GPW_6rWYsr-5IVZpps0KHp5GyTvWacRpSln_3rmFggE8D66XS9FgCjJc30SMRWBJxABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=06177c3d9abe793597d50774564d100ef3846cf6 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAiACKAIwgKeutQY4AkACSAIQgKeutQYYAQ..
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473gc6s&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTAxMzc4NjY4LCJhc3RfYiI6MTExMjIsInMiOiJiYW5uZXIyXzQxOGEwOGVkMTJmOTQ1ZWY4MDU2NjVkYjEwOTU4OTRhIn0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs1MDEzNzg2NjgifQ%3D%3D&cb=4631622&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473gc6s&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTAxMzc4NjY4LCJhc3RfYiI6MTExMjIsInMiOiJiYW5uZXIyXzQxOGEwOGVkMTJmOTQ1ZWY4MDU2NjVkYjEwOTU4OTRhIn0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs1MDEzNzg2NjgifQ%3D%3D&cb=4631622&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.539835864204016 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.539835864204016 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sdLWpR8Fcdlu5Rg&MD=VlBhdP2t HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202407300101/pubads_impl.js?cb=31085800 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1Host: aa22f4e5eb16a3867aba37b34c0a0de8.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2119048343557248&correlator=2130166602924846&eid=31083344%2C31085556%2C31085727%2C31085800%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202407300101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_728x90_US_June2023&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D11f65a8e04c65a0c%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZ35rF4OO7lFb9jYCtF6ta7GzqNSQ&gpic=UID%3D00000e825459448b%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZFa-lTuYD19Ok3_rZle9UEElAp8w&cdm=www.msn.com&abxe=1&dt=1722520472465&adxs=268&adys=1904&biw=1263&bih=907&isw=728&ish=90&scr_x=0&scr_y=0&btvi=1&ucis=dolnle2i7v55&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&top=www.msn.com&vis=1&psz=728x90&msz=728x0&fws=256&ohw=0&td=1&egid=46240&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1722520447850&idt=24574&adks=3382067003&frm=23&eo_id_str=ID%3Def2b815864208f51%3AT%3D1722520452%3ART%3D1722520452%3AS%3DAA-AfjYO7LU-u_JfCdMG8cQGaIKn HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQAy0mCx6t5-viJ-Bnk-hdlgWvmgFnzvNKNt-9IuXiBtAVI4KHXFQiJb6JORgOw2tnd380u HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aa22f4e5eb16a3867aba37b34c0a0de8.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/9517558193769030702 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aa22f4e5eb16a3867aba37b34c0a0de8.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv6a-ujrQ53odRAWWxdzgdooNrYgrR5pn392-U_htQihOKZVCHXOOdnbNKZz_-CMvdQ5wwn1Q-fGSsmo2HoANy9x337eBhp9uumKw-4NqJfq5YNoINpFb9fyh8OnjNMwKLbRM0DueST4QgQo9tZX8sQPaOwel8w1dcvyVs1wcEgQpOdFAcTWsgSGhSfOlCRv_G9qPcgjQfJ3J-i7ORg5bmrlH4jHDBl-SPEDfL24T5NrtdQu4NewOWev3qog6ZNBXtL4NjiTg8Tt9JuMUgPmGtc-We6XF-q0XQhy-7nHYPTCFdea36T5sl_YnbENcFBQixB1muAk53vZR6zujXFB0ELfGnk8cHOhjCDott8Mmqm_9Ns9HOqqz5-Gcc1rpkKMNX4w_f6ONTkHEtBLwEqQtUhAewLc7xXrH8pbxaZcBL1qi3XBN-6185eeP3Sy_7CKATCl1gTLDLdqj-CCBI5Wk_xCP4BN-Gp-DNyjASY1BemjjuHimzeGnDzd_-DNR6hIEoHPF6o51Bg3xS5rJN4RL0bMopNYxbCidMYXDgLTJgM0VD1j4__U6ZZ2ySc3oNkIxml_vh_Yh2e2ZxQFQSxWWVAEniIGtuhVBIg0VFlLrG6vAyDAyHouAkmDasv2mvGLOty6d4giN_-KukEArfsSQ1Xx9DyQcMkCPvHR52nDiFr3Z74PO2WENRqe_iTaQT8PUdcFSpH5gu2V_wplXg_ZBSi4IKIrP1q2JW2-uukjv41gqsUREKJko6jHGQLtNbQc1imfk0ORTvhrJULSndTK63b0KGMh_hkd8nL_5SZFNNXIrVh8eslZKYFuDHFiXIuThlAMMAJo8WznADVan8ZjnJcFqawgsiXCrStyC3ZBr4fxyxykFgespNcfDfMl4WRHmbHMj-O5jtKNLfP6YVVzDYvfETXXSkjlHK4_hxSmDVuN_UfQBLiQltQI7gbq54WwpHcdVJaVCWFGl6l2fai31N06Cb9QdGAzpFZaRVnriBgk0u69PFvpAQNNdTvdYrqAN1ezsz6WzhnvRriEC4FLGsli1mHUXgxinGenRYkJiMEI8I30KZUne17wTmXcclu9wg83GGvk37nhDySePVgf_SsCzh2fucjS8zycYLSpGis4ERAhGRV2b6IeuNBbJRqA43LnI3mYdyzdCETf-y4Q0ElcCZW7ARnD8k7xiOTiRbIrNjzK-fHOWOjCrk2yFa1ofiEUOiy4aiIHGQiRl3C7uhUzqe0hNzVxP-f0C6S2tOb3wJNGd446AAmOn9ZIjCuJum86Hwpxe80IufcI4pdpCFl6Nw9H4GNtMRsTcsyY4iQGCr5cicAvRv24LxM65Fnldd17ORu9_SKVqcVhshw-4Lc9AwEGP2jiDDDShBc3FZwpwnVY1Mb5oI2VON0V8fVX5rJudqwYPuja2TxOOmTphLlOuJwd1bGWxfR529kwjK6P_wn6NNRgK9m6nCXr0Djig2_kOlBtnLKaAhcdHicD7LMD7m3f0MBFGgejBlwIyigGkFVUv61B9mllz6bPEyWAXVEhqAMpt_SeO6PVaMBSQ&sai=AMfl-YQBQYMycwB4mvZSu6TmTqS9G3OngFVbIpsOvDCZK_kWHc8A8ZYCISXBdCYBBni5Cwrjlt6YIvoFExA-QwJuhPgvMLFKU-vY896Xnry6fJfSd4DzsRB2un3U0Hc6er5kYj0DN4PGE5jOU2HYrY-9meUswplw9D-J1VdrZH87nEJGvg3AHqR5wzl3Iw__3jFbW6_YnGMi0CtYiGgpvkJEf7bAz24jh-qSOlRYgQw9VRpRjStK9erw5C8cc3wOr3I6hgZVa1ji6dLe2cAEVUe_nYIV-DEoifcUNn9O_CU0TvZqSA-HIhSLVKRvZnMTv6JxX9FYx8i4mGmGZdICvg1APsGC3rxaIpek8FyfKwomVTBr3wbitU4lfNNyhb5pRsPA44oqX4Fsb9LqHcEXjbfsxz1tdDUkr9cgYlPkG1M&sig=Cg0ArKJSzC0uxOL2q9IzEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9maXZlcnIuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=7&cbvp=1&cstd=1&cisv=r20240729.92292&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source=navigation-sourceReferer: https://aa22f4e5eb16a3867aba37b34c0a0de8.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv6a-ujrQ53odRAWWxdzgdooNrYgrR5pn392-U_htQihOKZVCHXOOdnbNKZz_-CMvdQ5wwn1Q-fGSsmo2HoANy9x337eBhp9uumKw-4NqJfq5YNoINpFb9fyh8OnjNMwKLbRM0DueST4QgQo9tZX8sQPaOwel8w1dcvyVs1wcEgQpOdFAcTWsgSGhSfOlCRv_G9qPcgjQfJ3J-i7ORg5bmrlH4jHDBl-SPEDfL24T5NrtdQu4NewOWev3qog6ZNBXtL4NjiTg8Tt9JuMUgPmGtc-We6XF-q0XQhy-7nHYPTCFdea36T5sl_YnbENcFBQixB1muAk53vZR6zujXFB0ELfGnk8cHOhjCDott8Mmqm_9Ns9HOqqz5-Gcc1rpkKMNX4w_f6ONTkHEtBLwEqQtUhAewLc7xXrH8pbxaZcBL1qi3XBN-6185eeP3Sy_7CKATCl1gTLDLdqj-CCBI5Wk_xCP4BN-Gp-DNyjASY1BemjjuHimzeGnDzd_-DNR6hIEoHPF6o51Bg3xS5rJN4RL0bMopNYxbCidMYXDgLTJgM0VD1j4__U6ZZ2ySc3oNkIxml_vh_Yh2e2ZxQFQSxWWVAEniIGtuhVBIg0VFlLrG6vAyDAyHouAkmDasv2mvGLOty6d4giN_-KukEArfsSQ1Xx9DyQcMkCPvHR52nDiFr3Z74PO2WENRqe_iTaQT8PUdcFSpH5gu2V_wplXg_ZBSi4IKIrP1q2JW2-uukjv41gqsUREKJko6jHGQLtNbQc1imfk0ORTvhrJULSndTK63b0KGMh_hkd8nL_5SZFNNXIrVh8eslZKYFuDHFiXIuThlAMMAJo8WznADVan8ZjnJcFqawgsiXCrStyC3ZBr4fxyxykFgespNcfDfMl4WRHmbHMj-O5jtKNLfP6YVVzDYvfETXXSkjlHK4_hxSmDVuN_UfQBLiQltQI7gbq54WwpHcdVJaVCWFGl6l2fai31N06Cb9QdGAzpFZaRVnriBgk0u69PFvpAQNNdTvdYrqAN1ezsz6WzhnvRriEC4FLGsli1mHUXgxinGenRYkJiMEI8I30KZUne17wTmXcclu9wg83GGvk37nhDySePVgf_SsCzh2fucjS8zycYLSpGis4ERAhGRV2b6IeuNBbJRqA43LnI3mYdyzdCETf-y4Q0ElcCZW7ARnD8k7xiOTiRbIrNjzK-fHOWOjCrk2yFa1ofiEUOiy4aiIHGQiRl3C7uhUzqe0hNzVxP-f0C6S2tOb3wJNGd446AAmOn9ZIjCuJum86Hwpxe80IufcI4pdpCFl6Nw9H4GNtMRsTcsyY4iQGCr5cicAvRv24LxM65Fnldd17ORu9_SKVqcVhshw-4Lc9AwEGP2jiDDDShBc3FZwpwnVY1Mb5oI2VON0V8fVX5rJudqwYPuja2TxOOmTphLlOuJwd1bGWxfR529kwjK6P_wn6NNRgK9m6nCXr0Djig2_kOlBtnLKaAhcdHicD7LMD7m3f0MBFGgejBlwIyigGkFVUv61B9mllz6bPEyWAXVEhqAMpt_SeO6PVaMBSQ&sai=AMfl-YQBQYMycwB4mvZSu6TmTqS9G3OngFVbIpsOvDCZK_kWHc8A8ZYCISXBdCYBBni5Cwrjlt6YIvoFExA-QwJuhPgvMLFKU-vY896Xnry6fJfSd4DzsRB2un3U0Hc6er5kYj0DN4PGE5jOU2HYrY-9meUswplw9D-J1VdrZH87nEJGvg3AHqR5wzl3Iw__3jFbW6_YnGMi0CtYiGgpvkJEf7bAz24jh-qSOlRYgQw9VRpRjStK9erw5C8cc3wOr3I6hgZVa1ji6dLe2cAEVUe_nYIV-DEoifcUNn9O_CU0TvZqSA-HIhSLVKRvZnMTv6JxX9FYx8i4mGmGZdICvg1APsGC3rxaIpek8FyfKwomVTBr3wbitU4lfNNyhb5pRsPA44oqX4Fsb9LqHcEXjbfsxz1tdDUkr9cgYlPkG1M&sig=Cg0ArKJSzC0uxOL2q9IzEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9maXZlcnIuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=7&cbvp=1&cstd=1&cisv=r20240729.92292&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /simgad/9517558193769030702 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv6a-ujrQ53odRAWWxdzgdooNrYgrR5pn392-U_htQihOKZVCHXOOdnbNKZz_-CMvdQ5wwn1Q-fGSsmo2HoANy9x337eBhp9uumKw-4NqJfq5YNoINpFb9fyh8OnjNMwKLbRM0DueST4QgQo9tZX8sQPaOwel8w1dcvyVs1wcEgQpOdFAcTWsgSGhSfOlCRv_G9qPcgjQfJ3J-i7ORg5bmrlH4jHDBl-SPEDfL24T5NrtdQu4NewOWev3qog6ZNBXtL4NjiTg8Tt9JuMUgPmGtc-We6XF-q0XQhy-7nHYPTCFdea36T5sl_YnbENcFBQixB1muAk53vZR6zujXFB0ELfGnk8cHOhjCDott8Mmqm_9Ns9HOqqz5-Gcc1rpkKMNX4w_f6ONTkHEtBLwEqQtUhAewLc7xXrH8pbxaZcBL1qi3XBN-6185eeP3Sy_7CKATCl1gTLDLdqj-CCBI5Wk_xCP4BN-Gp-DNyjASY1BemjjuHimzeGnDzd_-DNR6hIEoHPF6o51Bg3xS5rJN4RL0bMopNYxbCidMYXDgLTJgM0VD1j4__U6ZZ2ySc3oNkIxml_vh_Yh2e2ZxQFQSxWWVAEniIGtuhVBIg0VFlLrG6vAyDAyHouAkmDasv2mvGLOty6d4giN_-KukEArfsSQ1Xx9DyQcMkCPvHR52nDiFr3Z74PO2WENRqe_iTaQT8PUdcFSpH5gu2V_wplXg_ZBSi4IKIrP1q2JW2-uukjv41gqsUREKJko6jHGQLtNbQc1imfk0ORTvhrJULSndTK63b0KGMh_hkd8nL_5SZFNNXIrVh8eslZKYFuDHFiXIuThlAMMAJo8WznADVan8ZjnJcFqawgsiXCrStyC3ZBr4fxyxykFgespNcfDfMl4WRHmbHMj-O5jtKNLfP6YVVzDYvfETXXSkjlHK4_hxSmDVuN_UfQBLiQltQI7gbq54WwpHcdVJaVCWFGl6l2fai31N06Cb9QdGAzpFZaRVnriBgk0u69PFvpAQNNdTvdYrqAN1ezsz6WzhnvRriEC4FLGsli1mHUXgxinGenRYkJiMEI8I30KZUne17wTmXcclu9wg83GGvk37nhDySePVgf_SsCzh2fucjS8zycYLSpGis4ERAhGRV2b6IeuNBbJRqA43LnI3mYdyzdCETf-y4Q0ElcCZW7ARnD8k7xiOTiRbIrNjzK-fHOWOjCrk2yFa1ofiEUOiy4aiIHGQiRl3C7uhUzqe0hNzVxP-f0C6S2tOb3wJNGd446AAmOn9ZIjCuJum86Hwpxe80IufcI4pdpCFl6Nw9H4GNtMRsTcsyY4iQGCr5cicAvRv24LxM65Fnldd17ORu9_SKVqcVhshw-4Lc9AwEGP2jiDDDShBc3FZwpwnVY1Mb5oI2VON0V8fVX5rJudqwYPuja2TxOOmTphLlOuJwd1bGWxfR529kwjK6P_wn6NNRgK9m6nCXr0Djig2_kOlBtnLKaAhcdHicD7LMD7m3f0MBFGgejBlwIyigGkFVUv61B9mllz6bPEyWAXVEhqAMpt_SeO6PVaMBSQ&sai=AMfl-YQBQYMycwB4mvZSu6TmTqS9G3OngFVbIpsOvDCZK_kWHc8A8ZYCISXBdCYBBni5Cwrjlt6YIvoFExA-QwJuhPgvMLFKU-vY896Xnry6fJfSd4DzsRB2un3U0Hc6er5kYj0DN4PGE5jOU2HYrY-9meUswplw9D-J1VdrZH87nEJGvg3AHqR5wzl3Iw__3jFbW6_YnGMi0CtYiGgpvkJEf7bAz24jh-qSOlRYgQw9VRpRjStK9erw5C8cc3wOr3I6hgZVa1ji6dLe2cAEVUe_nYIV-DEoifcUNn9O_CU0TvZqSA-HIhSLVKRvZnMTv6JxX9FYx8i4mGmGZdICvg1APsGC3rxaIpek8FyfKwomVTBr3wbitU4lfNNyhb5pRsPA44oqX4Fsb9LqHcEXjbfsxz1tdDUkr9cgYlPkG1M&sig=Cg0ArKJSzC0uxOL2q9IzEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9maXZlcnIuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1133&vt=11&dtpt=1126&dett=2&cstd=1&cisv=r20240729.92292&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-s
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv6a-ujrQ53odRAWWxdzgdooNrYgrR5pn392-U_htQihOKZVCHXOOdnbNKZz_-CMvdQ5wwn1Q-fGSsmo2HoANy9x337eBhp9uumKw-4NqJfq5YNoINpFb9fyh8OnjNMwKLbRM0DueST4QgQo9tZX8sQPaOwel8w1dcvyVs1wcEgQpOdFAcTWsgSGhSfOlCRv_G9qPcgjQfJ3J-i7ORg5bmrlH4jHDBl-SPEDfL24T5NrtdQu4NewOWev3qog6ZNBXtL4NjiTg8Tt9JuMUgPmGtc-We6XF-q0XQhy-7nHYPTCFdea36T5sl_YnbENcFBQixB1muAk53vZR6zujXFB0ELfGnk8cHOhjCDott8Mmqm_9Ns9HOqqz5-Gcc1rpkKMNX4w_f6ONTkHEtBLwEqQtUhAewLc7xXrH8pbxaZcBL1qi3XBN-6185eeP3Sy_7CKATCl1gTLDLdqj-CCBI5Wk_xCP4BN-Gp-DNyjASY1BemjjuHimzeGnDzd_-DNR6hIEoHPF6o51Bg3xS5rJN4RL0bMopNYxbCidMYXDgLTJgM0VD1j4__U6ZZ2ySc3oNkIxml_vh_Yh2e2ZxQFQSxWWVAEniIGtuhVBIg0VFlLrG6vAyDAyHouAkmDasv2mvGLOty6d4giN_-KukEArfsSQ1Xx9DyQcMkCPvHR52nDiFr3Z74PO2WENRqe_iTaQT8PUdcFSpH5gu2V_wplXg_ZBSi4IKIrP1q2JW2-uukjv41gqsUREKJko6jHGQLtNbQc1imfk0ORTvhrJULSndTK63b0KGMh_hkd8nL_5SZFNNXIrVh8eslZKYFuDHFiXIuThlAMMAJo8WznADVan8ZjnJcFqawgsiXCrStyC3ZBr4fxyxykFgespNcfDfMl4WRHmbHMj-O5jtKNLfP6YVVzDYvfETXXSkjlHK4_hxSmDVuN_UfQBLiQltQI7gbq54WwpHcdVJaVCWFGl6l2fai31N06Cb9QdGAzpFZaRVnriBgk0u69PFvpAQNNdTvdYrqAN1ezsz6WzhnvRriEC4FLGsli1mHUXgxinGenRYkJiMEI8I30KZUne17wTmXcclu9wg83GGvk37nhDySePVgf_SsCzh2fucjS8zycYLSpGis4ERAhGRV2b6IeuNBbJRqA43LnI3mYdyzdCETf-y4Q0ElcCZW7ARnD8k7xiOTiRbIrNjzK-fHOWOjCrk2yFa1ofiEUOiy4aiIHGQiRl3C7uhUzqe0hNzVxP-f0C6S2tOb3wJNGd446AAmOn9ZIjCuJum86Hwpxe80IufcI4pdpCFl6Nw9H4GNtMRsTcsyY4iQGCr5cicAvRv24LxM65Fnldd17ORu9_SKVqcVhshw-4Lc9AwEGP2jiDDDShBc3FZwpwnVY1Mb5oI2VON0V8fVX5rJudqwYPuja2TxOOmTphLlOuJwd1bGWxfR529kwjK6P_wn6NNRgK9m6nCXr0Djig2_kOlBtnLKaAhcdHicD7LMD7m3f0MBFGgejBlwIyigGkFVUv61B9mllz6bPEyWAXVEhqAMpt_SeO6PVaMBSQ&sai=AMfl-YQBQYMycwB4mvZSu6TmTqS9G3OngFVbIpsOvDCZK_kWHc8A8ZYCISXBdCYBBni5Cwrjlt6YIvoFExA-QwJuhPgvMLFKU-vY896Xnry6fJfSd4DzsRB2un3U0Hc6er5kYj0DN4PGE5jOU2HYrY-9meUswplw9D-J1VdrZH87nEJGvg3AHqR5wzl3Iw__3jFbW6_YnGMi0CtYiGgpvkJEf7bAz24jh-qSOlRYgQw9VRpRjStK9erw5C8cc3wOr3I6hgZVa1ji6dLe2cAEVUe_nYIV-DEoifcUNn9O_CU0TvZqSA-HIhSLVKRvZnMTv6JxX9FYx8i4mGmGZdICvg1APsGC3rxaIpek8FyfKwomVTBr3wbitU4lfNNyhb5pRsPA44oqX4Fsb9LqHcEXjbfsxz1tdDUkr9cgYlPkG1M&sig=Cg0ArKJSzC0uxOL2q9IzEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9maXZlcnIuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1133&vt=11&dtpt=1126&dett=2&cstd=1&cisv=r20240729.92292&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnaeutQY4A0ADSAMQnaeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK9D-i9BwAAAwDWAAUBCJ2nrrUGEMP3k6ilwtGEehj2vpPq4pjpwlkqNgnD9Shcj8LVPxHD9Shcj8LVPxkAAAECCERAIREbACkRCcgxAAAAwMzM_D8wz67IATiYAkDyVkgCUMLF7O0BWOS1A2AAaO4CeMDbBIABAYoBA1VTRJIFBvBVmAGsAqAB-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_ICEQoGQURWX0lEEgc1NTg2ODA38gISCgZDUEdfSUQSCDE4MjE2MzQy8gIKCgVDUF9JRBIBMPICDQoIQURWX0ZSRVESATTyAg0KCFJFTV9VU0VSEgEw8gIMCSA0Q09ERRIA8gIMCghDUEcVDxALCgdDUBUOGBEKBUlPX0kBbQAwafkA8gEiBElPFSI4EwoPQ1VTVE9NX01PREVMASwUAPICGgoWMhYAHExFQUZfTkFNBXIIHgoaNh0ACEFTVAE-EElGSUVEAT4cDQoIU1BMSVQBTfCGATCAAwCIAwGQA66EZZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjU3ODfaBAIIAeAEAfAEpWcgiAUBmAUAoAX_EQEUAcAFAMkFobIcAADwP9IFCQkJDHgAANgFAeAFAeoFDwoLa3Ztc2Z0X3llYXISAOoFEQoMBRDQcmVmcmVzaBIBMeoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPqBQoKBmZsaWdodBIA6gUQCgwNTBBtb2RlbAFN6A8KCXBhZ2VfdHlwZRICaHDqBScKA3JpZBIgNjYzOGNhZjIwMGQ0NDNiNjhmNjYwMDkwMDUxZjk4ZDXqHZtobWFrZRIA8AUB-gUECAAQAJAGAJgGALgGAMEGCdAo8D_QBpJC2gYWChAJERkBiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAfA2wTSBw0JES0BKwjaBwYBYvCcGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44nUh6CUYSVQT7w-usdbgCwfirp0d06yR3PCMQhJTw2E5WncAzCz8_a2MU2rm6F0HYYeDCHnS8RAVSr7JemlqK7b1ERhJYK3Qs_Q9VWgsbnHsP6CHosd_djNM1mH_CUY8hT4VISRABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=cf66325823bacacd70b58335ba6c432d6c4255f7&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode:
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1Host: d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QK9D-i9BwAAAwDWAAUBCJ2nrrUGEMP3k6ilwtGEehj2vpPq4pjpwlkqNgnD9Shcj8LVPxHD9Shcj8LVPxkAAAECCERAIREbACkRCcgxAAAAwMzM_D8wz67IATiYAkDyVkgCUMLF7O0BWOS1A2AAaO4CeMDbBIABAYoBA1VTRJIFBvBVmAGsAqAB-gGoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGKAlR1ZignYScsIDU1ODY4MDcsIDApO3VmKCdpJywgMTA0NTEwODQVFSxnJywgMTgyMTYzNDIVFTByJywgNDk4ODAzMzk0BRbwi5ICvQQhWW5PZTlnaUdwYXNaRU1MRjdPMEJHQUFnNUxVRE1BQTRBRUFBU1BKV1VNLXV5QUZZQUdDZUJtZ0FjQUI0QUlBQkNJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0JpcDRMRDVEQzFUX0JBWXFlQ3ctUXd0VV95UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FZenhfUVQxQVhzVXJqNllBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnallBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRGZnQTRGSGdBU096OTBPaUFUcHA5OE9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbXkyUUJhNkVaYWtGDSsYQThELXhCUREOPEFBd1FYRDlTaGNqOExWUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGMElrQzhBV1c2OWNJLUFYM190UUNnZ1lEVlZORWlBWUFrQVlCbUFZQW9RYhlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUl3X1VvWElfQzFULUlDQUNRQ0FBLpoCmQEhVUJidU5RaTZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TjBDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvCwdy4usgIgMjE2N0MyOUI0QjlGNkQ3QjJFNUJENjU1NEE4NjZDODTYAgHgArvOVOoCJ2h0dHBzOi8vd3d3Lm1zbi5jb20vP29jaWQ9d2lzcHImcGM9dTQ3N_ICEQoGQURWX0lEEgc1NTg2ODA38gISCgZDUEdfSUQSCDE4MjE2MzQy8gIKCgVDUF9JRBIBMPICDQoIQURWX0ZSRVESATTyAg0KCFJFTV9VU0VSEgEw8gIMCSA0Q09ERRIA8gIMCghDUEcVDxALCgdDUBUOGBEKBUlPX0kBbQAwafkA8gEiBElPFSI4EwoPQ1VTVE9NX01PREVMASwUAPICGgoWMhYAHExFQUZfTkFNBXIIHgoaNh0ACEFTVAE-EElGSUVEAT4cDQoIU1BMSVQBTfCGATCAAwCIAwGQA66EZZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjU3ODfaBAIIAeAEAfAEpWcgiAUBmAUAoAX_EQEUAcAFAMkFobIcAADwP9IFCQkJDHgAANgFAeAFAeoFDwoLa3Ztc2Z0X3llYXISAOoFEQoMBRDQcmVmcmVzaBIBMeoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPqBQoKBmZsaWdodBIA6gUQCgwNTBBtb2RlbAFN6A8KCXBhZ2VfdHlwZRICaHDqBScKA3JpZBIgNjYzOGNhZjIwMGQ0NDNiNjhmNjYwMDkwMDUxZjk4ZDXqHZtobWFrZRIA8AUB-gUECAAQAJAGAJgGALgGAMEGCdAo8D_QBpJC2gYWChAJERkBiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAfA2wTSBw0JES0BKwjaBwYBYvCcGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44nUh6CUYSVQT7w-usdbgCwfirp0d06yR3PCMQhJTw2E5WncAzCz8_a2MU2rm6F0HYYeDCHnS8RAVSr7JemlqK7b1ERhJYK3Qs_Q9VWgsbnHsP6CHosd_djNM1mH_CUY8hT4VISRABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=cf66325823bacacd70b58335ba6c432d6c4255f7&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XAN
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjMwMHgyNTA=&v=5&s=v31i473h808&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NDk4ODAzMzk0LCJhc3RfYiI6MTExMjIsInMiOiJyZWN0YW5nbGUxX2FkYjk0MDU3NGJjNDQ4MzhjYzhjN2ExNTRlNmUxMzY1In0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs0OTg4MDMzOTQifQ%3D%3D&cb=8824303&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pNd01IZ3lOVEE9Iiwid2QiOnsibyI6InhhbmRyIiwidyI6MzAwLCJoIjoyNTB9LCJ3ciI6Mn0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKQDOgQBgAAAwDWAAUBCJ2nrrUGEMP3k6ilwtGEehj2vpPq4pjpwlkqNgnD9Shcj8LVPxHD9Shcj8LVPxkAAAECCERAIREbACkRCcgxAAAAwMzM_D8wz67IATiYAkDyVkgCUMLF7O0BWOS1A2AAaO4CeMDbBIABAYoBA1VTRJIFBvBVmAGsAqAB-gGoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGKAlR1ZignYScsIDU1ODY4MDcsIDApO3VmKCdpJywgMTA0NTEwODQVFSxnJywgMTgyMTYzNDIVFTByJywgNDk4ODAzMzk0BRbwi5ICvQQhWW5PZTlnaUdwYXNaRU1MRjdPMEJHQUFnNUxVRE1BQTRBRUFBU1BKV1VNLXV5QUZZQUdDZUJtZ0FjQUI0QUlBQkNJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0JpcDRMRDVEQzFUX0JBWXFlQ3ctUXd0VV95UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FZenhfUVQxQVhzVXJqNllBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnallBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRGZnQTRGSGdBU096OTBPaUFUcHA5OE9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbXkyUUJhNkVaYWtGDSsYQThELXhCUREOPEFBd1FYRDlTaGNqOExWUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGMElrQzhBV1c2OWNJLUFYM190UUNnZ1lEVlZORWlBWUFrQVlCbUFZQW9RYhlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUl3X1VvWElfQzFULUlDQUNRQ0FBLpoCmQEhVUJidU5RaTZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TjBDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvQFAXcuLrICIDIxNjdDMjlCNEI5RjZEN0IyRTVCRDY1NTRBODY2Qzg02AIB4AK7zlTqAidodHRwczovL3d3dy5tc24uY29tLz9vY2lkPXdpc3ByJnBjPXU0NzeAAwCIAwGQA66EZZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjU3ODfaBAIIAeAEAfAEwsXs7QGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQCBt3QAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYBHzAAAPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHwNsE0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOJ1IeglGElUE-8PrrHW4AsH4q6dHdOskdzwjEISU8NhOVp3AMws_P2tjFNq5uhdB2GHgwh50vEQFUq-yXppaiu29REYSWCt0LP0PVVoLG5x7D-gh6LHf3YzTNZh_wlGPIU-FSEkQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=d8535515fffd067169029bbf626cf8d354eed471 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=690193593974239&correlator=3242437818539085&eid=31083341%2C31085800%2C31084507%2C31061691%2C31061693%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202407300101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D11f65a8e04c65a0c%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZ35rF4OO7lFb9jYCtF6ta7GzqNSQ&gpic=UID%3D00000e825459448b%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZFa-lTuYD19Ok3_rZle9UEElAp8w&cdm=www.msn.com&abxe=1&dt=1722520477753&adxs=804&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=srgg3meuo9wv&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&top=www.msn.com&rumc=690193593974239&rume=1&vis=1&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=46240&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1722520477672&idt=64&adks=4055936480&frm=23&eo_id_str=ID%3Def2b815864208f51%3AT%3D1722520452%3ART%3D1722520452%3AS%3DAA-AfjYO7LU-u_JfCdMG8cQGaIKn HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjMwMHgyNTA=&v=5&s=v31i473h808&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NDk4ODAzMzk0LCJhc3RfYiI6MTExMjIsInMiOiJyZWN0YW5nbGUxX2FkYjk0MDU3NGJjNDQ4MzhjYzhjN2ExNTRlNmUxMzY1In0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs0OTg4MDMzOTQifQ%3D%3D&cb=8824303&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pNd01IZ3lOVEE9Iiwid2QiOnsibyI6InhhbmRyIiwidyI6MzAwLCJoIjoyNTB9LCJ3ciI6Mn0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/17882431834250816647 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/15546979516877118415 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cx3zzn5OrZpeoHNOC1PIP4MKqiQPJhPWRePnmgu38ErHvyfLDQhABINjjiB1gyQagAeDQrL8CyAEGqAMBqgSVAk_QxPenT1FhbrHN2ZlEXXQjOFoHACMD1icjkZowGLG4WNzNpxFsnSkY_QRTZOuHhYKx_XJ16sV6jbUPo2SFTeZcEKDergUMgtEv90YE2e3HEc1JDhbjWATe2ff9zbqbxjV2dZmdwghvXTk8umn43-HfLZp7-GKR8ainl5eBGvnsq20TTpEhp-UArG4K3Kfm_UyAkjM4zszWdeQnHGY1HaiCN0l9XZKryoeYMOIxr28VAS-61osYP0ZPZOvknWu6wGonGs5wbvr1IqvV95AKFL67J8rEgiNlERMs0CFuYIZR-_BNzQazR54nlIpaDdx-5asIbagVQEbmBfdl9-GpVgI-eUdu0dKSbY607WE3LG_eN-TdQh7ABNvQpYneBOAEA4gFnvuewk-SBQYIAxABGAGSBQYIGxACGAGSBQsIIhADGAFI4oOnApIFBggdEAQYAZIFBggdEAEYAZIFBggeEAEYAZAGAaAGN4AHiK_TwAGoB9m2sQKoB9XJG6gHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAfIHChCb1yQY_fvUkQLSCCYIgOGAYBABGB0yAssCOgmAQIDAgICAoChIvf3BOli1tK7q-NOHA_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-u6vjThwMVUwFVCB1goSoxsBPO_9oYyBOsnvbkA9gTDdgUAdAVAZgWAYAXAbIXHgocCAASFHB1Yi01ODgwNDAxMDExNjgxNDgzGIOIGLIYCRIC7U4YNyIBAA&sigh=nj5Ud1HkZPQ&uach_m=%5BUACH%5D&ase=2&cid=CAQSOwDaQooLmJzquCqNaJy7SqMmE9xofezkfZlRaxO7GQBwnBl-Y1RvvIcyfNXWNMgy9V3ygeEYvQjZLxHCGAE&template_id=509&vt=10&nis=6 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQiMaiMiFCnYrgz28DJw0iGVfYNL5RyvK2iDukEBqgGs4imZkditic4GatGMsoeEHpcH9Ze HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKQDOgQBgAAAwDWAAUBCJ2nrrUGEMP3k6ilwtGEehj2vpPq4pjpwlkqNgnD9Shcj8LVPxHD9Shcj8LVPxkAAAECCERAIREbACkRCcgxAAAAwMzM_D8wz67IATiYAkDyVkgCUMLF7O0BWOS1A2AAaO4CeMDbBIABAYoBA1VTRJIFBvBVmAGsAqAB-gGoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGKAlR1ZignYScsIDU1ODY4MDcsIDApO3VmKCdpJywgMTA0NTEwODQVFSxnJywgMTgyMTYzNDIVFTByJywgNDk4ODAzMzk0BRbwi5ICvQQhWW5PZTlnaUdwYXNaRU1MRjdPMEJHQUFnNUxVRE1BQTRBRUFBU1BKV1VNLXV5QUZZQUdDZUJtZ0FjQUI0QUlBQkNJZ0JBSkFCQVpnQkFhQUJBYWdCQWJBQkFMa0JpcDRMRDVEQzFUX0JBWXFlQ3ctUXd0VV95UUVBQUFBQUFBRHdQOWtCQUFBBQ50OERfZ0FZenhfUVQxQVhzVXJqNllBZ0NnQWdHMUFnASMEQzkJCPBVREFBZ0RJQWdEUUFnallBZ0RnQWdEb0FnRDRBZ0NBQXdHWUF3RzZBd2xHVWtFeE9qVTNPRGZnQTRGSGdBU096OTBPaUFUcHA5OE9rQVFBbUFRQndRUUEBYgUBCE1rRQUIBQEIRFJCBQgoQUF3Q0ZBMkFRQTguLAA4SWdGbXkyUUJhNkVaYWtGDSsYQThELXhCUREOPEFBd1FYRDlTaGNqOExWUDguKAAEX1IuKAAIMlFVDTXARHdQLUFGMElrQzhBV1c2OWNJLUFYM190UUNnZ1lEVlZORWlBWUFrQVlCbUFZQW9RYhlgJDZnR0JMSUdKQWsNTAxBQUFCHdMEQmsBEgkBAEMdGOhMZ0dDdmdIaWRVSS1BZk41d2o0QjdqMUNJRUl3X1VvWElfQzFULUlDQUNRQ0FBLpoCmQEhVUJidU5RaTZBAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGM0TjBDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvQFAXcuLrICIDIxNjdDMjlCNEI5RjZEN0IyRTVCRDY1NTRBODY2Qzg02AIB4AK7zlTqAidodHRwczovL3d3dy5tc24uY29tLz9vY2lkPXdpc3ByJnBjPXU0NzeAAwCIAwGQA66EZZgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjU3ODfaBAIIAeAEAfAEwsXs7QGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQCBt3QAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYBHzAAAPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHwNsE0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOJ1IeglGElUE-8PrrHW4AsH4q6dHdOskdzwjEISU8NhOVp3AMws_P2tjFNq5uhdB2GHgwh50vEQFUq-yXppaiu29REYSWCt0LP0PVVoLG5x7D-gh6LHf3YzTNZh_wlGPIU-FSEkQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=d8535515fffd067169029bbf626cf8d354eed471 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /simgad/17882431834250816647 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /simgad/15546979516877118415 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/js/rum.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://d62514957e2f2b7b5f8d2796c2d1d4e3.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /pagead/js/rum.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYAyADKAMwnqeutQY4A0ADSAMQnqeutQYYAg..
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYBCAEKAQwvaeutQY4BEAESAQQvaeutQYYAw..
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473i7bf&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTIxNTc1MjE4LCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV9mZGRiNjU0M2E4N2I0MDcwZGYxZjNmNTMyNGI0NjBkYSJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzUyMTU3NTIxOCJ9&cb=8521882&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKhDughBwAAAwDWAAUBCL2nrrUGEKDLtM3I3YCrBxj2vpPq4pjpwlkqNgmfjscMVMbkPxGzctR2uGLiPxkAAAECDERAIbMNEgApESTIMQAAACCuR_U_MK7Mnw44mAJAnAVIAlCyttr4AVjktQNgAGjuAnim2QWAAQGKAQNVU0SSBQbwWJgB2AWgAVqoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTWKAml1ZignYScsIDc2MDI1MTIsIDApO3VmKCdpJywgOTc4NTMyNiwgMCk7ASgwZycsIDI0NjkyODk5LBEpAHMBFRw5NTY0ODQzOBUWLHInLCA1MjE1NzUyMQkW8IuSAqkFIUtZWHUxUWl2dE1BY0VMSzIydmdCR0FBZzVMVURNQUE0QUVBQVNKd0ZVSzdNbnc1WUFHQ2VCbWdBY0FCNEFJQUJBSWdCQUpBQkFaZ0JBYUFCQWFnQkFiQUJBTGtCdkRfSk9sbkc1RF9CQWJ3X3lUcFp4dVFfeVFFQUFBQUFBQUR3UDlrQkFBQQUOdDhEX2dBZTZmMVFUMUFjUXlKai1ZQWdDZ0FnRzFBZwEjBEM5CQjwaURBQWdESUFnRFFBZ0RZQWdEZ0FnRG9BZ0Q0QWdDQUF3R1lBd0dpQXc0SXE5bndOUkFCR0FJdEFBQ2dQNklERGdpcjJmQTFFQXNZQWkwQUFLQV91Z01KUmxKQk1UbzFOemd5NEFPQlIta0QBdgkBRER3QTk4VGdBU00xTVVOaUFTTwEIXGtBUUJtQVFCc2dRSkNLZUhVaEREbnRnTgUQDE9tNUwuEAAMSUhsRQ0QCHdRUQlXAQEITWtFAQcJARhEWUJBUHhCCQ0FAVxpQVdXTFpBRjhNdFRtQVcyLWZ5TUFha0YFHRxBQUE4RC14Qh1PCHdRVQEXGEFBQUQwUDgJKBxRSzJlNERfUi4oAAAyGSjAd1AtQUZtZnNEOEFXamtlTUwtQVhRZ3RBRGdnWURWVk5FaUFZRWtBWUJtQVlBb1FZQQFeBQEkS2dHQkxJR0pBawUPBQEEQkUFBwUBBEJrBQcFAQBDHRhoTGdHQ3ZnSGlkVUktQWZONXdqNEI3ajFDSUVJBSxgQUFBOUQtSUNBQ1FDQUEumgKZASFzeEQtcj6tAhBPUzFBeSHEBEF4ATUNAUg2Q1VaU1FURTZOVGM0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgdGAxIZ0FpLsEC8P13Li6yAiAyMTY3QzI5QjRCOUY2RDdCMkU1QkQ2NTU0QTg2NkM4NNgCAeACu85U6gInaHR0cHM6Ly93d3cubXNuLmNvbS8_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAMAmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEDwgAEAEY2AUgWigAMAA4ArgEAMAEj5e9IsgEANIEDTY2OCNGUkExOjU3ODLaBAIIAeAEAfAEsrba-AGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCaEvAQF42AUB4AUB8AXC0136BQQIABAAkAYAmAYAogYNMjgwIwliHDQ0ObgGAMEGATEBQSDQBtYB2gYWChAJERkBYBAAGADgBgHyBocBCPDLUxKAAWl4U1JVVnMhpdhEQUFrQ0JRRUloNUc1Q0JDdHpjb0JHTVNlN3dJZ0J5Z0FRTWZic0FaSXRMLWdDRkNCUjFqSktuLsMBEGo0VElFfWNMQ0lBUVNRQVFDYUFRSUlBS2dCQUwuIABgQS6ABwGIBwCgBwG6BwJAAcgHptkF0gcNCRGzAbEI2gcGAfjwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOORpIB1YC7ImtJaADHva22YZZbltwHe51FpOAblI0rM_lpcnkk5PN9SIrSbPny16L6bs1OSinQltqGgnoT9gVLFmGDA2KUMCir_KOdOV9SnvjXPZ-V8p6rRFnOQauAAxyqIr1p98QAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=d00ef9d2bd04902dcf57d0c1d97255712ec3babe HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798;
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v101.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473i7bf&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTIxNTc1MjE4LCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV9mZGRiNjU0M2E4N2I0MDcwZGYxZjNmNTMyNGI0NjBkYSJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzUyMTU3NTIxOCJ9&cb=8521882&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKhDughBwAAAwDWAAUBCL2nrrUGEKDLtM3I3YCrBxj2vpPq4pjpwlkqNgmfjscMVMbkPxGzctR2uGLiPxkAAAECDERAIbMNEgApESTIMQAAACCuR_U_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_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAMAmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEDwgAEAEY2AUgWigAMAA4ArgEAMAEj5e9IsgEANIEDTY2OCNGUkExOjU3ODLaBAIIAeAEAfAEsrba-AGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCaEvAQF42AUB4AUB8AXC0136BQQIABAAkAYAmAYAogYNMjgwIwliHDQ0ObgGAMEGATEBQSDQBtYB2gYWChAJERkBYBAAGADgBgHyBocBCPDLUxKAAWl4U1JVVnMhpdhEQUFrQ0JRRUloNUc1Q0JDdHpjb0JHTVNlN3dJZ0J5Z0FRTWZic0FaSXRMLWdDRkNCUjFqSktuLsMBEGo0VElFfWNMQ0lBUVNRQVFDYUFRSUlBS2dCQUwuIABgQS6ABwGIBwCgBwG6BwJAAcgHptkF0gcNCRGzAbEI2gcGAfjwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOORpIB1YC7ImtJaADHva22YZZbltwHe51FpOAblI0rM_lpcnkk5PN9SIrSbPny16L6bs1OSinQltqGgnoT9gVLFmGDA2KUMCir_KOdOV9SnvjXPZ-V8p6rRFnOQauAAxyqIr1p98QAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=d00ef9d2bd04902dcf57d0c1d97255712ec3babe HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v101.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N2224960.4901091MIQUS/B31291499.385791326;dc_ver=101.296;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=2018517514;ord=78s0rm;click=https%3A%2F%2Ffra1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfCBmwAAAAMAxBkFAQi9p661BhCgy7TNyN2AqwcY9r6T6uKY6cJZIK7Mnw4omAIwnAU4AkCyttr4AUjktQNQAFoDVVNEYgNVU0Ro2AVwWnjuAoABptkFiAEBkAEBmAEFoAECqQGfjscMVMbkP7EBs3LUdrhi4j-5AQAAAAAAAERAwQGzcgkUBMkBESgg2AEB4AEA8AEA%2Fs%3D5982924033b6fe9ec65675d69e46aa9068fd5f8c%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521sxD-rQivtMAcELK22vgBGOS1AyAAKAAxAAAAAAAAAAA6CUZSQTE6NTc4MkCBR0kAAAAAAADwP1EAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAAAAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw..%2Fcca%3DNjY4I0ZSQTE6NTc4Mg%3D%3D%2Fbn%3D93350%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=1,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477$0;xdt=0;crlt=Of(N_AIYtQ;gcsr=m;stc=1;chaa=1;sttr=1153;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /video/bannerstream/ANBannerstreamVideo.js HTTP/1.1Host: acdn.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..
Source: global traffic	HTTP traffic detected: GET /ab?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QLRtAHoUVoAAAMA1gAFAQi-p661BhCDzq_Clu7ovikY9r6T6uKY6cJZKjYJn3b4a7JG2T8Rn3b4a7JG2T8ZAAABAghEQCERGwApEQnAMQAAAMDMzPw_MM-uyAE4mAJArmFIuwNQAFjktQNgAGjuAnipiAaAAQGKAQNVU0SSAQEG9D4BmAGsAqAB-gGoAQGwAQC4AQPAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGyAiAyMTY3QzI5QjRCOUY2RDdCMkU1QkQ2NTU0QTg2NkM4NNgCAeACu85U6gInaHR0cHM6Ly93d3cubXNuLmNvbS8_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAMAmAMXoAMBqgMlGhMyOTg5NzI1NDM1MTIwMzE0MTE1KgNhbXg6CTU4ODA5NzkyMMAD4KgByAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQBsgQSCAUQBBisAiD6ASgBKAIwADgEuAQAwASNl70iyAQA2gQCCAHgBADwBACIBQGYBQCgBYTSiPzvy8KtJ8AFAMkFAAAAAAAA8D_SBQkJACGM8EwAAADYBQHgBQHqBRAKDGt2bXNmdF9tb2RlbBIA6gUnCgNyaWQSIDY2MzhjYWYyMDBkNDQzYjY4ZjY2MDA5MDA1MWY5OGQ16gUPCgtrdgU9DHllYXIBPFwWCgtwcm92aWRlcl9pZBIHN0hENjZGQ-odKwxtYWtlASsgCgoGZmxpZ2h0AQ1QDwoJcGFnZV90eXBlEgJocOoFEQoMBVqAcmVmcmVzaBIBMvAFiutU-gUECAAQAJAGAZgGALgGAMEGAc4gAADwP9oGFgoQCQ0ZAcAQABgA4AYE8gYCCACABwGIBwCSB8GtATw_eG1sIHZlcnNpb249IjEuMCI_PjxWQVNUGRVENC4wIj48QWQgaWQ9IjU4ODA5IcNEIj48V3JhcHBlcj48SW1wcmVzAUMsPjwhW0NEQVRBW2h0SUH0PgExeDEuYS1tby5uZXQvaGJ4L2hpbXA_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-PC9JfWLWbgNQcmNESWdwbk5YWTRabUpsZW5RMk1aWb5cT2dWdGIyNWxkRUlITXpJNE1qYzJOMG9INdaQVklMWVdGekxUUTNOVGswWW1SYURISjBZbmhmTUM0NExqRmZNbR0w8ElZb0JDR1ZqWWpVNU5HTXdvQUg2QWFnQnJBTEFBY2JmRWNnQkEtZ0JBZklCRHpZeU1UYzROak00TlRZeE5EWXdNNWdDN1I2cEFnQUF0BQEUc2dJTmNHOkID8FhlSUNCR0poYzJXYUF4TTJORFV3TnpRek1qRXlNelE0TURjeE56azRvZ01ZWWxkc2FtTnRPWHBpTWxvd1RGaEtkbUpxU1hWWk1qbDBxQU1LNEFQYXBBSHFBeIFyCE0xTwlAMHpORGc1Tnpnek1EUTCa_gIAS27KAgQwZ_6qAv6qAuqqAgBRQpQCHEFkU3lzdGVt2QAMWEJpZAUnGRvBVxxBZFRhZ1VSSRkp0SlAYmlkLmcuZG91YmxlY2xpY2vFMvBxZGJtL3Zhc3Q_ZGJtX2M9QUtBbWYtQVlKSHp0YlN3RXQ2WmVkSVBZbm5DWWhBTmlrd0JMQ2VtMEk1bWpGaGRLcUR6U0doVzBCVGdqclV1bTc0VXktYlVta09BT0YwbDJrS1pTYkU2RlJWd3RIQzk2WXcmAWkAZA1p9P0SQjF0RVd2bFBHcnROejhfM2d3Rl9tX1N6aFNUb056R0VSdVotRnVwRUQwWnJpLVM5bDU5dTZvdDVKWFNUdEJ4eF83bElvcnF2cF
Source: global traffic	HTTP traffic detected: GET /vast_track/v2?info=YwAAAAMArgAFAQm-k6tmAAAAABED50tocaN9KRm-k6tmAAAAACAAKAAwrmE4mAJAmdYCSJaNMVDPrsgBWIrrVGICVVNorAJw-gF4AIABAogBBZABrAKYAfoBoAEAqAEAsAEB&s=23851f8d95c8fbb0e64a1011689120cb3ef37b26&event_type=1 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`bbr#+38h]; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RIbpRzqF1`*bbr#+38h]; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..
Source: global traffic	HTTP traffic detected: GET /ab?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QLRtAHoUVoAAAMA1gAFAQi-p661BhCDzq_Clu7ovikY9r6T6uKY6cJZKjYJn3b4a7JG2T8Rn3b4a7JG2T8ZAAABAghEQCERGwApEQnAMQAAAMDMzPw_MM-uyAE4mAJArmFIuwNQAFjktQNgAGjuAnipiAaAAQGKAQNVU0SSAQEG9D4BmAGsAqAB-gGoAQGwAQC4AQPAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTGyAiAyMTY3QzI5QjRCOUY2RDdCMkU1QkQ2NTU0QTg2NkM4NNgCAeACu85U6gInaHR0cHM6Ly93d3cubXNuLmNvbS8_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAMAmAMXoAMBqgMlGhMyOTg5NzI1NDM1MTIwMzE0MTE1KgNhbXg6CTU4ODA5NzkyMMAD4KgByAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQBsgQSCAUQBBisAiD6ASgBKAIwADgEuAQAwASNl70iyAQA2gQCCAHgBADwBACIBQGYBQCgBYTSiPzvy8KtJ8AFAMkFAAAAAAAA8D_SBQkJACGM8EwAAADYBQHgBQHqBRAKDGt2bXNmdF9tb2RlbBIA6gUnCgNyaWQSIDY2MzhjYWYyMDBkNDQzYjY4ZjY2MDA5MDA1MWY5OGQ16gUPCgtrdgU9DHllYXIBPFwWCgtwcm92aWRlcl9pZBIHN0hENjZGQ-odKwxtYWtlASsgCgoGZmxpZ2h0AQ1QDwoJcGFnZV90eXBlEgJocOoFEQoMBVqAcmVmcmVzaBIBMvAFiutU-gUECAAQAJAGAZgGALgGAMEGAc4gAADwP9oGFgoQCQ0ZAcAQABgA4AYE8gYCCACABwGIBwCSB8GtATw_eG1sIHZlcnNpb249IjEuMCI_PjxWQVNUGRVENC4wIj48QWQgaWQ9IjU4ODA5IcNEIj48V3JhcHBlcj48SW1wcmVzAUMsPjwhW0NEQVRBW2h0SUH0PgExeDEuYS1tby5uZXQvaGJ4L2hpbXA_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-PC9JfWLWbgNQcmNESWdwbk5YWTRabUpsZW5RMk1aWb5cT2dWdGIyNWxkRUlITXpJNE1qYzJOMG9INdaQVklMWVdGekxUUTNOVGswWW1SYURISjBZbmhmTUM0NExqRmZNbR0w8ElZb0JDR1ZqWWpVNU5HTXdvQUg2QWFnQnJBTEFBY2JmRWNnQkEtZ0JBZklCRHpZeU1UYzROak00TlRZeE5EWXdNNWdDN1I2cEFnQUF0BQEUc2dJTmNHOkID8FhlSUNCR0poYzJXYUF4TTJORFV3TnpRek1qRXlNelE0TURjeE56azRvZ01ZWWxkc2FtTnRPWHBpTWxvd1RGaEtkbUpxU1hWWk1qbDBxQU1LNEFQYXBBSHFBeIFyCE0xTwlAMHpORGc1Tnpnek1EUTCa_gIAS27KAgQwZ_6qAv6qAuqqAgBRQpQCHEFkU3lzdGVt2QAMWEJpZAUnGRvBVxxBZFRhZ1VSSRkp0SlAYmlkLmcuZG91YmxlY2xpY2vFMvBxZGJtL3Zhc3Q_ZGJtX2M9QUtBbWYtQVlKSHp0YlN3RXQ2WmVkSVBZbm5DWWhBTmlrd0JMQ2VtMEk1bWpGaGRLcUR6U0doVzBCVGdqclV1bTc0VXktYlVta09BT0YwbDJrS1pTYkU2RlJWd3RIQzk2WXcmAWkAZA1p9P0SQjF0RVd2bFBHcnROejhfM2d3Rl9tX1N6aFNUb056R0VSdVotRnVwRUQwWnJpLVM5bDU5dTZvdDVKWFNUdEJ4eF83bElvcnF2cF
Source: global traffic	HTTP traffic detected: GET /vast_track/v2?info=YwAAAAMArgAFAQm-k6tmAAAAABED50tocaN9KRm-k6tmAAAAACAAKAAwrmE4mAJAmdYCSJaNMVDPrsgBWIrrVGICVVNorAJw-gF4AIABAogBBZABrAKYAfoBoAEAqAEAsAEB&s=23851f8d95c8fbb0e64a1011689120cb3ef37b26&event_type=1 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:-FnzFw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=5Er83
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N2224960.4901091MIQUS/B31291499.385791326;dc_ver=101.296;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=2018517514;ord=78s0rm;click=https%3A%2F%2Ffra1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfCBmwAAAAMAxBkFAQi9p661BhCgy7TNyN2AqwcY9r6T6uKY6cJZIK7Mnw4omAIwnAU4AkCyttr4AUjktQNQAFoDVVNEYgNVU0Ro2AVwWnjuAoABptkFiAEBkAEBmAEFoAECqQGfjscMVMbkP7EBs3LUdrhi4j-5AQAAAAAAAERAwQGzcgkUBMkBESgg2AEB4AEA8AEA%2Fs%3D5982924033b6fe9ec65675d69e46aa9068fd5f8c%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521sxD-rQivtMAcELK22vgBGOS1AyAAKAAxAAAAAAAAAAA6CUZSQTE6NTc4MkCBR0kAAAAAAADwP1EAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAAAAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw..%2Fcca%3DNjY4I0ZSQTE6NTc4Mg%3D%3D%2Fbn%3D93350%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=1,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477$0;xdt=0;crlt=Of(N_AIYtQ;gcsr=m;stc=1;chaa=1;sttr=1153;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:-FnzFw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=5Er83
Source: global traffic	HTTP traffic detected: GET /dbm/vast?dbm_c=AKAmf-AYJHztbSwEt6ZedIPYnnCYhANikwBLCem0I5mjFhdKqDzSGhW0BTgjrUum74Uy-bUmkOAOF0l2kKZSbE6FRVwtHC96Yw&dbm_d=AKAmf-B1tEWvlPGrtNz8_3gwF_m_SzhSToNzGERuZ-FupED0Zri-S9l59u6ot5JXSTtBxx_7lIorqvpTzyJhp-SnjKGqlv9M3RKU_lx7Xxl4krkgxsPZ8T_h-oMuznA-hIPZSJMxsS-pHxBjrMUNmQ33os3cfp4oNibQeuh9oJ6JgEO6lwiyaroz5geHnK4ARHj1p23-eqEKGOdo2KMBMkzI-4TSz5hIfr44ACP4LqF0wbMnBmh5rMjJFB01Ve4GZ2HwtyfpWcS5I2QFubBq16yLEow9XdcVThAUaC4dwonFxxkBt7ITsfm9-McpXneCQ8w12ArZmbzCnVZpVibSQfJMwhccbOqw9MrBtc3Y8j7EDJ0yiMbCm7lqqHI98L8WC5gB2IWNQYuETFN817VGbjAK4nu_rCbb28NmS7Akib9bgEzJV6EBw5G1FyVSDehEzjzlG3aR6oeHsazdii5Iz4S5jBhB2AZVXUcUJ24WoEmFrDS9JuphkLhbJLEDFYqAPSoi6qLwMZ3xDELhn0bdXJKprCqJ0ebIbsRwB8YzgYBk3JcvoozHh6U0eHF75ZAGQDyfQLtsVPN4Fjmek5jOcORe68dw69e0KtG0poBIOHYVFMLP8AGJ7JnmTtlTK04rscTQITDxriU0AwaQG-535TRzBXW7GZf0D5IVtckdwaDKbUCTN0W0i6d4SBi6Q5fBoB1mfFKGF7kS0zTsKsMOZPES3Lt9vp43yrO-qKp52yFYKMtAc2np6aop00k5MAdfAOdnnFW9PcpwqU_2nrYcWqoWj9HeBUEmqEodOkIRpQaL0vyBa-0mVBYGgCVTGybn5ebA6mwBVS6ELC3Bhxq5nF2NUTKps1iBa51vwDJzUL5CD87o9F6XXaFbY8gc6ydACKlpxT4RE4Hhugu6F4Z7WAL9KCLNCQ_ItFQCTyDK9DNNzKDGZjupIAFtO4c8rie7-ynxdW2qZJf7-hNcE6KApXuAgNLkmMGuYZhVzfSw2c7wo16Pallj_I1-6hhXkqfF3kQnEXFC-esdCggGvwvXLPmjysp4hyFrL9MzpKonWjtCuZ5Q9AUCQPyEsILP-rZXoZKZT40ewBQRQM6HWcL5btxryQXG4eqy1LpoVQ4dXBrnnA9bo7aJCcqA-Ixq7_UYJaue87LkIFGTBvovjm7nWN4E-qs2tQzXr9qtE2aexR8i9UyYbM617KLxBIy_IxIwYPhATk30j--EyrUwwQUrcqzjaH1sMoKoS0kU0_GK4g2h04_PLY8Cd3R1jnM-ZoUb9cTs1Whge5IxQheX21bI7AxLdBJIb-X_Cgi-btrClYUDExcwSXojMw7r0BC-NsWO2od-PqcZ7TeENCuPHc_qp6njf_Rk9SGALLegdgGeXM9QQOUpQ6moKBFevcLKv1H04FX6rLNh430rLkFl2R88ti-M-3lMirtkglMmXi-gH_qYAiKUd2nZGWOOg_k5BXMgA_N_7nl0Zl_ENJMyqlQrbMiD4j1KvZzfOIUSj_HuJhHWBTU5_LlraXLaGXbUS7sF2FWhUHe9zxb98Mx-cUnknDCImzj18i0pD7mjWgOoDDRxX9O9maoLEH8PhTEAUmAWyfjc5Sr_EYCbjqb0EmGnb8Gb4HfnFA37NRQN2Yj77_hF9Oogu6SkbvBep57evXBy6a46a7oOWhIiwBmHuzH5dPyFQXVFtLVUkYQEV25IogJl-2ioil97QTOEbV8K5MzmHRqpbzARHpREIYhF-rbBabrhXTJWsRwMKnXBOw1y8MYWyFsctiTepRF4R9imcz7632jkzbOAjG8dGAEIAcumGl4r53oa0v5X41ItXrlHEDFykHapQzZenE1ygTp476muB52WHjATJ2rhzcBoAN8DEOFAZ40_t0Q0HllG4TzrEov8a1YMWM6RD-sq_EiH2wFl1S5JN6_r3oXSZWmluNEj0IKTTGdX4PGmaKN1deBasRPRyQBVXZjwTPqMm9oRYSH1HzMk8XabxkYRFeyihQQAEiWVWdxBLnfu2pvD-LwI_E-tFUXcfMIo91btKbCfiJYHMbBx7xrTm8MM2NVAR1T7iz3KJdcE93KHMdEEueKgaRdRqv4Q1PKV3UMi2brT0y-rxsrmKoRTUJklQe0mjmPhndM9PPhDM5QphoPwAf5sm1SP6MgeBxgfKm6XUPYBySYRmvZZwtAaegTYZNUYdP9GQ0iZ4SEUSaqcs8X9zjZVlyK2yVv0PXWSA_ZconbKsNfiNsMlBVzU26CJ8JkzbQWriP0PQSyyJwlr-snofv9fGUMwnMHLv38bjue94AU54g6RmKyUYbd9udgVH5gmAoqSrPGkEBBuvOS7P_2cMZ1c-WNt-Dk0duQxP9UI_7bDH2Hm8aNEW46i5muWVhWqYGEC5B3USyqujW9rHOaEThTmr0GT6ytMAvJNMI42rOQjnLmZMxfOJA4uqhEGdOxPAgSE6qooacb9wAUesqTFRRCAcARQUQI58t52qmtt0bEgfvX-v57IunPXGszWzTFowuQ-XJd9sZEaiRm3TZnFfxrwysMK4qqlaHF_M7wFNuP3nTxfLi-1DoViKPN1izQpuxI-MVse4tjtV1lIX-kYD3Yf2wmOLDYlk9EkgGAJ-zH8Il4DvX7Ssq4qa3FM1iMponlGD-JzDqsazNdW9lDxRGIqHHAkwOCKXLtIOZ0RXt7VBn_3QhGWk10vBYcJdPvLUXYSdoQrc-KsLJ9BGFDNBZfAW9mP5gv8IrcHra0IQyRFMoVtqcD13Nadokk2tnG94-hI-cEhB8NaroQl1XZOAbDFznU0yOMpLiWetdkKBvXlXk_LhNduVHf5IOMEYBxcTYLExgPclCshKiYybM1i8rvhbpk3-datixfDZr4-ird
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:-FnzFw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=5Er83
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QLdEejdCAAAAwDWAAUBCL2nrrUGEKDLtM3I3YCrBxj2vpPq4pjpwlkqNgmfjscMVMbkPxGzctR2uGLiPxkAAAECDERAIbMNEgApESTIMQAAACCuR_U_MK7Mnw44mAJAnAVIAlCyttr4AVjktQNgAGjuAnim2QWAAQGKAQNVU0SSBQbwWJgB2AWgAVqoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlNU05VU0VOMTWKAml1ZignYScsIDc2MDI1MTIsIDApO3VmKCdpJywgOTc4NTMyNiwgMCk7ASgwZycsIDI0NjkyODk5LBEpAHMBFRw5NTY0ODQzOBUWLHInLCA1MjE1NzUyMQkW8IuSAqkFIUtZWHUxUWl2dE1BY0VMSzIydmdCR0FBZzVMVURNQUE0QUVBQVNKd0ZVSzdNbnc1WUFHQ2VCbWdBY0FCNEFJQUJBSWdCQUpBQkFaZ0JBYUFCQWFnQkFiQUJBTGtCdkRfSk9sbkc1RF9CQWJ3X3lUcFp4dVFfeVFFQUFBQUFBQUR3UDlrQkFBQQUOdDhEX2dBZTZmMVFUMUFjUXlKai1ZQWdDZ0FnRzFBZwEjBEM5CQjwaURBQWdESUFnRFFBZ0RZQWdEZ0FnRG9BZ0Q0QWdDQUF3R1lBd0dpQXc0SXE5bndOUkFCR0FJdEFBQ2dQNklERGdpcjJmQTFFQXNZQWkwQUFLQV91Z01KUmxKQk1UbzFOemd5NEFPQlIta0QBdgkBRER3QTk4VGdBU00xTVVOaUFTTwEIXGtBUUJtQVFCc2dRSkNLZUhVaEREbnRnTgUQDE9tNUwuEAAMSUhsRQ0QCHdRUQlXAQEITWtFAQcJARhEWUJBUHhCCQ0FAVxpQVdXTFpBRjhNdFRtQVcyLWZ5TUFha0YFHRxBQUE4RC14Qh1PCHdRVQEXGEFBQUQwUDgJKBxRSzJlNERfUi4oAAAyGSjAd1AtQUZtZnNEOEFXamtlTUwtQVhRZ3RBRGdnWURWVk5FaUFZRWtBWUJtQVlBb1FZQQFeBQEkS2dHQkxJR0pBawUPBQEEQkUFBwUBBEJrBQcFAQBDHRhoTGdHQ3ZnSGlkVUktQWZONXdqNEI3ajFDSUVJBSxgQUFBOUQtSUNBQ1FDQUEumgKZASFzeEQtcj6tAhBPUzFBeSHEBEF4ATUNAUg2Q1VaU1FURTZOVGM0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgdGAxIZ0FpLsEC8Hl3Li6yAiAyMTY3QzI5QjRCOUY2RDdCMkU1QkQ2NTU0QTg2NkM4NNgCAeACu85U6gInaHR0cHM6Ly93d3cubXNuLmNvbS8_b2NpZD13aXNwciZwYz11NDc38gIRCgZBRFZfSUQSBzc2MDI1MTLyAhIKBkNQR19JRBIIMm35LPICEgoFQ1BfSUQSCXX4PPICDQoIQURWX0ZSRVESATAFEBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8IQ1BHFQ8QCwoHQ1AVDhAQCgVJTwFhAAeNggDyASEESU8VITgTCg9DVVNUT01fTU9ERUwBKxQA8gIaChYyFgAcTEVBRl9OQU0FcQgeCho2HQAIQVNUAT4QSUZJRUQBPhwVCghTUExJVAFNGdnwfYADAIgDAZADAJgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBAGyBA8IABABGNgFIFooADAAOAK4BADABI-XvSLIBADSBA02NjgjRlJBMTo1Nzgy2gQCCAHgBAHwBKXvIIgFAZgFAKAF_xEBFAHABQDJBcE6HAAA8D_SBQkJCQxkAADYBQHgBQHqBQ8KC2t2bXNmdF95ZWFyEgABEsgJcGFnZV90eXBlEgJocOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPqBQoKBmZsaWdodBIFOBFKDG1ha2UBSggRCgwFWjhyZWZyZXNoEgEy6gUQCgwNcBBtb2RlbAEn8E8nCgNyaWQSIDY2MzhjYWYyMDBkNDQzYjY4ZjY2MDA5MDA1MWY5OGQ18AXC0136BQQIABAAkAYAmAYAogYNMjgwI0ZSQTE6NTQ0ObgGAMEGAAXjKPA_0AbWAdoGFgoQBRAdAWAQABgA4AYB8gaHAQjwy1MSgAFpeFNSVVZzYWnYREFBa0NCUUVJaDVHNUNCQ3R6Y29CR01TZTd3SWdCeWdBUU1mYnNBWkl0TC1nQ0ZDQlIxakpLbi6HAxBqNFRJRb0nTENJQVFTUUFRQ2FBUUlJQUtnQkFMLiAAXEEugAcBiAcAoAcBugcCQAHIB6bZBdIHDTWsAbEM2gcGCAUJ8JrgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ45GkgHVgLsia0loAMe9rbZhlluW3Ad7nUWk4BuUjSsz-WlyeSTk831IitJs-fLXovpuzU5KKdCW2oaCehP2BUsWYYMDYpQwKKv8o505X1Ke-Nc9n5XynqtEWc5Bq4ADHKoivWn3xABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=9637b40db0a3886b4d6beecef9cf5970687eee93&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrom
Source: global traffic	HTTP traffic detected: GET /dbm/vast?dbm_c=AKAmf-AYJHztbSwEt6ZedIPYnnCYhANikwBLCem0I5mjFhdKqDzSGhW0BTgjrUum74Uy-bUmkOAOF0l2kKZSbE6FRVwtHC96Yw&dbm_d=AKAmf-B1tEWvlPGrtNz8_3gwF_m_SzhSToNzGERuZ-FupED0Zri-S9l59u6ot5JXSTtBxx_7lIorqvpTzyJhp-SnjKGqlv9M3RKU_lx7Xxl4krkgxsPZ8T_h-oMuznA-hIPZSJMxsS-pHxBjrMUNmQ33os3cfp4oNibQeuh9oJ6JgEO6lwiyaroz5geHnK4ARHj1p23-eqEKGOdo2KMBMkzI-4TSz5hIfr44ACP4LqF0wbMnBmh5rMjJFB01Ve4GZ2HwtyfpWcS5I2QFubBq16yLEow9XdcVThAUaC4dwonFxxkBt7ITsfm9-McpXneCQ8w12ArZmbzCnVZpVibSQfJMwhccbOqw9MrBtc3Y8j7EDJ0yiMbCm7lqqHI98L8WC5gB2IWNQYuETFN817VGbjAK4nu_rCbb28NmS7Akib9bgEzJV6EBw5G1FyVSDehEzjzlG3aR6oeHsazdii5Iz4S5jBhB2AZVXUcUJ24WoEmFrDS9JuphkLhbJLEDFYqAPSoi6qLwMZ3xDELhn0bdXJKprCqJ0ebIbsRwB8YzgYBk3JcvoozHh6U0eHF75ZAGQDyfQLtsVPN4Fjmek5jOcORe68dw69e0KtG0poBIOHYVFMLP8AGJ7JnmTtlTK04rscTQITDxriU0AwaQG-535TRzBXW7GZf0D5IVtckdwaDKbUCTN0W0i6d4SBi6Q5fBoB1mfFKGF7kS0zTsKsMOZPES3Lt9vp43yrO-qKp52yFYKMtAc2np6aop00k5MAdfAOdnnFW9PcpwqU_2nrYcWqoWj9HeBUEmqEodOkIRpQaL0vyBa-0mVBYGgCVTGybn5ebA6mwBVS6ELC3Bhxq5nF2NUTKps1iBa51vwDJzUL5CD87o9F6XXaFbY8gc6ydACKlpxT4RE4Hhugu6F4Z7WAL9KCLNCQ_ItFQCTyDK9DNNzKDGZjupIAFtO4c8rie7-ynxdW2qZJf7-hNcE6KApXuAgNLkmMGuYZhVzfSw2c7wo16Pallj_I1-6hhXkqfF3kQnEXFC-esdCggGvwvXLPmjysp4hyFrL9MzpKonWjtCuZ5Q9AUCQPyEsILP-rZXoZKZT40ewBQRQM6HWcL5btxryQXG4eqy1LpoVQ4dXBrnnA9bo7aJCcqA-Ixq7_UYJaue87LkIFGTBvovjm7nWN4E-qs2tQzXr9qtE2aexR8i9UyYbM617KLxBIy_IxIwYPhATk30j--EyrUwwQUrcqzjaH1sMoKoS0kU0_GK4g2h04_PLY8Cd3R1jnM-ZoUb9cTs1Whge5IxQheX21bI7AxLdBJIb-X_Cgi-btrClYUDExcwSXojMw7r0BC-NsWO2od-PqcZ7TeENCuPHc_qp6njf_Rk9SGALLegdgGeXM9QQOUpQ6moKBFevcLKv1H04FX6rLNh430rLkFl2R88ti-M-3lMirtkglMmXi-gH_qYAiKUd2nZGWOOg_k5BXMgA_N_7nl0Zl_ENJMyqlQrbMiD4j1KvZzfOIUSj_HuJhHWBTU5_LlraXLaGXbUS7sF2FWhUHe9zxb98Mx-cUnknDCImzj18i0pD7mjWgOoDDRxX9O9maoLEH8PhTEAUmAWyfjc5Sr_EYCbjqb0EmGnb8Gb4HfnFA37NRQN2Yj77_hF9Oogu6SkbvBep57evXBy6a46a7oOWhIiwBmHuzH5dPyFQXVFtLVUkYQEV25IogJl-2ioil97QTOEbV8K5MzmHRqpbzARHpREIYhF-rbBabrhXTJWsRwMKnXBOw1y8MYWyFsctiTepRF4R9imcz7632jkzbOAjG8dGAEIAcumGl4r53oa0v5X41ItXrlHEDFykHapQzZenE1ygTp476muB52WHjATJ2rhzcBoAN8DEOFAZ40_t0Q0HllG4TzrEov8a1YMWM6RD-sq_EiH2wFl1S5JN6_r3oXSZWmluNEj0IKTTGdX4PGmaKN1deBasRPRyQBVXZjwTPqMm9oRYSH1HzMk8XabxkYRFeyihQQAEiWVWdxBLnfu2pvD-LwI_E-tFUXcfMIo91btKbCfiJYHMbBx7xrTm8MM2NVAR1T7iz3KJdcE93KHMdEEueKgaRdRqv4Q1PKV3UMi2brT0y-rxsrmKoRTUJklQe0mjmPhndM9PPhDM5QphoPwAf5sm1SP6MgeBxgfKm6XUPYBySYRmvZZwtAaegTYZNUYdP9GQ0iZ4SEUSaqcs8X9zjZVlyK2yVv0PXWSA_ZconbKsNfiNsMlBVzU26CJ8JkzbQWriP0PQSyyJwlr-snofv9fGUMwnMHLv38bjue94AU54g6RmKyUYbd9udgVH5gmAoqSrPGkEBBuvOS7P_2cMZ1c-WNt-Dk0duQxP9UI_7bDH2Hm8aNEW46i5muWVhWqYGEC5B3USyqujW9rHOaEThTmr0GT6ytMAvJNMI42rOQjnLmZMxfOJA4uqhEGdOxPAgSE6qooacb9wAUesqTFRRCAcARQUQI58t52qmtt0bEgfvX-v57IunPXGszWzTFowuQ-XJd9sZEaiRm3TZnFfxrwysMK4qqlaHF_M7wFNuP3nTxfLi-1DoViKPN1izQpuxI-MVse4tjtV1lIX-kYD3Yf2wmOLDYlk9EkgGAJ-zH8Il4DvX7Ssq4qa3FM1iMponlGD-JzDqsazNdW9lDxRGIqHHAkwOCKXLtIOZ0RXt7VBn_3QhGWk10vBYcJdPvLUXYSdoQrc-KsLJ9BGFDNBZfAW9mP5gv8IrcHra0IQyRFMoVtqcD13Nadokk2tnG94-hI-cEhB8NaroQl1XZOAbDFznU0yOMpLiWetdkKBvXlXk_LhNduVHf5IOMEYBxcTYLExgPclCshKiYybM1i8rvhbpk3-datixfDZr4-ird
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/index.html?ev=01_252 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssDTpGM4cFXyO6kWnxKFjTa3BRChUDAcZTam5BA8f0RvQwm_xz3MARRoRlRnBTuyWfynjtuU27LelTVvyqTytobIJ3JjU5NgHgNBZ91nG3w9Apt7pmin2N-AkfyEODzO-aiAHwQbSjELbFUBebT6Oh7i9otzzSG4AGF9MZv6s7Zw07DoZ4GMr6sXOMJitcmYdYS&sai=AMfl-YRbVnWMO7LSrjyPuGvskIef6kGQkDhF3IMkShb1nCC_O_n1BPdCj3bjuYPHk0XU_nrN4KF3BgcOEBWiAcAfSikIWflqcJcwju-d_A&sig=Cg0ArKJSzJY9976pWdTjEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1227&cbvp=1&cstd=1222&cisv=r20240729.21937&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-navigation-source;triggerReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QLdEejdCAAAAwDWAAUBCL2nrrUGEKDLtM3I3YCrBxj2vpPq4pjpwlkqNgmfjscMVMbkPxGzctR2uGLiPxkAAAECDERAIbMNEgApESTIMQAAACCuR_U_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_b2NpZD13aXNwciZwYz11NDc38gIRCgZBRFZfSUQSBzc2MDI1MTLyAhIKBkNQR19JRBIIMm35LPICEgoFQ1BfSUQSCXX4PPICDQoIQURWX0ZSRVESATAFEBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8IQ1BHFQ8QCwoHQ1AVDhAQCgVJTwFhAAeNggDyASEESU8VITgTCg9DVVNUT01fTU9ERUwBKxQA8gIaChYyFgAcTEVBRl9OQU0FcQgeCho2HQAIQVNUAT4QSUZJRUQBPhwVCghTUExJVAFNGdnwfYADAIgDAZADAJgDF6ADAaoDAMAD2ATIAwDYA6YF4AMA6AMA-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBAGyBA8IABABGNgFIFooADAAOAK4BADABI-XvSLIBADSBA02NjgjRlJBMTo1Nzgy2gQCCAHgBAHwBKXvIIgFAZgFAKAF_xEBFAHABQDJBcE6HAAA8D_SBQkJCQxkAADYBQHgBQHqBQ8KC2t2bXNmdF95ZWFyEgABEsgJcGFnZV90eXBlEgJocOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPqBQoKBmZsaWdodBIFOBFKDG1ha2UBSggRCgwFWjhyZWZyZXNoEgEy6gUQCgwNcBBtb2RlbAEn8E8nCgNyaWQSIDY2MzhjYWYyMDBkNDQzYjY4ZjY2MDA5MDA1MWY5OGQ18AXC0136BQQIABAAkAYAmAYAogYNMjgwI0ZSQTE6NTQ0ObgGAMEGAAXjKPA_0AbWAdoGFgoQBRAdAWAQABgA4AYB8gaHAQjwy1MSgAFpeFNSVVZzYWnYREFBa0NCUUVJaDVHNUNCQ3R6Y29CR01TZTd3SWdCeWdBUU1mYnNBWkl0TC1nQ0ZDQlIxakpLbi6HAxBqNFRJRb0nTENJQVFTUUFRQ2FBUUlJQUtnQkFMLiAAXEEugAcBiAcAoAcBugcCQAHIB6bZBdIHDTWsAbEM2gcGCAUJ8JrgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ45GkgHVgLsia0loAMe9rbZhlluW3Ad7nUWk4BuUjSsz-WlyeSTk831IitJs-fLXovpuzU5KKdCW2oaCehP2BUsWYYMDYpQwKKv8o505X1Ke-Nc9n5XynqtEWc5Bq4ADHKoivWn3xABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=9637b40db0a3886b4d6beecef9cf5970687eee93&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477& HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssDTpGM4cFXyO6kWnxKFjTa3BRChUDAcZTam5BA8f0RvQwm_xz3MARRoRlRnBTuyWfynjtuU27LelTVvyqTytobIJ3JjU5NgHgNBZ91nG3w9Apt7pmin2N-AkfyEODzO-aiAHwQbSjELbFUBebT6Oh7i9otzzSG4AGF9MZv6s7Zw07DoZ4GMr6sXOMJitcmYdYS&sai=AMfl-YRbVnWMO7LSrjyPuGvskIef6kGQkDhF3IMkShb1nCC_O_n1BPdCj3bjuYPHk0XU_nrN4KF3BgcOEBWiAcAfSikIWflqcJcwju-d_A&sig=Cg0ArKJSzJY9976pWdTjEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1227&cbvp=1&cstd=1222&cisv=r20240729.21937&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/17404d89c3501750cc508c0e8819ca71.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/omsdkvideo/245/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/17404d89c3501750cc508c0e8819ca71.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/5f7408c69cb83d06290eb2d43d27cfa1.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/01ba429c2b89114bbd282046b7e0b86d.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/eba93e447f606538329dafb58ea0ad7c.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/5f7408c69cb83d06290eb2d43d27cfa1.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/eba93e447f606538329dafb58ea0ad7c.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/01ba429c2b89114bbd282046b7e0b86d.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/1.0/rv?t=error_vast2_901&ts=2DAABBgABAAECAAIBAAsAAgAAAfscGAp6N1BzRFF2Q1p5HBaXxeXClv719_0BFuv8gvTz5cL0mQEAHBbX67Wy9r7M7yMWm6-AwLHD7tjhAQAW_M7c6gwVBkwVAhgZQUxXQVlTX0ZFRVNfVklBX01MX05PTl9PQhgKZ2xvYmFsX2NhcAA5DAAsHBUCABwVAgAcFQIAHBUCAAAcJoa04JUEFQYVBib-s-CVBBb4s-CVBBEVAhUEpuQGFuQGFuQGFkoWShZKFkoW2ggW5AYW5AYAHBwsFoCxiqS77IOtKhbrsrXZ5-KA56UBAAAWvNmYgAQWnuWigAQW7OKvggQW1u6pgAQVGBwU9AMU2AQAFQQm2ggW2ggW5ggRNQ4m5gg0BAAsLBbf1cWez42x9LEBFoeIyIu06pzMlAEAFvzO3OoMBii82ZiABBae5aKABBbW7qmABBbs4q-CBBgJNTg4MDk3OTIwFo4dFuYIJQQW8AEYBzU2MjcxMzQVAqEoAk9YDHoUARQBACgFdmlkZW8AHDUGGA1PWC1YUFQtMzY3NXgyFhRcLBaAsYqku-yDrSoW67K12efigOelAQAAFuCF7JYEFt6F7JYEAByWDBd7FK5H4XqEPwC8GwGIHk1MX0ZFRV9PUFRJTUlaRVJfSU5TVEFOQ0VfVFlQRQVvdGhlcgCsOA1wZWFjb2NrdHYuY29tAAAA HTTP/1.1Host: monetengine-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vast_track/v2?info=YwAAAAMArgAFAQm-k6tmAAAAABED50tocaN9KRm-k6tmAAAAACAAKAAwrmE4mAJAmdYCSJaNMVDPrsgBWIrrVGICVVNorAJw-gF4AIABAogBBZABrAKYAfoBoAEAqAEAsAEB&s=23851f8d95c8fbb0e64a1011689120cb3ef37b26&event_type=4&error_code=901 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssDTpGM4cFXyO6kWnxKFjTa3BRChUDAcZTam5BA8f0RvQwm_xz3MARRoRlRnBTuyWfynjtuU27LelTVvyqTytobIJ3JjU5NgHgNBZ91nG3w9Apt7pmin2N-AkfyEODzO-aiAHwQbSjELbFUBebT6Oh7i9otzzSG4AGF9MZv6s7Zw07DoZ4GMr6sXOMJitcmYdYS&sai=AMfl-YRbVnWMO7LSrjyPuGvskIef6kGQkDhF3IMkShb1nCC_O_n1BPdCj3bjuYPHk0XU_nrN4KF3BgcOEBWiAcAfSikIWflqcJcwju-d_A&sig=Cg0ArKJSzJY9976pWdTjEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5507&vt=11&dtpt=4280&dett=3&cstd=1222&cisv=r20240729.21937&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, event-source;triggerReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/ba86ece03f6c92b7ba99211957648318.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/8600198dcde7c816c2b97c139b2fa6a1.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/6112670057830094987/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/1.0/rv?t=error_vast2_901&ts=2DAABBgABAAECAAIBAAsAAgAAAfscGAp6N1BzRFF2Q1p5HBaXxeXClv719_0BFuv8gvTz5cL0mQEAHBbX67Wy9r7M7yMWm6-AwLHD7tjhAQAW_M7c6gwVBkwVAhgZQUxXQVlTX0ZFRVNfVklBX01MX05PTl9PQhgKZ2xvYmFsX2NhcAA5DAAsHBUCABwVAgAcFQIAHBUCAAAcJoa04JUEFQYVBib-s-CVBBb4s-CVBBEVAhUEpuQGFuQGFuQGFkoWShZKFkoW2ggW5AYW5AYAHBwsFoCxiqS77IOtKhbrsrXZ5-KA56UBAAAWvNmYgAQWnuWigAQW7OKvggQW1u6pgAQVGBwU9AMU2AQAFQQm2ggW2ggW5ggRNQ4m5gg0BAAsLBbf1cWez42x9LEBFoeIyIu06pzMlAEAFvzO3OoMBii82ZiABBae5aKABBbW7qmABBbs4q-CBBgJNTg4MDk3OTIwFo4dFuYIJQQW8AEYBzU2MjcxMzQVAqEoAk9YDHoUARQBACgFdmlkZW8AHDUGGA1PWC1YUFQtMzY3NXgyFhRcLBaAsYqku-yDrSoW67K12efigOelAQAAFuCF7JYEFt6F7JYEAByWDBd7FK5H4XqEPwC8GwGIHk1MX0ZFRV9PUFRJTUlaRVJfSU5TVEFOQ0VfVFlQRQVvdGhlcgCsOA1wZWFjb2NrdHYuY29tAAAA HTTP/1.1Host: monetengine-d.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vast_track/v2?info=YwAAAAMArgAFAQm-k6tmAAAAABED50tocaN9KRm-k6tmAAAAACAAKAAwrmE4mAJAmdYCSJaNMVDPrsgBWIrrVGICVVNorAJw-gF4AIABAogBBZABrAKYAfoBoAEAqAEAsAEB&s=23851f8d95c8fbb0e64a1011689120cb3ef37b26&event_type=4&error_code=901 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; icu=ChgImdYCEAoYBCAEKAQwvqeutQY4BEAESAQQvqeutQYYAw..; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssDTpGM4cFXyO6kWnxKFjTa3BRChUDAcZTam5BA8f0RvQwm_xz3MARRoRlRnBTuyWfynjtuU27LelTVvyqTytobIJ3JjU5NgHgNBZ91nG3w9Apt7pmin2N-AkfyEODzO-aiAHwQbSjELbFUBebT6Oh7i9otzzSG4AGF9MZv6s7Zw07DoZ4GMr6sXOMJitcmYdYS&sai=AMfl-YRbVnWMO7LSrjyPuGvskIef6kGQkDhF3IMkShb1nCC_O_n1BPdCj3bjuYPHk0XU_nrN4KF3BgcOEBWiAcAfSikIWflqcJcwju-d_A&sig=Cg0ArKJSzJY9976pWdTjEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5507&vt=11&dtpt=4280&dett=3&cstd=1222&cisv=r20240729.21937&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/8600198dcde7c816c2b97c139b2fa6a1.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/6112670057830094987/media/ba86ece03f6c92b7ba99211957648318.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/0_0_0_9412/us/0/1/0/0/0/0/728/90/242/1697/0/pixel.gif?v=2_1&ttid=2&d=www.msn.com&r=0.8444740409298712 HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^; icu=ChgImdYCEAoYBSAFKAUw3qeutQY4BUAFSAUQ3qeutQYYBA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^; icu=ChgImdYCEAoYBSAFKAUw3qeutQY4BUAFSAUQ3qeutQYYBA..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKLE-iLCQAAAwDWAAUBCN6nrrUGEPqR797i4ur_Dhj2vpPq4pjpwlkqNgmO_MHAc-_TPxH-ExIfjqTRPxkAAAECDERAIf4NEggpj_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_b2NpZD13aXNwciZwYz11NDc38gIRCgZBRFZfSUQSBzc2MDI1MTLyAhIKBkNQR19JRBIIMm35LPICEgoFQ1BfSUQSCXX4PPICDQoIQURWX0ZSRVESATIFEDRSRU1fVVNFUhIBMPICDAkgFENPREUSAAUPCENQRxUPEAsKB0NQFQ4QEAoFSU8BYQAHjYIA8gEhBElPFSE4EwoPQ1VTVE9NX01PREVMASsUAPICGgoWMhYAHExFQUZfTkFNBXEIHgoaNh0ACEFTVAE-EElGSUVEAT4cFQoIU1BMSVQBTQAJFdnwmoADAIgDAZADoI50mAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEDwgAEAEY2AUgWigAMAA4ArgEAMAEAMgEANIEDTY2OCNGUkExOjY1ODLaBAIIAeAEAfAEzM_a-AGIBQGYBQCgBf___________wHABQDJBQAAwTsU8D_SBQkJAQoBAfBM2AUB4AUB6gUPCglwYWdlX3R5cGUSAmhw6gURCgxtc2Z0X3JlZnJlc2gSATPqBRYKC3Byb3ZpZGVyX2lkEgc3SEQ2NkZD6gUQCgxrdm0BL0Rtb2RlbBIA6gUKCgZmbGlnaHQBDQgPCgsRIAhha2U2EgAMeWVhcgES8D4nCgNyaWQSIDY2MzhjYWYyMDBkNDQzYjY4ZjY2MDA5MDA1MWY5OGQ18AXC0136BQQIABAAigaAAUZ4UjRVRm9hHthEQUFrQ0JRRUlsZkNSREJETjhmSUNHS0xTM0FRZ0JpZ0FRUGZCNEExSXFJV1REbENCUjFqckozNjwDBGdRHRAASc09LEpvQkFnZ0FxQUVBcy4gADxBLi6QBgCYBgCiBg0yODAjJZMgNTA5ObgGAMEGIWIwAADwP9AG1gHaBhYKEAkRGQEkEAAYAOAGAeoGKOEt4VUYNjA3NjYyMeUAARQAaeFVFDkwNjQ2NgUURPIGhwEIgY90EoABUXhRRlQxbzL5AFRrTENvQ3hEcHpMUUVHS0hDdlFRZ0J5AfksX3o1QXhJeUtibURG_vkACflUgAcBiAcAoAcBugcCQAHIB-OHBtIHDVVbAdwM2gcGCAUJ8JrgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ45mzAO_6sWK9vI-rjlDp87e5Epd3sHmkRyNYTpLlG-lkomQh_10zHFhRgvS7aYGk6nREGtVdxSmiRhC_4FQF1C9ckbq3n9Ny0nKBE_6YjMgI47d6p2yzZMwuJLQbgoiptVasguyxABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=05ed21209f7fce475dcdf8e6647b6924bd25f005&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QLPD-jPBwAAAwDWAAUBCN6nrrUGEPqR797i4ur_Dhj2vpPq4pjpwlkqNgmO_MHAc-_TPxH-ExIfjqTRPxkAAAECDERAIf4NEggpj_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_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAOgjnSYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQBsgQPCAAQARjYBSBaKAAwADgCuAQAwAQAyAQA0gQNNjY4I0ZSQTE6NjU4MtoEAggB4AQB8ATMz9r4AYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAKEvfAAAANgFAeAFAfAFwtNd-gUECAAQAIoGgAFGeFI0VUZvIVrYREFBa0NCUUVJbGZDUkRCRE44ZklDR0tMUzNBUWdCaWdBUVBmQjRBMUlxSVdURGxDQlIxanJKMzZ4AQRnUR0QAEmNeSxKb0JBZ2dBcUFFQXMuIABAQS4ukAYAmAYAogYNMjgwI0YB5iA1MDk5uAYAwQYBtTAAAPA_0AbWAdoGFgoQCREZASQQABgA4AYB6gYooWmhkRg2MDc2NjIxpTwBFABpoZEUOTA2NDY2BRRA8gaHAQiBj3QSgAFReFFGVDE2-QBUa0xDb0N4RHB6TFFFR0tIQ3ZRUWdCeQH5LF96NUF4SXlLYm1ERv75AAn5WIAHAYgHAKAHAboHAkAByAfjhwbSBw0JEd4B3AjaBwYhp_CkGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ45mzAO_6sWK9vI-rjlDp87e5Epd3sHmkRyNYTpLlG-lkomQh_10zHFhRgvS7aYGk6nREGtVdxSmiRhC_4FQF1C9ckbq3n9Ny0nKBE_6YjMgI47d6p2yzZMwuJLQbgoiptVasguyxABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=2d07d8ea31d15fcd041304996527cbb292c1bc00 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473j6vo&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTIxNTc4NDQ0LCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV9mZGRiNjU0M2E4N2I0MDcwZGYxZjNmNTMyNGI0NjBkYSJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzUyMTU3ODQ0NCJ9&cb=2172604&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N2224960.4901091MIQUS/B31086607.384020371;dc_ver=101.296;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=2018517514;rc=1;ord=akxft8;click=https%3A%2F%2Ffra1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfCBmwAAAAMAxBkFAQjep661BhD6ke_e4uLq_w4Y9r6T6uKY6cJZIK7Mnw4omAIwnAU4AkDMz9r4AUjktQNQAFoDVVNEYgNVU0Ro2AVwWnjuAoAB44cGiAEBkAEBmAEFoAECqQGO_MHAc-_TP7EB_hMSH46k0T-5AQAAAAAAAERAwQH-EwkUSMkBj_zBwHPv0z_YAQHgAQDwAQA.%2Fs%3Deb0f75fbe1ada4adee63d1a2429bcdfe0985e9e8%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%25215RAkwgiw5o0cEMzP2vgBGOS1AyAAKAAxAAAAAAAAAAA6CUZSQTE6NjU4MkCBR0kAAAAAAADwP1EAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAAAAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw..%2Fcca%3DNjY4I0ZSQTE6NjU4Mg%3D%3D%2Fbn%3D99299%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=1,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477$0;xdt=0;crlt=Of(N_AIYtQ;gcsr=m;stc=1;asnm=1;chaa=1;sttr=27;rcsrc=h;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^; icu=ChgImdYCEAoYBSAFKAUw3qeutQY4BUAFSAUQ3qeutQYYBA..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QLPD-jPBwAAAwDWAAUBCN6nrrUGEPqR797i4ur_Dhj2vpPq4pjpwlkqNgmO_MHAc-_TPxH-ExIfjqTRPxkAAAECDERAIf4NEggpj_wJJMgxAAAAIK5H9T8wrsyfDjiYAkCcBUgCUMzP2vgBWOS1A2AAaO4CeOOHBoABAYoBA1VTRJIFBvBYmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xNYoCaXVmKCdhJywgNzYwMjUxMiwgMCk7dWYoJ2knLCA5NDY3ODkwLCAwKTsBKDBnJywgMjM4Nzc5MjksESkAcwEVHDkzNDQ0MTM3FRYwcicsIDUyMTU3ODQ0NAUW8IuSAqkFIVBZZzVVQWl3NW8wY0VNelAydmdCR0FBZzVMVURNQUE0QUVBQVNKd0ZVSzdNbnc1WUFHQ2VCbWdBY0FCNEFJQUJCSWdCQUpBQkFaZ0JBYUFCQWFnQkFiQUJBTGtCU2VzV2xuM3Ywel9CQVVuckZwWjk3OU1feVFFQUFBQUFBQUR3UDlrQkFBQQUOdDhEX2dBZkx2d1FUMUFlaDduejZZQWdDZ0FnRzFBZwEjBEM5CQjwaURBQWdESUFnRFFBZ0RZQWdEZ0FnRG9BZ0Q0QWdDQUF3R1lBd0dpQXc0SXE4S2pNeEFCR0FJdE16TnpQNklERGdpcndxTXpFQXNZQWkwek0zTV91Z01KUmxKQk1UbzJOVGd5NEFPQlIta0QBdgkBRER3QTk4VGdBU3VpZlVNaUFTeAEIXGtBUUJtQVFCc2dRSkNLZUhVaEREbnRnTgUQDE9tNUwuEAAMSUhsRQ0QCHdRUQlXAQEITWtFAQcJARhEWUJBUHhCCQ0FAVxpQVcyTTVBRmdZOTBtQVdwdFBhTEFha0YFHRxBQUE4RC14Qh1PNHdRVUFBQUJnWm1idVA4CSgcd0JmODFEX1IuKAAAMgUoAQHARHdQLUFGcmZNQjhBV3BzckVMLUFYUWd0QURnZ1lEVlZORWlBWUVrQVlCbUFZQW9RWQE1CQEkS2dHQkxJR0pBawkQAQEAQh3PBEJrARIJAQBDHRhoTGdHQ3ZnSGlkVUktQWZONXdqNEI3ajFDSUVJAS1oWUdabTdqLUlDQUNRQ0FBLpoCmQEhNVJBa3dnOq0CKE9TMUF5QUFLQUF4ATkNAUg2Q1VaU1FURTZOalU0TWtDQlIwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgdGAxIZ0FpLsEC8P13Li6yAiAyMTY3QzI5QjRCOUY2RDdCMkU1QkQ2NTU0QTg2NkM4NNgCAeACu85U6gInaHR0cHM6Ly93d3cubXNuLmNvbS8_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAOgjnSYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQBsgQPCAAQARjYBSBaKAAwADgCuAQAwAQAyAQA0gQNNjY4I0ZSQTE6NjU4MtoEAggB4AQB8ATMz9r4AYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAKEvfAAAANgFAeAFAfAFwtNd-gUECAAQAIoGgAFGeFI0VUZvIVrYREFBa0NCUUVJbGZDUkRCRE44ZklDR0tMUzNBUWdCaWdBUVBmQjRBMUlxSVdURGxDQlIxanJKMzZ4AQRnUR0QAEmNeSxKb0JBZ2dBcUFFQXMuIABAQS4ukAYAmAYAogYNMjgwI0YB5iA1MDk5uAYAwQYBtTAAAPA_0AbWAdoGFgoQCREZASQQABgA4AYB6gYooWmhkRg2MDc2NjIxpTwBFABpoZEUOTA2NDY2BRRA8gaHAQiBj3QSgAFReFFGVDE2-QBUa0xDb0N4RHB6TFFFR0tIQ3ZRUWdCeQH5LF96NUF4SXlLYm1ERv75AAn5WIAHAYgHAKAHAboHAkAByAfjhwbSBw0JEd4B3AjaBwYhp_CkGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ45mzAO_6sWK9vI-rjlDp87e5Epd3sHmkRyNYTpLlG-lkomQh_10zHFhRgvS7aYGk6nREGtVdxSmiRhC_4FQF1C9ckbq3n9Ny0nKBE_6YjMgI47d6p2yzZMwuJLQbgoiptVasguyxABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=2d07d8ea31d15fcd041304996527cbb292c1bc00 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKLE-iLCQAAAwDWAAUBCN6nrrUGEPqR797i4ur_Dhj2vpPq4pjpwlkqNgmO_MHAc-_TPxH-ExIfjqTRPxkAAAECDERAIf4NEggpj_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_b2NpZD13aXNwciZwYz11NDc38gIRCgZBRFZfSUQSBzc2MDI1MTLyAhIKBkNQR19JRBIIMm35LPICEgoFQ1BfSUQSCXX4PPICDQoIQURWX0ZSRVESATIFEDRSRU1fVVNFUhIBMPICDAkgFENPREUSAAUPCENQRxUPEAsKB0NQFQ4QEAoFSU8BYQAHjYIA8gEhBElPFSE4EwoPQ1VTVE9NX01PREVMASsUAPICGgoWMhYAHExFQUZfTkFNBXEIHgoaNh0ACEFTVAE-EElGSUVEAT4cFQoIU1BMSVQBTQAJFdnwmoADAIgDAZADoI50mAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEDwgAEAEY2AUgWigAMAA4ArgEAMAEAMgEANIEDTY2OCNGUkExOjY1ODLaBAIIAeAEAfAEzM_a-AGIBQGYBQCgBf___________wHABQDJBQAAwTsU8D_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_vkACflUgAcBiAcAoAcBugcCQAHIB-OHBtIHDVVbAdwM2gcGCAUJ8JrgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ45mzAO_6sWK9vI-rjlDp87e5Epd3sHmkRyNYTpLlG-lkomQh_10zHFhRgvS7aYGk6nREGtVdxSmiRhC_4FQF1C9ckbq3n9Ny0nKBE_6YjMgI47d6p2yzZMwuJLQbgoiptVasguyxABlQgAAIA_mAgBwAgB0ggGCAAQABgA2ggECAAgAA..&s=05ed21209f7fce475dcdf8e6647b6924bd25f005&bdref=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&bdtop=true&bdifs=1&bstk=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477,https%3A
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^; icu=ChgImdYCEAoYBSAFKAUw3qeutQY4BUAFSAUQ3qeutQYYBA..
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N2224960.4901091MIQUS/B31086607.384020371;dc_ver=101.296;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=2018517514;rc=1;ord=akxft8;click=https%3A%2F%2Ffra1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfCBmwAAAAMAxBkFAQjep661BhD6ke_e4uLq_w4Y9r6T6uKY6cJZIK7Mnw4omAIwnAU4AkDMz9r4AUjktQNQAFoDVVNEYgNVU0Ro2AVwWnjuAoAB44cGiAEBkAEBmAEFoAECqQGO_MHAc-_TP7EB_hMSH46k0T-5AQAAAAAAAERAwQH-EwkUSMkBj_zBwHPv0z_YAQHgAQDwAQA.%2Fs%3Deb0f75fbe1ada4adee63d1a2429bcdfe0985e9e8%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%25215RAkwgiw5o0cEMzP2vgBGOS1AyAAKAAxAAAAAAAAAAA6CUZSQTE6NjU4MkCBR0kAAAAAAADwP1EAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAAAAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw..%2Fcca%3DNjY4I0ZSQTE6NjU4Mg%3D%3D%2Fbn%3D99299%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=1,https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477$0;xdt=0;crlt=Of(N_AIYtQ;gcsr=m;stc=1;asnm=1;chaa=1;sttr=27;rcsrc=h;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /ct/0_0_0_9412/us/0/1/0/0/0/0/728/90/242/1697/0/pixel.gif?v=2_1&ttid=2&d=www.msn.com&r=0.6070934278624247 HTTP/1.1Host: l.evidon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473j6vo&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTIxNTc4NDQ0LCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV9mZGRiNjU0M2E4N2I0MDcwZGYxZjNmNTMyNGI0NjBkYSJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzUyMTU3ODQ0NCJ9&cb=2172604&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=13&cbvp=1&cstd=10&cisv=r20240729.63384&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source=navigation-sourceReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=114&vt=11&dtpt=101&dett=3&cstd=10&cisv=r20240729.63384&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-sourceReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi7_HYANvdGdqjPrNdMHi9Re1BaWtMBQWgvJUPXHQSlO4R9NtA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6450743212348071798; XANDR_PANID=1-WWSpb--xQ-tPaneIUhZvZbGfdVKVmxSO83ISZzzTq-fdKLCVB3kC8SYekweihisCV2pVOQZfpY4bTrjPMN3_vF-SITZeAH55sdFq5qn-E.; receive-cookie-deprecation=1; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^; icu=ChgImdYCEAoYBSAFKAUw3qeutQY4BUAFSAUQ3qeutQYYBA..
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=114&vt=11&dtpt=101&dett=3&cstd=10&cisv=r20240729.63384&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=13&cbvp=1&cstd=10&cisv=r20240729.63384&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlFpRYd6UcNZa0lyS6q50Al4n9Z2TrQ8YNlg_4ATCQtFK_RrPziP6zFRpbjKZY; ar_debug=1; APC=AfxxVi4KuCFJcHbwE2q-ejBF0u8YdN14D8iURzWqIRfc3thpDgWAJA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xY:/+z3Fw30vR-X(9=BWbwgmYrrieOKPieu#Xlw`]kjF/aVjG?JfdXc9[dJ6B5_C=G+/X%W#.wL4W1Qw2=_8JK^; icu=ChgImdYCEAoYBSAFKAUw3qeutQY4BUAFSAUQ3qeutQYYBA..

Source: chromecache_879.1.dr

String found in binary or memory: MY SECOND CHANNEL: Rhett Shull Studio https://www.youtube.com/channel/UCTb6eUG0lZdmabwro3221LA MY DISCORD SERVER: https://discord.gg/hMTvsRb DEACON KNIGHT (my band): https://www.youtube.com/channel/UC3EU0NCcKOZc4OhO7KMaRjA equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.msn.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: browser.events.data.msn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: hbx.media.net
Source: global traffic	DNS traffic detected: DNS query: cm.mgid.com
Source: global traffic	DNS traffic detected: DNS query: deff.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: api.taboola.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: code.yengo.com
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: trace.mediago.io
Source: global traffic	DNS traffic detected: DNS query: trace.popin.cc
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync.inmobi.com
Source: global traffic	DNS traffic detected: DNS query: m.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync.im-apps.net
Source: global traffic	DNS traffic detected: DNS query: tsdtocl.com
Source: global traffic	DNS traffic detected: DNS query: srtb.msn.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: api.btloader.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: confiant.msn.com
Source: global traffic	DNS traffic detected: DNS query: fra1-ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs-simple.com
Source: global traffic	DNS traffic detected: DNS query: i.clean.gg
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cadmus.script.ac
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: cdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: protected-by.clarium.io
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: bid.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.betrad.com
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com
Source: global traffic	DNS traffic detected: DNS query: monetengine-d.openx.net
Source: global traffic	DNS traffic detected: DNS query: l.evidon.com

Source: unknown

HTTP traffic detected: POST /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveContent-Length: 1930sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; uuid2=6450743212348071798; anj=dTM7k!M4.FEVNsVF']wIg2E?`r''6C!w#xYe#RawZ=f1CByY$Nd<y!MlyFhxfn+@Ph072cfnR$cfn5OVjEXgSgksg[:/_T#Jc-RI*bpRz*qF1`*bbr#+38h]

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.msftconnecttest.com/redirect
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,9801599905912969861,11260221539091602833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5900 --field-trial-handle=1964,i,9801599905912969861,11260221539091602833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,9801599905912969861,11260221539091602833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5900 --field-trial-handle=1964,i,9801599905912969861,11260221539091602833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV	0%	URL Reputation	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://login.windows-ppe.net	0%	URL Reputation	safe
https://pickuptrucktalk.com/2020/12/consumer-reports-2021-least-reliable-full-size-trucks/	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13D4or-dark	0%	Avira URL Cloud	safe
https://fra1-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKQDOgQBgAAAwDWAAUBCPumrrUGEL-y2fGfyc6MARj2vpPq4pjpwlkqNgm4HoXrUbjmPxG4HoXrUbjmPxkAAAECCERAIREbACkRCcgxAAAAwMzM_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-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI6XvSLIBADSBA8xMTEyMiNGUkExOjU3ODLaBAIIAeAEAfAEu4nJ7gGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQCBt3QAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYBHzAAAPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4ARk6Sf42WT_e1rL7-S5airC9inbX2rV9WWaVnd71ZzC3iSjEK53cuVTLaiU1sUnS0jphANKlXhF-feg0_Xk2pDqErxvf0ELB9JC4cdCL3o9V5GCVyFeusYB9Td4zo9Xm-9sQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=039927e721fe0f032cd728e4541d83c6408a0926&type=nv&nvt=5&jm=1003&px=804&py=584&bw=300&bh=250&sid=8123044641899437510&vd=ct~0\|rr~0&sv=245&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=3282767&cid=3&cr=nv&sw=1280&sh=1024&pw=1263&ph=2835&ww=1280&wh=907&ft=2	0%	Avira URL Cloud	safe
https://s0.2mdn.net/sadbundle/6112670057830094987/media/ba86ece03f6c92b7ba99211957648318.jpg	0%	Avira URL Cloud	safe
https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327	0%	Avira URL Cloud	safe
https://imp.i114863.net/c/2330848/937020/11319?prodsku=HS7&u=https%3A%2F%2Fwww.sweetwater.com%2Fstor	0%	Avira URL Cloud	safe
https://s0.2mdn.net/sadbundle/6112670057830094987/17404d89c3501750cc508c0e8819ca71.js	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/money/personalfinance/ny-to-issue-bonus-child-tax-credit-payments-to-1m-fa	0%	Avira URL Cloud	safe
https://pr-bh.ybp.yahoo.com/sync/msn?gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://www.businessinsider.com/mediterranean-cruise-biggest-mistake-not-extending-trip-2024-1	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=13&cbvp=1&cstd=10&cisv=r20240729.63384&arae=1&ftch=1&adurl=	0%	Avira URL Cloud	safe
https://cadmus.script.ac/dpjgrnd6i7dk0/script.js	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/sports/other/nothing-could-go-wrong-the-story-behind-the-paris-olympics-ca	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationN	0%	Avira URL Cloud	safe
https://www.msn.com/$	0%	Avira URL Cloud	safe
https://sync.outbrain.com/uidmappixel?ext_uid=2167C29B4B9F6D7B2E5BD6554A866C84&pname=MSN&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/foodanddrink/recipes/i-made-10-minute-1-hour-and-10-hour-baked-potatoes-an	0%	Avira URL Cloud	safe
https://fra1-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKNDOgNBgAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-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____________AcAFAMkFgaccAADwP9IFCQkJDHAAANgFAeAFAfAFAfoFBAgAEACQBgCYBgC4BgDBBgkjKPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4OsNkxu-m9UGLgnHUHvLyjt7E2-nupPkWUGYjJ5ZDyI4cwVHdjv02SOZnWSkuR-OhTZNRCx2N9mu_4BHdo3BZi7mBtPX6R7Ld7pffnunZOI0UlzWTYuul3govZ5yc5RvZT1MQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=890e37e5facbdf59d28d5559e29864121613ac3e&type=nv&nvt=5&jm=1003&sid=8123044641899437510&vd=ct~0\|rr~0&sv=245&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=29877806&cid=3&cr=nv&sw=1280&sh=1024&pw=1263&ph=2835&ww=1280&wh=907&ft=2	0%	Avira URL Cloud	safe
https://www.googletagservices.com/dcm/impl_v101.js	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationO	0%	Avira URL Cloud	safe
https://www.insider.com/review-best-method-for-making-baked-potatoes-air-fryer-2021-6	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gU1v-dark	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=2	0%	Avira URL Cloud	safe
https://login.microsoftonline.us	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKvE-dark	0%	Avira URL Cloud	safe
https://fra1-ib.adnxs.com/vast_track/v2?info=YwAAAAMArgAFAQm-k6tmAAAAABED50tocaN9KRm-k6tmAAAAACAAKAAwrmE4mAJAmdYCSJaNMVDPrsgBWIrrVGICVVNorAJw-gF4AIABAogBBZABrAKYAfoBoAEAqAEAsAEB&s=23851f8d95c8fbb0e64a1011689120cb3ef37b26&event_type=1	0%	Avira URL Cloud	safe
http://info.evidon.co.uk/more_info/9412	0%	Avira URL Cloud	safe
https://s0.2mdn.net/simgad/16178903522924948873	0%	Avira URL Cloud	safe
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQKaVRG6zUEFBR94KtJ4OC3_2LW8zHMFF2b4fXkb1z4Yw70OezRMr2717l-uOhBdBfC02QM	0%	Avira URL Cloud	safe
http://ad.doubleclick.net/viewad/817-grey.gif	0%	Avira URL Cloud	safe
https://www.msn.cn/zh-cn/play/games/yiqiyoo1326/cg-yiqiyoo_1326	0%	Avira URL Cloud	safe
https://cdn.taboola.com/scripts/msn-sync.es5.js	0%	Avira URL Cloud	safe
https://btloader.com/tag?o=6208086025961472&upapi=true	0%	Avira URL Cloud	safe
https://api.msn.com:443/msn/Feed/me?$top=8&$skip=8&$filter=_t	0%	Avira URL Cloud	safe
https://login.microsoftonline.de	100%	Avira URL Cloud	phishing
https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803	0%	Avira URL Cloud	safe
https://login.microsoftonline.com/common/discovery/v2.0/keys	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glvR	0%	Avira URL Cloud	safe
https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/technology/tech-ceo-says-people-will-enjoy-paying-a-monthly-fee-to-us	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js	0%	Avira URL Cloud	safe
https://rhettshullguitarcourses.com/p/inner-circle	0%	Avira URL Cloud	safe
https://wealthofgeeks.com/best-used-cars/	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=display&reasons=AcuE4N78T7nFP2OP6u9SkTgkvEd0N5mSPD-8	0%	Avira URL Cloud	safe
https://d.agkn.com/pixel/10690/?che=656790244&cmid=32236948&sid=6031710&pid=400722228&cgid=592302385	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://www.businessinsider.com/why-cruise-drink-packages-are-not-worth-money-frequent-cruiser-opini	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	0%	Avira URL Cloud	safe
https://www.businessinsider.com/best-and-worst-cruise-routes-to-book-frequent-traveler-2024-2	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	0%	Avira URL Cloud	safe
https://www.msn.com/	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/pagead/js/rum.js	0%	Avira URL Cloud	safe
https://protected-by.clarium.io/pixel?tag=wt_	0%	Avira URL Cloud	safe
https://s0.2mdn.net/sadbundle/6112670057830094987/media/8600198dcde7c816c2b97c139b2fa6a1.png	0%	Avira URL Cloud	safe
https://www.msn.cn/zh-cn/play/games/yiqiyoo21482/cg-yiqiyoo2_1482	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gDkX-dark	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/lifestyle/weddings/9-old-fashioned-wedding-traditions-you-ll-only-find-in-	0%	Avira URL Cloud	safe
https://rhettshullguitarcourses.com/p/fretboard-fundaments-rhythm-edition	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/foodanddrink/foodnews/turn-canned-frosting-into-silky-buttercream-with-jus	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_L1o9fm_mTyE4OcaNwBLkVg2.js	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/sports/other/italian-boxer-quits-olympic-bout-after-just-46-seconds-agains	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gF9k-dark	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gHJF-dark	0%	Avira URL Cloud	safe
https://acdn.adnxs.com/video/player/vastPlayer/XandrVastPlayer.js	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	0%	Avira URL Cloud	safe
https://m.adnxs.com/seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2167C29B4B9F6D7B2E5BD6554A866C84%26gdpr%3D0%26gdpr_consent%3D	0%	Avira URL Cloud	safe
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473j6vo&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTIxNTc4NDQ0LCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV9mZGRiNjU0M2E4N2I0MDcwZGYxZjNmNTMyNGI0NjBkYSJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzUyMTU3ODQ0NCJ9&cb=2172604&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ==	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA12PNdd	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/foodanddrink/foodnews/neighborhood-gem-marks-50-years-of-serving-unapologe	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=114&vt=11&dtpt=101&dett=3&cstd=10&cisv=r20240729.63384&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl=	0%	Avira URL Cloud	safe
https://www.caesarrodney.org/energy-updates2/Delaware-Voters-Overwhelmingly-Oppose-Gas-powered-Car-B	0%	Avira URL Cloud	safe
https://www.usatoday.com/money/blueprint/credit-cards/tipping-fatigue-growing-in-america/	0%	Avira URL Cloud	safe
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473gc6s&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTAxMzc4NjY4LCJhc3RfYiI6MTExMjIsInMiOiJiYW5uZXIyXzQxOGEwOGVkMTJmOTQ1ZWY4MDU2NjVkYjEwOTU4OTRhIn0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs1MDEzNzg2NjgifQ%3D%3D&cb=4631622&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ==	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=1&e=0.07525667424297344	0%	Avira URL Cloud	safe
https://www.msn.cn/zh-cn/play/games/stickman-survival-challenge/cg-3dm_stickmansurvivalchallenge	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=1&e=0.6843595059444718	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glvR-dark	0%	Avira URL Cloud	safe
https://www.msn.cn/zh-cn/play/games/360610/cg-360_610	0%	Avira URL Cloud	safe
https://www.businessinsider.com/vintage-photochrom-images-of-french-italian-riviera-and-monaco-2023-	0%	Avira URL Cloud	safe
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQAy0mCx6t5-viJ-Bnk-hdlgWvmgFnzvNKNt-9IuXiBtAVI4KHXFQiJb6JORgOw2tnd380u	0%	Avira URL Cloud	safe
https://monetengine-d.openx.net/v/1.0/rv?t=error_vast2_901&ts=2DAABBgABAAECAAIBAAsAAgAAAfscGAp6N1BzRFF2Q1p5HBaXxeXClv719_0BFuv8gvTz5cL0mQEAHBbX67Wy9r7M7yMWm6-AwLHD7tjhAQAW_M7c6gwVBkwVAhgZQUxXQVlTX0ZFRVNfVklBX01MX05PTl9PQhgKZ2xvYmFsX2NhcAA5DAAsHBUCABwVAgAcFQIAHBUCAAAcJoa04JUEFQYVBib-s-CVBBb4s-CVBBEVAhUEpuQGFuQGFuQGFkoWShZKFkoW2ggW5AYW5AYAHBwsFoCxiqS77IOtKhbrsrXZ5-KA56UBAAAWvNmYgAQWnuWigAQW7OKvggQW1u6pgAQVGBwU9AMU2AQAFQQm2ggW2ggW5ggRNQ4m5gg0BAAsLBbf1cWez42x9LEBFoeIyIu06pzMlAEAFvzO3OoMBii82ZiABBae5aKABBbW7qmABBbs4q-CBBgJNTg4MDk3OTIwFo4dFuYIJQQW8AEYBzU2MjcxMzQVAqEoAk9YDHoUARQBACgFdmlkZW8AHDUGGA1PWC1YUFQtMzY3NXgyFhRcLBaAsYqku-yDrSoW67K12efigOelAQAAFuCF7JYEFt6F7JYEAByWDBd7FK5H4XqEPwC8GwGIHk1MX0ZFRV9PUFRJTUlaRVJfSU5TVEFOQ0VfVFlQRQVvdGhlcgCsOA1wZWFjb2NrdHYuY29tAAAA	0%	Avira URL Cloud	safe
https://fra1-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKMDOgMBgAAAwDWAAUBCICnrrUGEO6lm9zAztXhMRj2vpPq4pjpwlkqNgl7FK5H4XrUPxF7FK5H4XrUPxkAAAECCERAIREbACkRCcgxAAAAYGZm7j8w0K7IATiYAkDyVkgCUOzcie8BWOS1A2AAaO4CeMqGBoABAYoBA1VTRJIFBvBVmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xMooCVHVmKCdhJywgNTU4NjgwNywgMCk7dWYoJ2knLCAxMDQ1MTA4NCwRFQBnARUUODIxNjM0GSo0cicsIDUwMTM3ODY2OCwBK_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_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAOxhGWYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQAsgQPCAAQARjYBSBaKAAwADgCuAQAwASPl70iyAQA0gQPMTExMjIjRlJBMTo2NTQ52gQCCAHgBAHwBOzcie8BiAUBmAUAoAX___________8BwAUAyQWBphwAAPA_0gUJCQkMcAAA2AUB4AUB8AUB-gUECAAQAJAGAJgGALgGAMEGCSMo8D_QBpJC2gYWChAJERkBiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAfKhgbSBw0JES0BKwjaBwYBYvCkGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44LAAxw1Z0C4bS7s_Lyvtb1BY_DWk2tXWFNDV92c1Tv1ORvvuQCD_1bOmyNE1WHK-ldWwG9GPW_6rWYsr-5IVZpps0KHp5GyTvWacRpSln_3rmFggE8D66XS9FgCjJc30SMRWBJxABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=06177c3d9abe793597d50774564d100ef3846cf6&type=nv&nvt=5&jm=1003&sid=8123044641899437510&vd=ct~0\|rr~0&sv=245&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=3282768&cid=3&cr=nv&sw=1280&sh=1024&pw=1263&ph=2835&ww=1280&wh=907&ft=2	0%	Avira URL Cloud	safe
https://github.com/google/safevalues/issues	0%	Avira URL Cloud	safe
https://login.chinacloudapi.cn	0%	Avira URL Cloud	safe
https://ww2.arb.ca.gov/resources/documents/cars-and-light-trucks-are-going-zero-frequently-asked-que	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/sports/other/olympic-boxer-fears-being-killed-or-put-in-prison-if-she-retu	0%	Avira URL Cloud	safe
https://www.msn.cn/zh-cn/play/games/7k7khtlxy744/cg-7k7k_htlxy744	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=690193593974239&correlator=3242437818539085&eid=31083341%2C31085800%2C31084507%2C31061691%2C31061693%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202407300101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D11f65a8e04c65a0c%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZ35rF4OO7lFb9jYCtF6ta7GzqNSQ&gpic=UID%3D00000e825459448b%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZFa-lTuYD19Ok3_rZle9UEElAp8w&cdm=www.msn.com&abxe=1&dt=1722520477753&adxs=804&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=srgg3meuo9wv&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&top=www.msn.com&rumc=690193593974239&rume=1&vis=1&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=46240&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1722520477672&idt=64&adks=4055936480&frm=23&eo_id_str=ID%3Def2b815864208f51%3AT%3D1722520452%3ART%3D1722520452%3AS%3DAA-AfjYO7LU-u_JfCdMG8cQGaIKn	0%	Avira URL Cloud	safe
https://trc.taboola.com/sg/msn/1/cm?taboola_hm=	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=display&reasons=AcuE4N4E5md0V1Xh39fSggS2xhswMvwopTz_	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	142.250.185.226	true	false	unknown
cadmus.script.ac	104.18.22.145	true	false	unknown
protected-by.clarium.io	52.51.207.110	true	false	unknown
tls13.taboola.map.fastly.net	151.101.65.44	true	false	unknown
cm.mgid.com	104.19.132.76	true	false	unknown
api.btloader.com	130.211.23.194	true	false	unknown
www.googletagservices.com	142.250.186.130	true	false	unknown
hbx.media.net	23.53.232.23	true	false	unknown
bid.g.doubleclick.net	108.177.15.154	true	false	unknown
i.clean.gg	34.95.69.49	true	false	unknown
fra1-ib.adnxs.com	37.252.171.21	true	false	unknown
monetengine-d.openx.net	35.244.159.8	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
tsdtocl.com	151.101.1.44	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	52.213.228.238	true	false	unknown
sync.im-apps.net	95.101.111.136	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	172.217.18.100	true	false	unknown
pagead-googlehosted.l.google.com	142.250.185.129	true	false	unknown
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	52.201.161.41	true	false	unknown
nydc1.outbrain.org	70.42.32.31	true	false	unknown
ad.doubleclick.net	142.250.185.198	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
lb-sin.mgid.com	172.241.51.69	true	false	unknown
trace.popin.cc	35.213.89.133	true	false	unknown
trace.mediago.io	35.208.249.213	true	false	unknown
ad-delivery.net	172.67.69.19	true	false	unknown
googleads.g.doubleclick.net	142.250.181.226	true	false	unknown
sb.scorecardresearch.com	18.239.83.91	true	false	unknown
prod.appnexus.map.fastly.net	151.101.65.108	true	false	unknown
s-part-0015.t-0009.t-msedge.net	13.107.246.43	true	false	unknown
btloader.com	172.67.41.60	true	false	unknown
m.anycast.adnxs.com	185.89.210.90	true	false	unknown
visitor-fra02.omnitagjs.com	185.255.84.152	true	false	unknown
ib.anycast.adnxs.com	37.252.171.149	true	false	unknown
s0.2mdn.net	142.250.181.230	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
js.monitor.azure.com	unknown	unknown	false	unknown
api.taboola.com	unknown	unknown	false	unknown
sync.inmobi.com	unknown	unknown	false	unknown
acdn.adnxs-simple.com	unknown	unknown	false	unknown
acdn.adnxs.com	unknown	unknown	false	unknown
l.evidon.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
m.adnxs.com	unknown	unknown	false	unknown
confiant.msn.com	unknown	unknown	false	unknown
cdn.taboola.com	unknown	unknown	false	unknown
c.evidon.com	unknown	unknown	false	unknown
c.msn.com	unknown	unknown	false	unknown
srtb.msn.com	unknown	unknown	false	unknown
deff.nelreports.net	unknown	unknown	false	unknown
sync.outbrain.com	unknown	unknown	false	unknown
browser.events.data.msn.com	unknown	unknown	false	unknown
visitor.omnitagjs.com	unknown	unknown	false	unknown
pr-bh.ybp.yahoo.com	unknown	unknown	false	unknown
assets.msn.com	unknown	unknown	false	unknown
code.yengo.com	unknown	unknown	false	unknown
www.msn.com	unknown	unknown	false	unknown
mem.gfx.ms	unknown	unknown	false	unknown
cdn.adnxs.com	unknown	unknown	false	unknown
c.betrad.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
api.msn.com	unknown	unknown	false	unknown
eb2.3lift.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://s0.2mdn.net/sadbundle/6112670057830094987/17404d89c3501750cc508c0e8819ca71.js	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/sadbundle/6112670057830094987/media/ba86ece03f6c92b7ba99211957648318.jpg	false	Avira URL Cloud: safe	unknown
https://fra1-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKQDOgQBgAAAwDWAAUBCPumrrUGEL-y2fGfyc6MARj2vpPq4pjpwlkqNgm4HoXrUbjmPxG4HoXrUbjmPxkAAAECCERAIREbACkRCcgxAAAAwMzM_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-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBIIBRAEGKwCIPoBKAEoAjAAOAS4BADABI6XvSLIBADSBA8xMTEyMiNGUkExOjU3ODLaBAIIAeAEAfAEu4nJ7gGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQCBt3QAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYBHzAAAPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4ARk6Sf42WT_e1rL7-S5airC9inbX2rV9WWaVnd71ZzC3iSjEK53cuVTLaiU1sUnS0jphANKlXhF-feg0_Xk2pDqErxvf0ELB9JC4cdCL3o9V5GCVyFeusYB9Td4zo9Xm-9sQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=039927e721fe0f032cd728e4541d83c6408a0926&type=nv&nvt=5&jm=1003&px=804&py=584&bw=300&bh=250&sid=8123044641899437510&vd=ct~0\|rr~0&sv=245&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=3282767&cid=3&cr=nv&sw=1280&sh=1024&pw=1263&ph=2835&ww=1280&wh=907&ft=2	false	Avira URL Cloud: safe	unknown
https://pr-bh.ybp.yahoo.com/sync/msn?gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=13&cbvp=1&cstd=10&cisv=r20240729.63384&arae=1&ftch=1&adurl=	false	Avira URL Cloud: safe	unknown
https://cadmus.script.ac/dpjgrnd6i7dk0/script.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://fra1-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKNDOgNBgAAAwDWAAUBCPumrrUGEMHqm_3umNnhOhj2vpPq4pjpwlkqNgkL16NwPQrnPxEL16NwPQrnPxkAAAECCERAIREbACkRCcgxAAAAIK5H9T8wrsyfDjiYAkDyVkgCUOGTgtMBWOS1A2AAaO4CeKbZBYABAYoBA1VTRJIFBvBVmAHKB6AB-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____________AcAFAMkFgaccAADwP9IFCQkJDHAAANgFAeAFAfAFAfoFBAgAEACQBgCYBgC4BgDBBgkjKPA_0AaSQtoGFgoQCREZAYgQABgA4AYB8gYCCACABwGIBwCgBwG6BwJAAcgHptkF0gcNCREtASsI2gcGAWLwpBgA4AcA6gcCCADwB5O08g-KCG4KagAAAZEOOBh4OsNkxu-m9UGLgnHUHvLyjt7E2-nupPkWUGYjJ5ZDyI4cwVHdjv02SOZnWSkuR-OhTZNRCx2N9mu_4BHdo3BZi7mBtPX6R7Ld7pffnunZOI0UlzWTYuul3govZ5yc5RvZT1MQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=890e37e5facbdf59d28d5559e29864121613ac3e&type=nv&nvt=5&jm=1003&sid=8123044641899437510&vd=ct~0\|rr~0&sv=245&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=29877806&cid=3&cr=nv&sw=1280&sh=1024&pw=1263&ph=2835&ww=1280&wh=907&ft=2	false	Avira URL Cloud: safe	unknown
https://sync.outbrain.com/uidmappixel?ext_uid=2167C29B4B9F6D7B2E5BD6554A866C84&pname=MSN&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://www.googletagservices.com/dcm/impl_v101.js	false	Avira URL Cloud: safe	unknown
https://ad-delivery.net/px.gif?ch=2	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQKaVRG6zUEFBR94KtJ4OC3_2LW8zHMFF2b4fXkb1z4Yw70OezRMr2717l-uOhBdBfC02QM	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/simgad/16178903522924948873	false	Avira URL Cloud: safe	unknown
https://fra1-ib.adnxs.com/vast_track/v2?info=YwAAAAMArgAFAQm-k6tmAAAAABED50tocaN9KRm-k6tmAAAAACAAKAAwrmE4mAJAmdYCSJaNMVDPrsgBWIrrVGICVVNorAJw-gF4AIABAogBBZABrAKYAfoBoAEAqAEAsAEB&s=23851f8d95c8fbb0e64a1011689120cb3ef37b26&event_type=1	false	Avira URL Cloud: safe	unknown
https://cdn.taboola.com/scripts/msn-sync.es5.js	false	Avira URL Cloud: safe	unknown
https://btloader.com/tag?o=6208086025961472&upapi=true	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	URL Reputation: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/rum.js	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/sadbundle/6112670057830094987/media/8600198dcde7c816c2b97c139b2fa6a1.png	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_L1o9fm_mTyE4OcaNwBLkVg2.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA	false		unknown
https://tsdtocl.com/	false		unknown
https://m.adnxs.com/seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2167C29B4B9F6D7B2E5BD6554A866C84%26gdpr%3D0%26gdpr_consent%3D	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=f55e054e-92c0-45f3-a5db-6a445acbf8a6&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.24.0&client_info=1&code_challenge=tFv_wlgmQuRgSDr4TzAIPfNlxqgO4r8wBmhMBNmdtxA&code_challenge_method=S256&prompt=none&nonce=a5c43132-fa38-4f51-bd4e-9be8cbb6ed20&state=eyJpZCI6ImY3NWY5Zjg4LWRmNTgtNDZhNi04NGQ4LTM4OTljMmI2NjIyOCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	false		unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	false	Avira URL Cloud: safe	unknown
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473j6vo&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTIxNTc4NDQ0LCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV9mZGRiNjU0M2E4N2I0MDcwZGYxZjNmNTMyNGI0NjBkYSJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzUyMTU3ODQ0NCJ9&cb=2172604&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ==	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/pcs/view?xai=AKAOjsvw8w8-bHZn3_zSRpSkX7dO7lK_9pT8fDcWtbZ6KBjWr-uVf-RvBgh3RGVxmDY_gMdkzdgn3ZkVCHVQ5LptMBbL2umwgcY1FIp4d3vqyuPQ4iqz1ChXhWkCpAMffhtr6wdahKpairJ5xeDHe7NE4Ya6BzUICELyQSJm9JgRvDiTbVtDN23xsWQ6mAo0nrVsvj09&sai=AMfl-YSGM9_H-892BZwKZHb4EvSehrXrAtc09jRZL6SSEULt8eWxYu1qQTi02TMnP-p0pWZ9RoB9u1jtSEA1FNW_-Z-Xr1FVtCPXxjV1kA&sig=Cg0ArKJSzIXy72KJHOTUEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly92aXNpdHRlbmF5YS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=114&vt=11&dtpt=101&dett=3&cstd=10&cisv=r20240729.63384&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl=	false	Avira URL Cloud: safe	unknown
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i473gc6s&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTAxMzc4NjY4LCJhc3RfYiI6MTExMjIsInMiOiJiYW5uZXIyXzQxOGEwOGVkMTJmOTQ1ZWY4MDU2NjVkYjEwOTU4OTRhIn0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs1MDEzNzg2NjgifQ%3D%3D&cb=4631622&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ==	false	Avira URL Cloud: safe	unknown
https://ad-delivery.net/px.gif?ch=1&e=0.07525667424297344	false	Avira URL Cloud: safe	unknown
https://ad-delivery.net/px.gif?ch=1&e=0.6843595059444718	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQAy0mCx6t5-viJ-Bnk-hdlgWvmgFnzvNKNt-9IuXiBtAVI4KHXFQiJb6JORgOw2tnd380u	false	Avira URL Cloud: safe	unknown
https://monetengine-d.openx.net/v/1.0/rv?t=error_vast2_901&ts=2DAABBgABAAECAAIBAAsAAgAAAfscGAp6N1BzRFF2Q1p5HBaXxeXClv719_0BFuv8gvTz5cL0mQEAHBbX67Wy9r7M7yMWm6-AwLHD7tjhAQAW_M7c6gwVBkwVAhgZQUxXQVlTX0ZFRVNfVklBX01MX05PTl9PQhgKZ2xvYmFsX2NhcAA5DAAsHBUCABwVAgAcFQIAHBUCAAAcJoa04JUEFQYVBib-s-CVBBb4s-CVBBEVAhUEpuQGFuQGFuQGFkoWShZKFkoW2ggW5AYW5AYAHBwsFoCxiqS77IOtKhbrsrXZ5-KA56UBAAAWvNmYgAQWnuWigAQW7OKvggQW1u6pgAQVGBwU9AMU2AQAFQQm2ggW2ggW5ggRNQ4m5gg0BAAsLBbf1cWez42x9LEBFoeIyIu06pzMlAEAFvzO3OoMBii82ZiABBae5aKABBbW7qmABBbs4q-CBBgJNTg4MDk3OTIwFo4dFuYIJQQW8AEYBzU2MjcxMzQVAqEoAk9YDHoUARQBACgFdmlkZW8AHDUGGA1PWC1YUFQtMzY3NXgyFhRcLBaAsYqku-yDrSoW67K12efigOelAQAAFuCF7JYEFt6F7JYEAByWDBd7FK5H4XqEPwC8GwGIHk1MX0ZFRV9PUFRJTUlaRVJfSU5TVEFOQ0VfVFlQRQVvdGhlcgCsOA1wZWFjb2NrdHYuY29tAAAA	false	Avira URL Cloud: safe	unknown
https://acdn.adnxs.com/dmp/async_usersync.html	false		unknown
https://fra1-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&e=wqT_3QKMDOgMBgAAAwDWAAUBCICnrrUGEO6lm9zAztXhMRj2vpPq4pjpwlkqNgl7FK5H4XrUPxF7FK5H4XrUPxkAAAECCERAIREbACkRCcgxAAAAYGZm7j8w0K7IATiYAkDyVkgCUOzcie8BWOS1A2AAaO4CeMqGBoABAYoBA1VTRJIFBvBVmAHYBaABWqgBAbABALgBAcABBcgBAtABANgBAOABAPABAPoBCU1TTlVTRU4xMooCVHVmKCdhJywgNTU4NjgwNywgMCk7dWYoJ2knLCAxMDQ1MTA4NCwRFQBnARUUODIxNjM0GSo0cicsIDUwMTM3ODY2OCwBK_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_b2NpZD13aXNwciZwYz11NDc3gAMAiAMBkAOxhGWYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQAsgQPCAAQARjYBSBaKAAwADgCuAQAwASPl70iyAQA0gQPMTExMjIjRlJBMTo2NTQ52gQCCAHgBAHwBOzcie8BiAUBmAUAoAX___________8BwAUAyQWBphwAAPA_0gUJCQkMcAAA2AUB4AUB8AUB-gUECAAQAJAGAJgGALgGAMEGCSMo8D_QBpJC2gYWChAJERkBiBAAGADgBgHyBgIIAIAHAYgHAKAHAboHAkAByAfKhgbSBw0JES0BKwjaBwYBYvCkGADgBwDqBwIIAPAHk7TyD4oIbgpqAAABkQ44LAAxw1Z0C4bS7s_Lyvtb1BY_DWk2tXWFNDV92c1Tv1ORvvuQCD_1bOmyNE1WHK-ldWwG9GPW_6rWYsr-5IVZpps0KHp5GyTvWacRpSln_3rmFggE8D66XS9FgCjJc30SMRWBJxABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=06177c3d9abe793597d50774564d100ef3846cf6&type=nv&nvt=5&jm=1003&sid=8123044641899437510&vd=ct~0\|rr~0&sv=245&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=3282768&cid=3&cr=nv&sw=1280&sh=1024&pw=1263&ph=2835&ww=1280&wh=907&ft=2	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=690193593974239&correlator=3242437818539085&eid=31083341%2C31085800%2C31084507%2C31061691%2C31061693%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202407300101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D11f65a8e04c65a0c%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZ35rF4OO7lFb9jYCtF6ta7GzqNSQ&gpic=UID%3D00000e825459448b%3AT%3D1722520452%3ART%3D1722520452%3AS%3DALNI_MZFa-lTuYD19Ok3_rZle9UEElAp8w&cdm=www.msn.com&abxe=1&dt=1722520477753&adxs=804&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=srgg3meuo9wv&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477&top=www.msn.com&rumc=690193593974239&rume=1&vis=1&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=46240&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1722520477672&idt=64&adks=4055936480&frm=23&eo_id_str=ID%3Def2b815864208f51%3AT%3D1722520452%3ART%3D1722520452%3AS%3DAA-AfjYO7LU-u_JfCdMG8cQGaIKn	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.msn.com/en-us/money/personalfinance/ny-to-issue-bonus-child-tax-credit-payments-to-1m-fa	chromecache_402.1.dr, chromecache_698.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV	chromecache_730.1.dr	false	URL Reputation: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13D4or-dark	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327	chromecache_738.1.dr, chromecache_770.1.dr	false	Avira URL Cloud: safe	unknown
https://www.businessinsider.com/mediterranean-cruise-biggest-mistake-not-extending-trip-2024-1	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://pickuptrucktalk.com/2020/12/consumer-reports-2021-least-reliable-full-size-trucks/	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://imp.i114863.net/c/2330848/937020/11319?prodsku=HS7&u=https%3A%2F%2Fwww.sweetwater.com%2Fstor	chromecache_422.1.dr, chromecache_879.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationN	chromecache_1047.1.dr, chromecache_855.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/foodanddrink/recipes/i-made-10-minute-1-hour-and-10-hour-baked-potatoes-an	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/other/nothing-could-go-wrong-the-story-behind-the-paris-olympics-ca	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/$	chromecache_965.1.dr, chromecache_536.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationO	chromecache_1047.1.dr, chromecache_855.1.dr	false	Avira URL Cloud: safe	unknown
https://www.insider.com/review-best-method-for-making-baked-potatoes-air-fryer-2021-6	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gU1v-dark	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.us	chromecache_716.1.dr, chromecache_744.1.dr	false	Avira URL Cloud: safe	unknown
http://info.evidon.co.uk/more_info/9412	chromecache_878.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKvE-dark	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
http://ad.doubleclick.net/viewad/817-grey.gif	chromecache_764.1.dr, chromecache_813.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.cn/zh-cn/play/games/yiqiyoo1326/cg-yiqiyoo_1326	chromecache_403.1.dr	false	Avira URL Cloud: safe	unknown
https://api.msn.com:443/msn/Feed/me?$top=8&$skip=8&$filter=_t	chromecache_402.1.dr, chromecache_698.1.dr	false	Avira URL Cloud: safe	unknown
https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803	chromecache_965.1.dr, chromecache_536.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_625.1.dr, chromecache_1050.1.dr	false	URL Reputation: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glvR	chromecache_402.1.dr, chromecache_698.1.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/common/discovery/v2.0/keys	chromecache_650.1.dr, chromecache_710.1.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.de	chromecache_716.1.dr, chromecache_744.1.dr	false	Avira URL Cloud: phishing	unknown
https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js	chromecache_764.1.dr, chromecache_813.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/technology/tech-ceo-says-people-will-enjoy-paying-a-monthly-fee-to-us	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://rhettshullguitarcourses.com/p/inner-circle	chromecache_422.1.dr, chromecache_879.1.dr	false	Avira URL Cloud: safe	unknown
https://wealthofgeeks.com/best-used-cars/	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://d.agkn.com/pixel/10690/?che=656790244&cmid=32236948&sid=6031710&pid=400722228&cgid=592302385	chromecache_1024.1.dr	false	Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=display&reasons=AcuE4N78T7nFP2OP6u9SkTgkvEd0N5mSPD-8	chromecache_1024.1.dr	false	Avira URL Cloud: safe	unknown
https://www.businessinsider.com/why-cruise-drink-packages-are-not-worth-money-frequent-cruiser-opini	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_678.1.dr, chromecache_549.1.dr	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_603.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/	chromecache_509.1.dr, chromecache_503.1.dr	false	Avira URL Cloud: safe	unknown
https://www.businessinsider.com/best-and-worst-cruise-routes-to-book-frequent-traveler-2024-2	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://protected-by.clarium.io/pixel?tag=wt_	chromecache_884.1.dr, chromecache_837.1.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_678.1.dr, chromecache_549.1.dr	false	URL Reputation: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gDkX-dark	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.cn/zh-cn/play/games/yiqiyoo21482/cg-yiqiyoo2_1482	chromecache_403.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/lifestyle/weddings/9-old-fashioned-wedding-traditions-you-ll-only-find-in-	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/foodanddrink/foodnews/turn-canned-frosting-into-silky-buttercream-with-jus	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://rhettshullguitarcourses.com/p/fretboard-fundaments-rhythm-edition	chromecache_422.1.dr, chromecache_879.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gHJF-dark	chromecache_402.1.dr, chromecache_698.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/other/italian-boxer-quits-olympic-bout-after-just-46-seconds-agains	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gF9k-dark	chromecache_777.1.dr, chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://acdn.adnxs.com/video/player/vastPlayer/XandrVastPlayer.js	chromecache_988.1.dr, chromecache_498.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA12PNdd	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/foodanddrink/foodnews/neighborhood-gem-marks-50-years-of-serving-unapologe	chromecache_402.1.dr, chromecache_698.1.dr	false	Avira URL Cloud: safe	unknown
https://www.caesarrodney.org/energy-updates2/Delaware-Voters-Overwhelmingly-Oppose-Gas-powered-Car-B	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usatoday.com/money/blueprint/credit-cards/tipping-fatigue-growing-in-america/	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.cn/zh-cn/play/games/stickman-survival-challenge/cg-3dm_stickmansurvivalchallenge	chromecache_403.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glvR-dark	chromecache_402.1.dr, chromecache_698.1.dr	false	Avira URL Cloud: safe	unknown
https://www.businessinsider.com/vintage-photochrom-images-of-french-italian-riviera-and-monaco-2023-	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.cn/zh-cn/play/games/360610/cg-360_610	chromecache_403.1.dr	false	Avira URL Cloud: safe	unknown
https://login.chinacloudapi.cn	chromecache_716.1.dr, chromecache_744.1.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_716.1.dr, chromecache_744.1.dr	false	URL Reputation: safe	unknown
https://github.com/google/safevalues/issues	chromecache_603.1.dr	false	Avira URL Cloud: safe	unknown
https://ww2.arb.ca.gov/resources/documents/cars-and-light-trucks-are-going-zero-frequently-asked-que	chromecache_730.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/other/olympic-boxer-fears-being-killed-or-put-in-prison-if-she-retu	chromecache_777.1.dr	false	Avira URL Cloud: safe	unknown
https://trc.taboola.com/sg/msn/1/cm?taboola_hm=	chromecache_576.1.dr, chromecache_951.1.dr	false	Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=display&reasons=AcuE4N4E5md0V1Xh39fSggS2xhswMvwopTz_	chromecache_811.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.cn/zh-cn/play/games/7k7khtlxy744/cg-7k7k_htlxy744	chromecache_403.1.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.43	s-part-0015.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
185.89.211.116	unknown	Germany	29990	ASN-APPNEXUS	false
37.252.171.53	unknown	European Union	29990	ASN-APPNEXUS	false
70.42.32.31	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
104.19.132.76	cm.mgid.com	United States	13335	CLOUDFLARENETUS	false
13.248.245.213	unknown	United States	16509	AMAZON-02US	false
35.213.89.133	trace.popin.cc	United States	19527	GOOGLE-2US	false
142.250.185.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.1.44	tsdtocl.com	United States	54113	FASTLYUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
23.53.232.23	hbx.media.net	United States	33491	COMCAST-33491US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
23.212.88.20	unknown	United States	16625	AKAMAI-ASUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
64.233.167.157	unknown	United States	15169	GOOGLEUS	false
185.255.84.152	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
185.255.84.153	unknown	France	200271	IGUANE-FR	false
142.250.186.130	www.googletagservices.com	United States	15169	GOOGLEUS	false
142.250.181.230	s0.2mdn.net	United States	15169	GOOGLEUS	false
52.51.207.110	protected-by.clarium.io	United States	16509	AMAZON-02US	false
52.49.39.241	unknown	United States	16509	AMAZON-02US	false
104.18.22.145	cadmus.script.ac	United States	13335	CLOUDFLARENETUS	false
172.67.41.60	btloader.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.66	unknown	United States	15169	GOOGLEUS	false
37.252.171.21	fra1-ib.adnxs.com	European Union	29990	ASN-APPNEXUS	false
108.177.15.154	bid.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.213.228.238	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.184.230	unknown	United States	15169	GOOGLEUS	false
142.250.186.38	unknown	United States	15169	GOOGLEUS	false
52.210.207.58	unknown	United States	16509	AMAZON-02US	false
185.89.210.122	unknown	Germany	29990	ASN-APPNEXUS	false
52.201.161.41	privacycollector-production-457481513.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
95.101.111.140	unknown	European Union	12956	TELEFONICATELXIUSES	false
172.217.16.198	unknown	United States	15169	GOOGLEUS	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
142.250.185.129	pagead-googlehosted.l.google.com	United States	15169	GOOGLEUS	false
151.101.129.108	unknown	United States	54113	FASTLYUS	false
37.252.173.215	unknown	European Union	29990	ASN-APPNEXUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.244.159.8	monetengine-d.openx.net	United States	15169	GOOGLEUS	false
95.101.111.136	sync.im-apps.net	European Union	12956	TELEFONICATELXIUSES	false
34.250.202.249	unknown	United States	16509	AMAZON-02US	false
64.202.112.191	unknown	United States	22075	AS-OUTBRAINUS	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
104.22.75.216	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.1.108	unknown	United States	54113	FASTLYUS	false
172.67.69.19	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
151.101.65.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
18.239.83.91	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
185.89.210.90	m.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
172.241.51.68	unknown	Netherlands	394380	LEASEWEB-USA-DAL-10US	false
172.241.51.69	lb-sin.mgid.com	Netherlands	394380	LEASEWEB-USA-DAL-10US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1486081
Start date and time:	2024-08-01 15:53:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.msftconnecttest.com/redirect
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@31/996@252/67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 1 12:53:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.975112686557187
Encrypted:	false
SSDEEP:	48:8DPdJTRJlHjidAKZdA1FehwiZUklqehEJy+3:8P7P/y
MD5:	8C880A1056FCF1E7F4B1F25CBF03CDCC
SHA1:	A5F174B5227023DB4F6EAAF9D7109FB8EB0ED56A
SHA-256:	781B1D7CB391BF5E432821AD6A806A89D477FB5DC7DBDB8168E25FA5C18A0F76
SHA-512:	808F626F4CB6354B9DC6D362AAB785B33EB017D75A121E65FF33035814ADFE718AF14F0EAECD0CA3F1EB0ED3FDA68F582F1746E8DF0D00F6C9059B5A8CC17169
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....6t.6....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........}i.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-01T15:54:02.124622+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49989	152.199.21.175	192.168.2.16
2024-08-01T15:54:36.230761+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50488	142.250.184.226	192.168.2.16
2024-08-01T15:55:12.969002+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50636	184.28.88.227	192.168.2.16
2024-08-01T15:54:14.176035+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50151	142.250.184.226	192.168.2.16
2024-08-01T15:54:15.560418+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50181	142.250.186.98	192.168.2.16
2024-08-01T15:54:37.548918+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50503	142.250.186.98	192.168.2.16
2024-08-01T15:55:14.255821+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50644	151.101.65.108	192.168.2.16
2024-08-01T15:54:22.911614+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50291	142.250.184.226	192.168.2.16
2024-08-01T15:54:00.661544+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49971	152.199.21.175	192.168.2.16
2024-08-01T15:53:53.929157+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49874	2.23.209.19	192.168.2.16
2024-08-01T15:54:25.054593+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50344	2.23.209.19	192.168.2.16
2024-08-01T15:54:24.478474+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50336	142.250.186.98	192.168.2.16
2024-08-01T15:54:26.714992+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50386	2.23.209.39	192.168.2.16
2024-08-01T15:54:41.588831+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50540	142.250.184.226	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:42 UTC	800	OUT	GET /b?rn=1722520420876&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477%26content%3D1%26mkt%3Den-us&c8=MSN&c9=&cs_fpid=2167C29B4B9F6D7B2E5BD6554A866C84&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:42 UTC	850	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 01 Aug 2024 13:53:42 GMT Location: /b2?rn=1722520420876&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477%26content%3D1%26mkt%3Den-us&c8=MSN&c9=&cs_fpid=2167C29B4B9F6D7B2E5BD6554A866C84&cs_fpit=o&cs_fpdm=null&cs_fpdt=null set-cookie: UID=1CDa2c5839d994a042551271722520422; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=33696000 set-cookie: XID=1CDa2c5839d994a042551271722520422; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=33696000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: oNiL0UaNCDTSRQFIcQ1oLqegwTCk-c__brEH53rmwgPlq3MQSwtREQ==

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:43 UTC	887	OUT	GET /b2?rn=1722520420876&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2F%3Focid%3Dwispr%26pc%3Du477%26content%3D1%26mkt%3Den-us&c8=MSN&c9=&cs_fpid=2167C29B4B9F6D7B2E5BD6554A866C84&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CDa2c5839d994a042551271722520422; XID=1CDa2c5839d994a042551271722520422
2024-08-01 13:53:43 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Thu, 01 Aug 2024 13:53:43 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 0d3372129d548b57c62777e24b79e514.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: YksKL-nL7tt2papg2eXsmsla9_zuZSwxGAedShgB7VLkbMIoLDUyXg==

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:45 UTC	655	OUT	GET /uidmappixel?ext_uid=2167C29B4B9F6D7B2E5BD6554A866C84&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.outbrain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:45 UTC	375	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 13:53:45 GMT content-length: 0 x-traceid: 1f1fcbd8ffd56f6d744449fff9da2203 set-cookie: obuid=58669f0d-a9ee-47b8-8b7a-ff09a3e4d02d; Max-Age=7776000; Expires=Wed, 30 Oct 2024 13:53:45 GMT; Path=/; Domain=.outbrain.com;SameSite=None;Secure strict-transport-security: max-age=31536000; includeSubDomains; preload connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:45 UTC	660	OUT	GET /m?cdsp=516415&c=2167C29B4B9F6D7B2E5BD6554A866C84&mode=inverse&msn_src=ntp&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:46 UTC	591	IN	HTTP/1.1 400 Bad Request Date: Thu, 01 Aug 2024 13:53:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 11 Connection: close CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=omA8kx.YSig3vKyVNzuzeykG8YJVO2726ptVrM59EhI-1722520425-1.0.1.1-MWvt75AQz85p8PgTgo2.mTGBr70BErOUWOwbD1WhvEpC.lr5UqDfsyMXA32CE_0C5CaM1wBwuA1gz5i.vRLUFg; path=/; expires=Thu, 01-Aug-24 14:23:45 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ac650f64cc94374-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 13:53:46 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:45 UTC	559	OUT	GET /scripts/msn-sync.es5.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:45 UTC	755	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2580 x-amz-id-2: lGcvUPQRiszdF0U05sWChWEiRKUqNetGMSFwggVQMGqcTkS/0oy2M8TjoAAzpCsn9Negro+ZbxQ= x-amz-request-id: NR162XV81ABS2GQX x-amz-replication-status: COMPLETED Last-Modified: Tue, 07 Feb 2023 12:38:17 GMT ETag: "080ec673a335a99c9129c583ec0160d6" x-amz-server-side-encryption: AES256 x-amz-version-id: je6Bf.Z5LlhtO1oXQEsR563vlWDYJ055 Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Date: Thu, 01 Aug 2024 13:53:45 GMT Via: 1.1 varnish Age: 14389 X-Served-By: cache-nyc-kteb1890054-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1722520426.948788,VS0,VE1 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 9 Access-Control-Allow-Origin: *
2024-08-01 13:53:45 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 50 61 72 74 6e 65 72 43 6f 6f 6b 69 65 53 79 6e 63 4f 62 6a 65 63 74 3d 77 69 6e 64 6f 77 2e 50 61 72 74 6e 65 72 43 6f 6f 6b 69 65 53 79 6e 63 4f 62 6a 65 63 74 7c 7c 7b 7d 3b 76 61 72 20 74 3d 22 74 61 62 6f 6f 6c 61 20 67 6c 6f 62 61 6c 3a 75 73 65 72 2d 69 64 22 2c 65 3d 22 63 6f 6d 6d 75 6e 69 74 79 5f 6c 61 74 65 73 74 5f 6d 65 5f 69 64 22 2c 6e 3d 22 6d 2d 22 2c 72 3d 22 4d 55 49 44 22 2c 63 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2c 6f 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 69 66 28 63 29 74 72 79 7b 6e 3d 63 2e 67 65 74 49 74 65 6d 28 74 29 7d 63 61 74 63 68 28 74 29 7b 6e 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 7d 2c 69 Data Ascii: !function(){try{window.PartnerCookieSyncObject=window.PartnerCookieSyncObject\|\|{};var t="taboola global:user-id",e="community_latest_me_id",n="m-",r="MUID",c=window.localStorage,o=function e(){var n=null;if(c)try{n=c.getItem(t)}catch(t){n=null}return n},i
2024-08-01 13:53:45 UTC	1202	IN	Data Raw: 5f 68 6d 3d 22 2e 63 6f 6e 63 61 74 28 6e 29 2e 63 6f 6e 63 61 74 28 72 3f 22 26 75 69 3d 22 2e 63 6f 6e 63 61 74 28 72 29 3a 22 22 29 3b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 66 65 74 63 68 29 7b 76 61 72 20 69 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 69 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6f 2c 21 31 29 2c 69 2e 73 65 6e 64 28 29 7d 65 6c 73 65 20 66 65 74 63 68 28 6f 2c 7b 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 7d 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 2f 31 2e 32 2f 6a 73 6f 6e 2f 74 61 62 Data Ascii: _hm=".concat(n).concat(r?"&ui=".concat(r):"");try{if("function"!=typeof window.fetch){var i=new XMLHttpRequest;i.open("GET",o,!1),i.send()}else fetch(o,{credentials:"include"})}catch(t){}}},l=function t(e){var n;return"https://api.taboola.com/1.2/json/tab

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:46 UTC	652	OUT	GET /cksync.php?type=nms&cs=3&ovsid=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1 Host: hbx.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:46 UTC	924	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 60 Content-Type: image/gif Set-Cookie: visitor-id=3655220266390502000V10; Expires=Fri, 01 Aug 2025 13:53:46 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: data-nms=2167C29B4B9F6D7B2E5BD6554A866C84~~3;Expires=Fri, 01 Aug 2025 13:53:46 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 01 Aug 2024 13:53:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Aug 2024 13:53:46 GMT Connection: close
2024-08-01 13:53:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-08-01 13:53:46 UTC	17	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:46 UTC	603	OUT	GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:46 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 13:53:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBGqTq2YCEFZxBdBS_Wk_SfAFEaSEX3sFEgEBAQHkrGa1ZgAAAAAA_eMAAA&S=AQAAAoyFP6CTH2SiTxjrZeMOlAw; Expires=Fri, 1 Aug 2025 19:53:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-08-01 13:53:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:46 UTC	693	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=2167C29B4B9F6D7B2E5BD6554A866C84 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:46 UTC	946	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://www.msn.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=2167C29B4B9F6D7B2E5BD6554A866C84;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 01-Aug-2025 13:53:46 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=2167C29B4B9F6D7B2E5BD6554A866C84;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 01-Aug-2025 13:53:46 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Thu, 01 Aug 2024 13:53:46 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890033-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1722520427.663911,VS0,VE18 Vary: Accept-Encoding X-vcl-time-ms: 18 transfer-encoding: chunked
2024-08-01 13:53:46 UTC	4	IN	Data Raw: 34 34 0d 0a Data Ascii: 44
2024-08-01 13:53:46 UTC	68	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 32 31 36 37 43 32 39 42 34 42 39 46 36 44 37 42 32 45 35 42 44 36 35 35 34 41 38 36 36 43 38 34 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"2167C29B4B9F6D7B2E5BD6554A866C84","isNewUser":false}}
2024-08-01 13:53:46 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.msftconnecttest.com/redirect

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Windows Analysis Report
http://www.msftconnecttest.com/redirect

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	510	OUT	GET /cksync.php?type=nms&cs=3&ovsid=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1 Host: hbx.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3655220266390502000V10; data-nms=2167C29B4B9F6D7B2E5BD6554A866C84~~3
2024-08-01 13:53:47 UTC	702	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 60 Content-Type: image/gif Set-Cookie: data-nms=2167C29B4B9F6D7B2E5BD6554A866C84~~3;Expires=Fri, 01 Aug 2025 13:53:47 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 01 Aug 2024 13:53:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Aug 2024 13:53:47 GMT Connection: close
2024-08-01 13:53:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-08-01 13:53:47 UTC	17	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	640	OUT	GET /mapuid?suid=2167C29B4B9F6D7B2E5BD6554A866C84&sid=16&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:47 UTC	640	IN	HTTP/1.1 302 Found Date: Thu, 01 Aug 2024 13:53:47 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=2393155272910869609235; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 30 Oct 2024 13:53:47 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=2393155272910869609235; Max-Age=7776000; Expires=Wed, 30 Oct 2024 13:53:47 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	634	OUT	GET /cs/msn?id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:47 UTC	291	IN	HTTP/1.1 200 OK Set-Cookie: __mguid_=22210ca7b47d2d021ootlg00lzbc6s5a; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Thu, 01 Aug 2024 13:53:47 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	710	OUT	GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=2167C29B4B9F6D7B2E5BD6554A866C84&external=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:47 UTC	465	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: image/gif expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=2b844770202bdc6d5ea525561b472683; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Thu, 01 Aug 2024 13:53:47 GMT content-length: 49 x-envoy-upstream-service-time: 1 server: ayl-lb-fra02 connection: close
2024-08-01 13:53:47 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 ff ff ff ff ff ff fe 01 02 00 00 00 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	632	OUT	GET /cs/msn?id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1 Host: trace.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:48 UTC	289	IN	HTTP/1.1 200 OK Set-Cookie: __mguid_=22210ca7b47d2d0216ms6j00lzbc6shf; Path=/; Domain=popin.cc; Max-Age=31536000; Secure; SameSite=None Date: Thu, 01 Aug 2024 13:53:47 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	853	OUT	GET /mapuid?member=280&user=2167C29B4B9F6D7B2E5BD6554A866C84;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2167C29B4B9F6D7B2E5BD6554A866C84%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: m.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:47 UTC	1676	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 01 Aug 2024 13:53:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://m.adnxs.com/bounce?%2Fmapuid%3Fmember%3D280%26user%3D2167C29B4B9F6D7B2E5BD6554A866C84%3B%26gdpr%3D0%26gdpr_consent%3D%26redir%3Dhttps%253A%252F%252Fm.adnxs.com%252Fseg%253Fadd%253D5159620%2526redir%253Dhttps%25253A%25252F%25252Fib.adnxs.com%25252Fsetuid%25253Fentity%25253D483%252526code%25253D2167C29B4B9F6D7B2E5BD6554A866C84%252526gdpr%25253D0%252526gdpr_consent%25253D AN-X-Request-Uuid: 1e63d218-b870-4ed0-8eff-4e8e24e15188 Set-Cookie: XANDR_PANID=Np7GTdzYP8gI3plqc3O7DXpUrYKbdpf8Z2IA0GYzdtE_OjGz6PirM1rwiovYSm3tGf8hC5Q9DbAvBrAWfQLY4jLKbFuR1bIPP9Tu2WERPm0.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 30-Oct-2024 13:53:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 20-Jul-2034 13:53:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6450743212348071798; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 30-Oct-2024 13:53:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:47 UTC	645	OUT	GET /getuid?https://c.bing.com/c.gif?anx_uid=$UID&Red3=MSAN_pd&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:47 UTC	1506	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 01 Aug 2024 13:53:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc.bing.com%2Fc.gif%3Fanx_uid%3D%24UID%26Red3%3DMSAN_pd%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: 113b897f-09fe-4d3c-b987-eb4213b5fb1a Set-Cookie: XANDR_PANID=9xaBrdxDx_6cE-bNSVUiJ8lsEh_W_Xrc_s2L9FH_aXgEMYq4BQwvinsLPDLJGZouwxphtXOGGlQARf2SrOdUX_hhHSYLRQHSqrbtP9y0cqM.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 30-Oct-2024 13:53:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 20-Jul-2034 13:53:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2303540712821283440; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 30-Oct-2024 13:53:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:48 UTC	638	OUT	GET /sync?ssp=msn&id=2167C29B4B9F6D7B2E5BD6554A866C84&gdpr=0&gdpr_consent= HTTP/1.1 Host: code.yengo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 13:53:48 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 13:53:48 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15768000; includeSubdomains; preload X-Content-Type-Options: nosniff

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:48 UTC	675	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=2393155272910869609235; tluid=2393155272910869609235
2024-08-01 13:53:48 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 13:53:48 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=2393155272910869609235; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 30 Oct 2024 13:53:48 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=2393155272910869609235; Max-Age=7776000; Expires=Wed, 30 Oct 2024 13:53:48 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-08-01 13:53:48 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Timestamp	Bytes transferred	Direction	Data
2024-08-01 13:53:48 UTC	615	OUT	GET /scripts/ifs.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=2167C29B4B9F6D7B2E5BD6554A866C84; t_pt_gid=2167C29B4B9F6D7B2E5BD6554A866C84
2024-08-01 13:53:48 UTC	748	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2074 x-amz-id-2: SDQN4VcsusWgsH/Bqt1ECNpjGwFIDcZvnfAvPJDT5k1DKjcNJUEc9t/ufxBA7E7owGQPY1yWFUQ= x-amz-request-id: PP8DD1YHHZNSYDW3 x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Mar 2023 12:23:45 GMT ETag: "93d5bb91c9a48c4edbc164a65354b00c" x-amz-server-side-encryption: AES256 x-amz-version-id: hHYTz8VC1WtMBCSsI42K1YQZ3IXPhs3V Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Date: Thu, 01 Aug 2024 13:53:48 GMT Via: 1.1 varnish Age: 8707 X-Served-By: cache-ewr18155-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1722520428.439605,VS0,VE1 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 51 Access-Control-Allow-Origin: *
2024-08-01 13:53:48 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 74 73 64 74 6f 63 6c 22 2c 65 3d 22 21 2d 23 40 22 2c 74 3d 22 75 6c 22 2c 69 3d 22 68 74 74 70 73 3a 22 2c 6f 3d 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 30 63 32 52 30 62 32 4e 73 4c 6d 4e 76 62 51 3d 3d 22 29 2c 72 3d 7b 7d 2c 61 3d 69 2c 64 3d 2d 31 2c 63 2c 75 3b 74 72 79 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 5b 65 2e 69 64 5d 26 26 28 72 5b 65 2e 69 64 5d 28 65 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 64 5d 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 64 61 74 61 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 26 26 69 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 6e 26 26 73 28 69 29 Data Ascii: !function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)
2024-08-01 13:53:48 UTC	696	IN	Data Raw: 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 46 41 53 43 2e 74 66 61 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 74 3d 77 69 6e 64 6f 77 2e 54 52 43 26 26 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 69 3d 43 28 29 2c 6f 3d 62 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 74 7c 7c 69 7c 7c 6f 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: UserId.getUserId?window.TFASC.tfaUserId.getUserId():null,t=window.TRC&&window.TRC.pageManager&&"function"==typeof window.TRC.pageManager.getUserId?window.TRC.pageManager.getUserId():null,i=C(),o=b();return e\|\|t\|\|i\|\|o},T=function n(e){window.addEventListen