Edit tour

Windows Analysis Report
http://nxejt.polluxcastor.top

Overview

General Information

Sample URL:	http://nxejt.polluxcastor.top
Analysis ID:	1494472
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

HTML page contains obfuscated javascript

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://nxejt.polluxcastor.top/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,6656110166945875421,12403813930226990931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6592 --field-trial-handle=1964,i,6656110166945875421,12403813930226990931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse

Matcher: Template: microsoft matched with high similarity

HTML page contains obfuscated javascript

Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse

HTTP Parser: window.isActive=true;(function(){var casprInvocation = function casprInvocation( rulesArg, tag,

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=d6599173-67d2-4700-8fd1-cc5279a4822d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2241A39A44E3A34612A1432E62363B6EC9%22%7d	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: Number of links: 0

Source: https://www.bing.com/news	HTTP Parser: Total embedded image size: 121527
Source: https://www.bing.com/news/search?q=2024+Election&newsse=1&form=NSBABR	HTTP Parser: Total embedded image size: 39826

Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse

HTTP Parser: Base64 decoded: {"id":"23528a9c-8972-43e5-8d8a-d444a783f6ce","meta":{"interactionType":"silent"}}

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=d6599173-67d2-4700-8fd1-cc5279a4822d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2241A39A44E3A34612A1432E62363B6EC9%22%7d	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: Title: Redirecting does not match URL

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=d6599173-67d2-4700-8fd1-cc5279a4822d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2241A39A44E3A34612A1432E62363B6EC9%22%7d	HTTP Parser: No favicon
Source: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president/ar-AA1oZEfb?ocid=BingNewsBrowse	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=0&seller_id=280&pub_id=43801	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=2	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CL6Q0AIQ1cag3QIY4r67hgIwAQ&v=APEucNU40TOw-dKm6RDEq3-DiIwufatYJ2y-mdJJq13AuCRObS3oU4YmNY8Afif4hbDQ9ZdYieZYSqqT9nXJPci19ReWJGdahA	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=d6599173-67d2-4700-8fd1-cc5279a4822d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2241A39A44E3A34612A1432E62363B6EC9%22%7d	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=d6599173-67d2-4700-8fd1-cc5279a4822d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2241A39A44E3A34612A1432E62363B6EC9%22%7d	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:50262 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.16:50898 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: nxejt.polluxcastor.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/yktrlw8 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_cTCssTaHR0cAEv8LB0cmFjZS5tZWRpYWdvLmlvL2FwaS9sb2cvd2lubm90aWNlP3RuPWJjMGY0MzUyNGRhNTYwMTFlMTA0MTQ3NWFkMDYxZTM0Jndpbmxvc3M9MSZpZD1jYWRkYjhjZmMwMzE1Y2QyYzIxYTZmM2ExMjM4MGM3NiZzZWF0X2lkPSR7QVVDVElPTl9TRUFUX0lEfSZjdXJyZW5jeT0ke0FVQ1RJT05fQ1VSUkVOQ1l9JmJpZF8yNwAMQklEXwE2CGFkXzIYAABBCRcFkwwmaW1wAR5oMzY1MjI4MjQ5NjE3MzMxNzA3MCZwcmljZT0kFYfwT1BSSUNFfSZ0ZXN0PTAmdGltZT0xNzIzOTgzNTg2JmRwPTVGdVFJZ1BUNjhHcFh2RXdYcmV1UW8zdVFvWDA2cmplMjBab2JDUGsyMmMmZHNwAXj0PQgyMiZ1cmw9T09NSEg0Rl82eVpla01EaUdzUVo0RHBoS1FRcTFBWnNveTJNaXlsZWluOFhvYmYzazlmbUNLUlpiV0dmdngxbkVKb1hLajNyVnJlRDAzMWlHYUJXSWtZY3FHZlF3akk2UGNpNzFKZmZVRGN3ckJ3TjFfMVRDWjdxNjNOdG42X1RaZEtCTEJyTmQ1ZG5pMGhLd3d6WlZUbTltMHJRYkFlRi1xdVZ0eXpVWWZ4U3hEcGhXZ2RocEVtSFBDUjRLblRQVmhKcDZzc1Zwb2Y0ejc4UWhrXzhsTVRhRGttMVNyWlUwZ19kYXRYVjRNRTVoRjB6SXdMVUlQNVhSQlVjbmFRbHlQcFdmLVZfSWtZQXE3OWpKdnByVXR2NXhGOHdkU2ZhMldhekhqQ2FWN28wX1RXZWdzNTJnVUtTVDFyMGFxMUV6X0JaalJNVXJZUzNXUXQ2N3daTmtWRlBoUXJVVzV6bUdnUHNaYk5McFdEWFd4ajdlS2hEekVNSkw2dFVFYm5ZOXJ5SDdvbThtNTU4ejBRRDRockZDeU8yVGx3WUNHX183cEtBd0Z3WUg3NU5hd2NGTHhwUjF1SXJKYWlJa1ZjR2RFdUx2YW1MVXhDeWpIbzJqT2hkTFZsM05PSlJUMEJyU0FsQ0xGczlBWHBfc0hSOWFxckM5a19JQzBseW93V3djZ053VjNORTFNc19OOVd3WkcxeHQtNzZoWmI4WG1Bal9OQ0tWQmZpY19zOFdubFN4RWNjQ0hQLUhCeUZTXzgyUVV5cnc2SXJKSE5UZGEzQUViclZuVjh1blgwY1lrOWJrXzRLS3JhM0JCLU5BWEhmX0E3MUhRLW5oNWxHN29mRmFBeEk5d1kzWUp6TWhFTGczb3NnaDlVZEZ1NjAzaThfbmE4TFhOWnJ5aldkX3BGZ25VVXdjRWptdnRJSFVtWUJLZk8wY25HNFlLOE5ZM296dUVYOWZXQTUxMVdGdnNMLWZQUXpybnJMWm5PLXMtNFhpS1hpdGwtUUFGS1A2NU9zWGVxcWdkME1uLWpLdHZLRG12SzJfWldMV3FFUzlvVnZOVUM0aHllSWJ5S1lidzVMSmhRX01mbFZ6S21oZ0VfVHZuWnZHOEpMNnJPTkdIOWNub0ZmT3NfdEVuRlVnVjNxZTRWZDA5RWo3LThPUVFTUHVXV0JlWF9Kc2ZhbjFsN1JjUTFpS3RhNU1HVzlXalYxalIydzBUOVE1U215Z25uY3J2RGg2WFBFMkx3YXRqNlZpTUFjQ25BR3JwbDFWaHZHVUVMdkVJRXRtUENVOFZla0NicnBpcHJ3am1vOWhUZ1NNeVczLWRpNkNQaHpjM2VzYmFieWxPWURSSHJPd0hVbTF0dTZJc0M4M0liaGJNSWxIRDE1cldQYlVPNXZwNE1LeTRNWklfb2NXVFdrbFlhTnVpYXVwTjdPQmdvMEk1OHVhbEtMUmlDTDN4OWlScGFBMDllbVVfWmI1YnU5MnZpQ0FtQl9YRnNNY1pyMlFOQmUzSk5zdFVpVVVvTkhTa3FZbWxURDlBUUlzRUotbEpCWTBCQXdWTkdNa0JjQXhqcTVCbjMteXNSaW01R21KdTFKcjZwOXUwdlk1c3NCd1BHSVlkS0JQM2gyOXVpRFJVWGFtb3JQYUlRZmR4TzgxcXVxbGh0enlxOFJuR1RqTW1pdHVMUF9Ec3RYWjhWV0Jad2Fhc1ZndlZZUHg0U1RnOGcxTmlFcnhzaVI5TUxpb3FKTk44UHZFWlhpVHVoR3hHekpwN0F0ek1FOF9ubUszdU5JcmVsWDBsZWh2TGFyUU4wbGQzS1R0M2RkWEpvOFBjWmFZbG5WUXpiM09lcDdJTnd0UlRUWGtoV08wN1pKamJHdEc1X1BZYXpiYjdrQW5rMU9uTUJ6YS1CYV9jZTV3dGVxXzMtclBBM01wV0JyVXhlWEpqNUUtSzdKc24ySFBST2ZmMTBvaHJuYnZRZ1dvNU01Y3JVVE42RjRmWUFtazgtU2swbjFqbFR4RlhxYXEzN3FSTVZURXE2aU1FVkRMVnlwWms3N25weDgzcTg0aG9RUGxuY2pSblgxTUdLZHJJbjBMYnFibzZzV0daclpYT2ZNWjNpTU41UUhO
Source: global traffic	HTTP traffic detected: GET /ot?ps=7935dc7bb90d0afd87f6b33edd2845c6ed98be95&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQjizYe2BhAFGZvIzAUuj4U_IWCLgoU4e4Q_KJgCMLhoOI_DcUDfyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDaAAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSDfyNkJKMvbhLIBMAU5mw1kAEERZBhIAFAAWg0JCUUcAAAQABgAYhIVDwARERgAakoUAARwAA..&pp=0.01&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fic%3Ftn%3Dbc0f43524da56011e1041475ad061e34%26trackingid%3D370a60796b15ab9f380c2ccb3eb902c0%26acid%3D699%26data%3DzQaO1iI5PE3wBOil9pC4FkGtxe4mmLHuqnNk6lfLy81PRPvi3n_fMnRswZtZGMtKMLwi2mYdEf_ciUYr8V2COSsXwOXyikjrWJgc0E7Yw5_dJ6rzk4uBWUKfdOn66e3MNk_aYJ504Euve_Y5HAFE6iPvWwGfoV1esP9w-4sXE-wVq_VWY0Z02qrtNQMWaeZGRmW6kvVAfnYTFEZ6orObRzA855ATKNdgXPBjErfLGO4vOTuGgeN8G-9agmIeTaFrwHYN6TK-NcMiui9nTf2DD-p29_dPSvWncXazMIVvUg8cbN1nyBEZ-7P-Dy45AiB_fu56RxTJq3bTxhNf46T7VEluF19b37Cu0K5Ebim-Wgd8BNydrhvYYUbEza8oTuPFkL5zNdedL6qh8rIOl1aoX0a4BF-sbI1GRnl7xR1y__p9GaqCCSLPo0_cdLXS_yiLi2kLXZe8F1r9fkywnLVFpv_nuelagZb8dIAfzHOcm0-WXRxqKEBcrp0bGsVdJHBUYECke1I7nuH5VVhtpSbbtd838gj4NEycaYDxnGI3i5729_ymkTztoVqsBwiAjllrIlbNhZLOn1ehUY7kI0tyHzUfks96cMQWSqSgcb6wCrmt2JypuJ-6QJCmf0o91cteNiDBkowzuPH5t7rIe35bt2kNHT_EwIsXaQXHpCB1LsQhaMWS6T_2iXPlMT2FCygpQVcQ_heL9lP1HbKFDYUOFhrRy-wkNjbIOSSmrS5Hiuw94EeUa3GsCYOrf4_V9QBA446v290fKmrnOsPYrUiTey47OfrYC3IKokGOlv1aTtgG32ng2j1aPg7is5Wo520tFBXseXjbG5Hippa2zRZhsF6FFEyqggmYIXfQ0AWVndCFL0rJTkErDpbLBebVmJXfNL3OANlvwDEuPbD4OagoISYEYO0BkuKNUlwx-hmexwlm-pimZK7a17MHu4jIDD-a1VYgsLriSFZPzYPZ8Vg1NxQHI06yPRdNlk7nday3xrCp9LdD3tJR-xO1nAvUwTcONWXlNth7X8aHLmrohDwa4KM7mLS8GZLtuCd_I0d3omq1ImUnwPrAVxuW9s834iPBiazP2jOh2rf_wVfv0NHMV0RZz4KrhRg8vVTIJlxgV0Aoq7GE9WK07gzPBTOuOkKUknFcGPBTq_gGz4L4vBt60XQwbk5hd4TCllIW_E9a4WwPHxj2_Mu7drvEMbdHYuNDNu216GfhripwIE_bgdQrCEfGtoO7X6y64F82ZV8URNJGbSe1qr2uQuOAynnGuo7TpCJ9i8u7Qm9lFzoYlew-2sFbqptwJOf9CSEbG2ksrpc%26uid%3D2374652898496144167%26mguid%3D%26ap%3D%7BAUCTION_PRICE%7D%26tid%3D%7Btid%7D HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/yktrlw8 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_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
Source: global traffic	HTTP traffic detected: GET /ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=370a60796b15ab9f380c2ccb3eb902c0&acid=699&data=zQaO1iI5PE3wBOil9pC4FkGtxe4mmLHuqnNk6lfLy81PRPvi3n_fMnRswZtZGMtKMLwi2mYdEf_ciUYr8V2COSsXwOXyikjrWJgc0E7Yw5_dJ6rzk4uBWUKfdOn66e3MNk_aYJ504Euve_Y5HAFE6iPvWwGfoV1esP9w-4sXE-wVq_VWY0Z02qrtNQMWaeZGRmW6kvVAfnYTFEZ6orObRzA855ATKNdgXPBjErfLGO4vOTuGgeN8G-9agmIeTaFrwHYN6TK-NcMiui9nTf2DD-p29_dPSvWncXazMIVvUg8cbN1nyBEZ-7P-Dy45AiB_fu56RxTJq3bTxhNf46T7VEluF19b37Cu0K5Ebim-Wgd8BNydrhvYYUbEza8oTuPFkL5zNdedL6qh8rIOl1aoX0a4BF-sbI1GRnl7xR1y__p9GaqCCSLPo0_cdLXS_yiLi2kLXZe8F1r9fkywnLVFpv_nuelagZb8dIAfzHOcm0-WXRxqKEBcrp0bGsVdJHBUYECke1I7nuH5VVhtpSbbtd838gj4NEycaYDxnGI3i5729_ymkTztoVqsBwiAjllrIlbNhZLOn1ehUY7kI0tyHzUfks96cMQWSqSgcb6wCrmt2JypuJ-6QJCmf0o91cteNiDBkowzuPH5t7rIe35bt2kNHT_EwIsXaQXHpCB1LsQhaMWS6T_2iXPlMT2FCygpQVcQ_heL9lP1HbKFDYUOFhrRy-wkNjbIOSSmrS5Hiuw94EeUa3GsCYOrf4_V9QBA446v290fKmrnOsPYrUiTey47OfrYC3IKokGOlv1aTtgG32ng2j1aPg7is5Wo520tFBXseXjbG5Hippa2zRZhsF6FFEyqggmYIXfQ0AWVndCFL0rJTkErDpbLBebVmJXfNL3OANlvwDEuPbD4OagoISYEYO0BkuKNUlwx-hmexwlm-pimZK7a17MHu4jIDD-a1VYgsLriSFZPzYPZ8Vg1NxQHI06yPRdNlk7nday3xrCp9LdD3tJR-xO1nAvUwTcONWXlNth7X8aHLmrohDwa4KM7mLS8GZLtuCd_I0d3omq1ImUnwPrAVxuW9s834iPBiazP2jOh2rf_wVfv0NHMV0RZz4KrhRg8vVTIJlxgV0Aoq7GE9WK07gzPBTOuOkKUknFcGPBTq_gGz4L4vBt60XQwbk5hd4TCllIW_E9a4WwPHxj2_Mu7drvEMbdHYuNDNu216GfhripwIE_bgdQrCEfGtoO7X6y64F82ZV8URNJGbSe1qr2uQuOAynnGuo7TpCJ9i8u7Qm9lFzoYlew-2sFbqptwJOf9CSEbG2ksrpc&uid=2374652898496144167&mguid=&ap={AUCTION_PRICE}&tid={tid} HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=370a60796b15ab9f380c2ccb3eb902c0&acid=699&data=4Zg2Cqn-aZVCye87a8UGEA0Bk2lh0a1eYOg-LJrvXt8UvrC2AXBS5Eq8bwkkb0HgJjdxhq_qI5nFuRR0yNoZ4U9UlCFwLKhY3yeY9iA6tXzNYdvHxBBSkIH1StvtgVEMVSUkVGSkjmp-MVlVP2vE1gE0MF93CngafA5q_o8zuCDnmWMF2-FYeBae3tVjM6-uHOiFA2kNHfHnCdHk_6c_hShOEEwL1o1j0IJ4l-K6wGuzCEV6eMJ1jyaMsryDn4q1-fm4KZqlnHcIRCf_qXM-jctIk6j5LUGXFOsx0BccoAAx6Cl0tEcpc_FGPXoI12RCPKO9tYw61r7z9N6EEoR2sMxnuv8sTH5nA8Eqf_Js3hta8EE7iWV-xGNRxRFcE6H08JnIO6VOECmZzjwaM47UWqmRQFVGP0Zqme9x3Ros8-4wHndLamIzaLX-i1T2sxYY-e7S94dQPo9TVeGJ6jE7UfAZqK1TxdwSLxZZv3nCsBCBd68hjT5oUFfH9YpPPB-vkmN4s0QfH_ER7VDYB-d0w9qG3LhlEnR8CMAgYQIaFAcQgPJfvsk2rbuF4UN1lJ2Dd1cfSaIU3r2f4G9guYatV6AgE3t4nR81217suBzRiNt5vQWxkuR6flZAI_cZCMHiTZ3ZHaI5FTCc0hvKbkJqFdeOVyRmoZHWPRduWFi4YpNQvLcbWArgxLFnCRjUEF5ahaJI7a1GA4OZ_RzClevkXOxC9_TPy5mp3Ej5SzUY07erMQINxuz5U9uviCVBVU7KrWtILDwvDP5WZ9cGSlFPVF3ePlfZXwOd9u5DGl0I5U7nPmW-_y6TFVXaxc9Oq8LJmvFwcBirpw-Wt02aDhDcvNYDSDMmk1C11wDfrjiZaiq2T3xqgF0mHCdSQMZ9nmFRh8Iv3yP5_1YSTeyUjh_ZjPvfzIWDkrESdT2elCOdfmeIz3We2lokeKY57IfrWwdxMyMlf5B2he6t7T3FwtOfVZ9uUuieEAE-DtPTiwSLRAuQ_yHr82mCjAzFghKB3L-fUuzpYxQ6tXV5yx9mpYo4eFBm2EXmjsep0YyqKSIVPv2JyfWXpLxxF6JrESH0jcPET7xmSj0h4jXC9pAqpKgZX61C6_OLg-NpzG27-_eOCGG0kM_lpxs5rsoozOIawspId6NFhvDaogSaM0Wj-FTkYfvD2zGejooGtsCgPoLRr3sJRrOuQ5PjYpt5buWcipSXhPll9mo_SawwjATRTuugvYnQ0PmmZpa9P5eAiSL4BK5KwvJDAYDUC6oPwJ7gn5j-SZgkeR_mwr_99cjJ9GPCa3dBSOPd0XreO0wxmNfsPbU&uid=2374652898496144167&mguid=&ap={AUCTION_PRICE}&tid={tid} HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_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
Source: global traffic	HTTP traffic detected: GET /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_cTCssTaHR0cAEv8LB0cmFjZS5tZWRpYWdvLmlvL2FwaS9sb2cvd2lubm90aWNlP3RuPWJjMGY0MzUyNGRhNTYwMTFlMTA0MTQ3NWFkMDYxZTM0Jndpbmxvc3M9MSZpZD1jYWRkYjhjZmMwMzE1Y2QyYzIxYTZmM2ExMjM4MGM3NiZzZWF0X2lkPSR7QVVDVElPTl9TRUFUX0lEfSZjdXJyZW5jeT0ke0FVQ1RJT05fQ1VSUkVOQ1l9JmJpZF8yNwAMQklEXwE2CGFkXzIYAABBCRcFkwwmaW1wAR5oMzY1MjI4MjQ5NjE3MzMxNzA3MCZwcmljZT0kFYfwT1BSSUNFfSZ0ZXN0PTAmdGltZT0xNzIzOTgzNTg2JmRwPTVGdVFJZ1BUNjhHcFh2RXdYcmV1UW8zdVFvWDA2cmplMjBab2JDUGsyMmMmZHNwAXj0PQgyMiZ1cmw9T09NSEg0Rl82eVpla01EaUdzUVo0RHBoS1FRcTFBWnNveTJNaXlsZWluOFhvYmYzazlmbUNLUlpiV0dmdngxbkVKb1hLajNyVnJlRDAzMWlHYUJXSWtZY3FHZlF3akk2UGNpNzFKZmZVRGN3ckJ3TjFfMVRDWjdxNjNOdG42X1RaZEtCTEJyTmQ1ZG5pMGhLd3d6WlZUbTltMHJRYkFlRi1xdVZ0eXpVWWZ4U3hEcGhXZ2RocEVtSFBDUjRLblRQVmhKcDZzc1Zwb2Y0ejc4UWhrXzhsTVRhRGttMVNyWlUwZ19kYXRYVjRNRTVoRjB6SXdMVUlQNVhSQlVjbmFRbHlQcFdmLVZfSWtZQXE3OWpKdnByVXR2NXhGOHdkU2ZhMldhekhqQ2FWN28wX1RXZWdzNTJnVUtTVDFyMGFxMUV6X0JaalJNVXJZUzNXUXQ2N3daTmtWRlBoUXJVVzV6bUdnUHNaYk5McFdEWFd4ajdlS2hEekVNSkw2dFVFYm5ZOXJ5SDdvbThtNTU4ejBRRDRockZDeU8yVGx3WUNHX183cEtBd0Z3WUg3NU5hd2NGTHhwUjF1SXJKYWlJa1ZjR2RFdUx2YW1MVXhDeWpIbzJqT2hkTFZsM05PSlJUMEJyU0FsQ0xGczlBWHBfc0hSOWFxckM5a19JQzBseW93V3djZ053VjNORTFNc19OOVd3WkcxeHQtNzZoWmI4WG1Bal9OQ0tWQmZpY19zOFdubFN4RWNjQ0hQLUhCeUZTXzgyUVV5cnc2SXJKSE5UZGEzQUViclZuVjh1blgwY1lrOWJrXzRLS3JhM0JCLU5BWEhmX0E3MUhRLW5oNWxHN29mRmFBeEk5d1kzWUp6TWhFTGczb3NnaDlVZEZ1NjAzaThfbmE4TFhOWnJ5aldkX3BGZ25VVXdjRWptdnRJSFVtWUJLZk8wY25HNFlLOE5ZM296dUVYOWZXQTUxMVdGdnNMLWZQUXpybnJMWm5PLXMtNFhpS1hpdGwtUUFGS1A2NU9zWGVxcWdkME1uLWpLdHZLRG12SzJfWldMV3FFUzlvVnZOVUM0aHllSWJ5S1lidzVMSmhRX01mbFZ6S21oZ0VfVHZuWnZHOEpMNnJPTkdIOWNub0ZmT3NfdEVuRlVnVjNxZTRWZDA5RWo3LThPUVFTUHVXV0JlWF9Kc2ZhbjFsN1JjUTFpS3RhNU1HVzlXalYxalIydzBUOVE1U215Z25uY3J2RGg2WFBFMkx3YXRqNlZpTUFjQ25BR3JwbDFWaHZHVUVMdkVJRXRtUENVOFZla0NicnBpcHJ3am1vOWhUZ1NNeVczLWRpNkNQaHpjM2VzYmFieWxPWURSSHJPd0hVbTF0dTZJc0M4M0liaGJNSWxIRDE1cldQYlVPNXZwNE1LeTRNWklfb2NXVFdrbFlhTnVpYXVwTjdPQmdvMEk1OHVhbEtMUmlDTDN4OWlScGFBMDllbVVfWmI1YnU5MnZpQ0FtQl9YRnNNY1pyMlFOQmUzSk5zdFVpVVVvTkhTa3FZbWxURDlBUUlzRUotbEpCWTBCQXdWTkdNa0JjQXhqcTVCbjMteXNSaW01R21KdTFKcjZwOXUwdlk1c3NCd1BHSVlkS0JQM2gyOXVpRFJVWGFtb3JQYUlRZmR4TzgxcXVxbGh0enlxOFJuR1RqTW1pdHVMUF9Ec3RYWjhWV0Jad2Fhc1ZndlZZUHg0U1RnOGcxTmlFcnhzaVI5TUxpb3FKTk44UHZFWlhpVHVoR3hHekpwN0F0ek1FOF9ubUszdU5JcmVsWDBsZWh2TGFyUU4wbGQzS1R0M2RkWEpvOFBjWmFZbG5WUXpiM09lcDdJTnd0UlRUWGtoV08wN1pKamJHdEc1X1BZYXpiYjdrQW5rMU9uTUJ6YS1CYV9jZTV3dGVxXzMtclBBM01wV0JyVXhlWEpqNUUtSzdKc24ySFBST2ZmMTBvaHJuYnZRZ1dvNU01Y3JVVE42RjRmWUFtazgtU2swbjFqbFR4RlhxYXEzN3FSTVZURXE2aU1FVkRMVnlwWms3N25weDgzcTg0aG9RUGxuY2pSblgxTUdLZHJJbjBMYnFibzZzV0daclpYT2ZNWjNpTU41
Source: global traffic	HTTP traffic detected: GET /s/0.7.44/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /s/0.7.44/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9sVEHeyg2Wn+bpF&MD=CZn5OTbn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_FnPeWo4oIQBL868PlLV-0Q&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_G4dHnaRwklKRYDkRFglI5Q&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_Y3S0CmJGEtC6lhOdAIefTg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_mE4vUYULW6c9haXp2MK_-g&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_HXuNEnm5ROTyHSXJ0EZyUg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_MJAHq_sJxCORtl9aXHfw_A&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_ytodI-e_ZTezA62QNJxXMw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_odHXKuV2MJFbEkJn9GHocg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_ytodI-e_ZTezA62QNJxXMw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_4qsISn9gyCLVO1XJUSwuDg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_IQq581IIEpXoFF7flo0EMA&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _RwBf=r=0&ilt=1&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:03.7640152+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews__DOwNvTgd3icTDh1tfoFdA&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _RwBf=r=0&ilt=1&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:03.7640152+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_rADInp_y9xkSDuY3eIBACA&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _RwBf=r=0&ilt=1&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:03.7640152+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_tGerL7xcbflQUuKxLojVsg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _RwBf=r=0&ilt=1&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=1&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:03.7640152+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_UnL5aYoVm0AZlx10SXHV4A&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_Gdzw28TIxw5OiEUuII4Hhw&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_8qJIYVOz5m2GCwxophp-_Q&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_LW5jOjfaBX8__SgRvwzvpA&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_JyBgECOmrXxZl1BUjuEX1A&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_hYnBwYtd3KXb7839t5U9TQ&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_yAVGFy8eSeEsy9Hs8Bejwg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_iM2bKZ5CzXJs045yqIAbRQ&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_Le2RY8fXkmY_shLnh1I5Yg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_9mij1FHU6NXJjAuEJZkk6g&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_YUrsnhKuXtqvKagPzxjc1A&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_3M6n6rwyhO5T7GZ1ydGXKw&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=
Source: global traffic	HTTP traffic detected: GET /instrument/cookieenabled HTTP/1.1Host: 3pcookiecheck.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.srf?wa=wsignin1.0&rpsnv=11&ct=1723983583&rver=6.0.5286.0&wp=MBI_SSL&wreply=https:%2F%2fwww.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1%26ssl%3D1&lc=1033&id=264960&checkda=1 HTTP/1.1Host: login.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_DmGCBRQ564loG73gyp_idQ&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; _C_ETH=1; _RwBf=r=0&ilt=2&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=2&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:04.7480195+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: nxejt.polluxcastor.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/yktrlw8 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818; MUID=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /tag/yktrlw8 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818; MUID=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKrHPBMKw4AAAMA1gAFAQiEzoe2BhDAoPSHqpPqlhIYp8bb_azHnfogKjYJfJ4_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
Source: global traffic	HTTP traffic detected: GET /ot?ps=5a076f8c8fa8dbb3a25976ee107e72acee62642a&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQiEzoe2BhAFGXyeP21Up9U_IVyjL84pktQ_KJgCMLhoOI_DcUDeyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDWgAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSABOyAogerw7QEwBTkRZABBEWQUSABQAFoNFUcUEAAYAGISFQ8AEQldCAAAakoUAARwAA..&pp=0.32&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fic%3Ftn%3Dbc0f43524da56011e1041475ad061e34%26trackingid%3D98c9e6f05bf242847d57be7e837eaecb%26acid%3D23307%26data%3DYCsZrGwxqYx3Hm_3oJaYY0gEW1RAB_fQ2OF1TFPtMYtQ2tsZnFR6gqWY0j9VJRS5CbM8dd79ZGh6UIEAMrF9_4BJUuCBepJqmB_yXRwwxx0l8EfzbEgbaZVJBE_uOZy54v0Ed7tx-cVoNEVO-HlF5YUWGYsLXu43C6gPYKG8r4Ajkl3j45CJi_qmP4q2a7drM0bxJmZymXr-9CdcT3nE7-riAjCGDbGYw7dv0ErvDh4tpWt0l38U2c8UIHjH8XgWbWhBWKF-Cz_YwDKmIOA7tRClNEgLU07cQmWMX0sbhVE-QUuNOhV4_F450evtzgEvrJkVLV5bv7fuiXraliZa6bwZL5GLH86i8KFnj8udUx9D5TWjGpqSrA4yR97XqaqzyrlbXCK40W1LGWHcXQBsBs63vFirU4VGyJADHJnpYc3UCGC0q0mp44ZgE2oyHOvE6__fMExJDvAr680nWiYavpC5rlJFMEinpbcxk6O2cEFCCbYpwhiHb--81FI6L5Sh-kgzPoa_mD5tfL7qQ6_rPIOC515VkAEXf0BQx_1-aauw3iufMkmd5nbKbR5XYAr1KTbpOUYEHuy40U4AuvQqtBT1e3B5yZf_PzvprnKNa7VmgzFp_4jzaVBiKeOp2lbiqzzMDo-jXXrpWnr59uug65heYb5Z8Y4RGvNQoD-7XaLyOnyfOpmOqzcAtHysT7eV-1iexYRm45z3Vj0CxLwGbZC2oIZAS3fmGqMbE1X0H8-ZD9B0eFbKpK87mz2oN4CRIanTmAs7U3AamBXvQ6HK1vqDtS6Xi9LEFPoegdZxCzeq4Sn8aMz7aeLozFCLSNvJpkqNhSWnOqnH23O-V_m0MVdB687HWjdukFpsVqc2M3oiXTY1WkVbMNz-TISlt1VFVs8Wi_awtLKzRQTMMS98WYWvQeIcvTfBVlvkWqpcXzcbYmpcr3gRQ6y2m7hpueTWbud6_Z03LPzWs6dWhGZiLQAUJbY8gLRiC8IaTG73rwRQyeqNnrt6Xv3NJ1fJXrjFrtlXyFc1tqpd4nJkkikn4WOErVTscuuCEsZfp5DiqhBvGZGksuy-tWN8QycA47ZfKpPX5lUgQYVftuH-I6-dSJNMR59uhRxylADuioM4zubNiL10YGprE8NIvcFiFkBZeJ2IsOJzgzPVzftDz8oke25s9KgH1Q-acCmGU8DEO3RHmmRJ3ZbmXDZ8AykVblSr9i9o9EKj0JOUfUJXjuN2nsYwZ4PSp6qVLZYUNGmI2vhFFO3FIYO9IJobdqmWOPxLBFsUg6V4gKH5QZOZYJq-Ii_EIc8VHZSmU65UOB-59FOV0fm4qE4mwefB5p5XZxqkx_8t2yJICC-cFnnmVdRlw8teCwnDpEfERwDfvil4GYyvJUIridbPBCyoZy5nGnAdo3l1yedROJXuhHExQXXts6cOwSMVLIyNYFRmOE7QVYV0dMVpr1UOjkCqL5Se4b3QTs67XBmqiON4TXG24J2G0vESzu8zWWqd4y1lAz__aOCJncg5ggMzdI1w-C14sQHNluzlwkS7dumI17NqiBchBWqwm0lS9VMXrvsYntpxhMGAMbKu7aaW9b9nMnrwmRYz%26uid%3D2374652898496144167%26mguid%3D%26ap%3D%7BAUCTION_PRICE%7D%26tid%3D%7Btid%7D HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /ot?ps=5a076f8c8fa8dbb3a25976ee107e72acee62642a&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQiEzoe2BhAFGXyeP21Up9U_IVyjL84pktQ_KJgCMLhoOI_DcUDeyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDWgAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSABOyAogerw7QEwBTkRZABBEWQUSABQAFoNFUcUEAAYAGISFQ8AEQldCAAAakoUAARwAA..&pp=0.32&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fcs%2Fxandr%3Frdid%3D190ff5f896905fe7fa92815f83d24d19 HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKrHPBMKw4AAAMA1gAFAQiEzoe2BhDAoPSHqpPqlhIYp8bb_azHnfogKjYJfJ4_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
Source: global traffic	HTTP traffic detected: GET /ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=98c9e6f05bf242847d57be7e837eaecb&acid=23307&data=YCsZrGwxqYx3Hm_3oJaYY0gEW1RAB_fQ2OF1TFPtMYtQ2tsZnFR6gqWY0j9VJRS5CbM8dd79ZGh6UIEAMrF9_4BJUuCBepJqmB_yXRwwxx0l8EfzbEgbaZVJBE_uOZy54v0Ed7tx-cVoNEVO-HlF5YUWGYsLXu43C6gPYKG8r4Ajkl3j45CJi_qmP4q2a7drM0bxJmZymXr-9CdcT3nE7-riAjCGDbGYw7dv0ErvDh4tpWt0l38U2c8UIHjH8XgWbWhBWKF-Cz_YwDKmIOA7tRClNEgLU07cQmWMX0sbhVE-QUuNOhV4_F450evtzgEvrJkVLV5bv7fuiXraliZa6bwZL5GLH86i8KFnj8udUx9D5TWjGpqSrA4yR97XqaqzyrlbXCK40W1LGWHcXQBsBs63vFirU4VGyJADHJnpYc3UCGC0q0mp44ZgE2oyHOvE6__fMExJDvAr680nWiYavpC5rlJFMEinpbcxk6O2cEFCCbYpwhiHb--81FI6L5Sh-kgzPoa_mD5tfL7qQ6_rPIOC515VkAEXf0BQx_1-aauw3iufMkmd5nbKbR5XYAr1KTbpOUYEHuy40U4AuvQqtBT1e3B5yZf_PzvprnKNa7VmgzFp_4jzaVBiKeOp2lbiqzzMDo-jXXrpWnr59uug65heYb5Z8Y4RGvNQoD-7XaLyOnyfOpmOqzcAtHysT7eV-1iexYRm45z3Vj0CxLwGbZC2oIZAS3fmGqMbE1X0H8-ZD9B0eFbKpK87mz2oN4CRIanTmAs7U3AamBXvQ6HK1vqDtS6Xi9LEFPoegdZxCzeq4Sn8aMz7aeLozFCLSNvJpkqNhSWnOqnH23O-V_m0MVdB687HWjdukFpsVqc2M3oiXTY1WkVbMNz-TISlt1VFVs8Wi_awtLKzRQTMMS98WYWvQeIcvTfBVlvkWqpcXzcbYmpcr3gRQ6y2m7hpueTWbud6_Z03LPzWs6dWhGZiLQAUJbY8gLRiC8IaTG73rwRQyeqNnrt6Xv3NJ1fJXrjFrtlXyFc1tqpd4nJkkikn4WOErVTscuuCEsZfp5DiqhBvGZGksuy-tWN8QycA47ZfKpPX5lUgQYVftuH-I6-dSJNMR59uhRxylADuioM4zubNiL10YGprE8NIvcFiFkBZeJ2IsOJzgzPVzftDz8oke25s9KgH1Q-acCmGU8DEO3RHmmRJ3ZbmXDZ8AykVblSr9i9o9EKj0JOUfUJXjuN2nsYwZ4PSp6qVLZYUNGmI2vhFFO3FIYO9IJobdqmWOPxLBFsUg6V4gKH5QZOZYJq-Ii_EIc8VHZSmU65UOB-59FOV0fm4qE4mwefB5p5XZxqkx_8t2yJICC-cFnnmVdRlw8teCwnDpEfERwDfvil4GYyvJUIridbPBCyoZy5nGnAdo3l1yedROJXuhHExQXXts6cOwSMVLIyNYFRmOE7QVYV0dMVpr1UOjkCqL5Se4b3QTs67XBmqiON4TXG24J2G0vESzu8zWWqd4y1lAz__aOCJncg5ggMzdI1w-C14sQHNluzlwkS7dumI17NqiBchBWqwm0lS9VMXrvsYntpxhMGAMbKu7aaW9b9nMnrwmRYz&uid=2374652898496144167&mguid=&ap={AUCTION_PRICE}&tid={tid} HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /ju/cs/xandr?rdid=190ff5f896905fe7fa92815f83d24d19 HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKrHPBMKw4AAAMA1gAFAQiEzoe2BhCR_aby77LpkBgYp8bb_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
Source: global traffic	HTTP traffic detected: GET /ot?ps=7872e0ef3173829291cc685f10285f36f6dd94d3&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQiEzoe2BhAFGcct5ueGpqw_IUp45_XMN6s_KJgCMLhoOI_DcUDfyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDaAAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSDfyNkJKIHq8O0BMAU5xw1kAEERZBhIAFAAWg0JCUUcAAAQABgAYhIVDwARERgAakoUAARwAA..&pp=0.05&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fic%3Ftn%3Dbc0f43524da56011e1041475ad061e34%26trackingid%3De54bcf1d0db2cd6b2afe74d38909c87f%26acid%3D23307%26data%3DRUSozj1gnTVQxwofFrbWI0zNnmBs__ahjY5iEysKPF-KRyoodyukuemDVxG4FhdOHaT0lX03xg29bH2dIUqWdsVA85ggZGDVMe6wSM6vin45vDnJeC2Phg2TOkJDoEbT5a0nBlzz-58ydma4A4xFAtKGoeZPidENH4u02yk38rHChXevrWpVcto1Xp6Y4IjAWG1N04C851j_Mk4SiQbxbzgPjY9l3od2PdehU-Y4UN6kthYrLpgj903cXeitIOYm6jbjo5DysCSOs-FFSEPGTXfrAbmwZc5VtkC1FzbcPrAzGzsZXfYYfvBLIcWK0a1rm-lpDVT_C87IvWCQ5YYW8Jt32YXXj-m33wOhTB_cKKUUst_Wsovi_1LmbnLYuIilfTbn_v7psEcyDCtltxBvqc9ULZazXcf3t1DL1MxMBGQlYeVF0WpwlbdZTWPLtsw7jWxpo6EXtNiltFUds0E2AQzvdhegF2OsWl-lenbtlEA3ufmmSROnU5j-oJjO2uDIUCQlQiQr-h8ZTgYz2OSfDrlKXj5elzO6UF0edu0Q4-P-oWdmr9Ux18EzoDf9Cy2W_ISE9QbH1BGj7NvZGczisMuA_LOBK6xn3hYBuftGBnVMlhIz5EndB_JgtTi8gQKcMZDQd-Hd_pcm4iuZnpq8VTV4FaeGkBjMfVdr8DN0dVidoQR29GWb0Swk30xqS2OKFq0eNbDkfU2UYEhSxsDHYJGtTU6Nn2vWy__6A5RxNlUTZWOlzjllFWzyz3ndjmbByFlqBB_hKjDH2TaMF22YBHJhPFS1hfghq6FuRJ4-mNj7f1EAc3r4JlgjJmyXphCO0FB53Umi4_dsRZ9MuVpUMTtciexZhi5C_hFdRLpc_NhB3p89_GeAWctxc52VihUKRXDYrrlLHEI2wE3MUdXXqFWIXB4k3Kl8zvmY8AhluMikN5vea-4kBz0RpxzmPkdgjXp5a40Hi3PDW8QH-dpzGsN-_3euDtLLw_m-RNVQ-s8-hYDwooWUQfeLasjDNuunTZ0YyL3iCcRCUY78yvzz4-zc_H-2GmPYVrD4PCV2FMBHFBGE-yzw3ri32LAhTly-Mq5oXZxhk86hTWULYiYvXQe0ufFWGv1O9Z_XPQiwwNWDQYmljo79x3Nkhpmf1dZv8TUir75SewuEdTkd4cOVYWbl88rHG9QI9Q0qa7cjKik15HIyjCHPRl10qqHzmqPINVIUdeErcWbYTq_SOi_71E3aPhUVA0X2T2XOt6UyxOjCQ32VepYbrVxQ4F84qD8ciOnpQImGT4K_1nNgXKIE5N1swymjkhg2XkRpiq6mzKfpdYrRKDqxE7qpYe99U1Sc0SmnBK7Nm11JsLgUwTevqFiCI2bOp9kDBY6d9zNOI8CEFhDZx0HnmzfOf7LeBKf6hocIpUMev4zRr4I0ZWy3jgCeI0-DRgSKxYCF6r5jYjcv_V7TQ57dUxaR7d0hTvW_ujbehl5GuGnoGXuGJ50ZtuvMSk_m-TiangeVbCmRFy3-mW_aKfV5FRfYfw3F1rmA8ZmJo6SXwrCZb3JW1eBAz7DVvW2QUqaBC7kUf5f2OJwtJhMtMTeSllbsDOWTCnt1HY54oQ1SHm4Hgpw7iZ2YhQ%26uid%3D2374652898496144167%26mguid%3D%26ap%3D%7BAUCTION_PRICE%7D%26tid%3D%7Btid%7D HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKrHPBMKw4AAAMA1gAFAQiEzoe2BhDAoPSHqpPqlhIYp8bb_azHnfogKjYJfJ4_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
Source: global traffic	HTTP traffic detected: GET /ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=98c9e6f05bf242847d57be7e837eaecb&acid=23307&data=bsxZKWf2SVh5j9d-1TtTEperLKly7vyZZ9-w0qsSN5ba1tLi7D-zR5iL8POH70BXvTlsN2O7cgnJ3agoRHsqMczI4ENQljlwN44XRhAdzxim2edbFk0plpZUOZwAXTLYZdVEGtpz8bp-0ZoSPYpjCzymOcKZR9N3vgvEtFHwUkgS-S100B6dGwaxDqz40_t2eZmaTiJBpKUxQBmxmUy_htCAVtdF5aqPy24BBgP2a112TSSX6XqHRUqy1KvlubjPNOLh-XUX2UZSqG234LveUWvbKB0jLkmnGTYosRCMWZX5xPni0kaLu61AXC3oSGT4_694tYoVRIdLMtrH-hd4iePhfoq_5sUi8deC35-N6tKwDadwX4fsQCEjIpRhjfnVEudWB403eoVm2eZ99gz9ik987G8tIyrJr_4GCFKn8FzewU8xkKpnJkybAk8lj0dEGhiBVvnDkV5yEN9-mMWhAhaNqjcmTyBN73ebAJGgkSOlAu9HG3ajwqCvaYmj41G7aNNZstyF4eI0KTSu9XfN6Jk5bo_IVkyYCnEfky6ixlScJr6Q09lQq8_pgWxzCm6RtJAmybcUDxhY3ctbrLcBwVoPH3P-8-NKV0ppSfAwcpeQo3rqlnAW6e4xpPc_OEMbYp6bxyyGXvmqJCpSBhVpI-xfRtOoRNHRI0PNSP7L9wOGYSdAXEPNjezHuLEOxHLdgvugg3Yd8g9K7ZNVnqzqb5qDXOztcrDhCUebe53Q05ToBP9CRSuyJScyMYJCG5lI6xmt7D1z-idjM-qvdjoOgGSFhoM5r4N2bMGjDIfhs05uUPnYStVhGZmde_57NmFEOt-jUbK4aDHh_7dDy05ESfC6BIbya8sXvMp8JbFF0wO1MPDAU74Jly_Da38DUElzapQVRr7ts-QPfhZu-iCihVG5ITX1V_2hsfY4BmFAV8c9Z7YoULNAcpELx8m70xhGZZTYiusmDDm1qybYLHETfnJyLtBGyNKwxuPTTX-Iax8SMnWz4ODpkYZQVpHjp1UQHfEVHY_huJ7Dtl15ibyRuxuk8ovBPTyi6q4pcF3u9oxW7DaqHfMdt4GU0MHNE1YGryBZFGcwLFzXts3Tq7GDzX2dSslV2zGZOLIdTyX1X1pE6q7wREWBBrGtMO43mtRNs2d-7fuxs9-mVTBBuQlfD86GCGzL0gGLYMhV4gQzW4x1tLTxkdDLZwXvve8XW43-7wDSBCsbsYd-YoKzcq4zN0pFGwRgdZJls-qj9hwv1d-t-k8RQU-lkM_kkY2OYlUyInAKp4gd3RJ3kqSeHpbfte1jYxMXcj3T4VZbpHN_droJO8vxdqZM9tl-apZyyy5i96KWS3YfhHWJXmDWtsERvWzBN9-KzH81wHJO0MRaVBBN0z5DbUsVHCIKjM2XGh5X7mYvhiM6qOEECwuEzrBTvZeyIdVxQ02a5JDQqnamvKNCYERzQHnaDFwq43ctyWLlHBxpYohltfnksi0TLuoBT_Toaxc942scSWW3v50fMtsw17d2OPWxgs7vsI32PBhJXPGowUAUX3nwSYwD3l4SWpxoAVXHXs4R0y8DcARqsNc-NNTznNz-xpMEiTKKlPkt&uid=2374652898496144167&mguid=&ap={AUCTION_PRICE}&tid={tid} HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKrHPBMKw4AAAMA1gAFAQiEzoe2BhCR_aby77LpkBgYp8bb_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
Source: global traffic	HTTP traffic detected: GET /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKrHPBMKw4AAAMA1gAFAQiEzoe2BhDAoPSHqpPqlhIYp8bb_azHnfogKjYJfJ4_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
Source: global traffic	HTTP traffic detected: GET /ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=e54bcf1d0db2cd6b2afe74d38909c87f&acid=23307&data=RUSozj1gnTVQxwofFrbWI0zNnmBs__ahjY5iEysKPF-KRyoodyukuemDVxG4FhdOHaT0lX03xg29bH2dIUqWdsVA85ggZGDVMe6wSM6vin45vDnJeC2Phg2TOkJDoEbT5a0nBlzz-58ydma4A4xFAtKGoeZPidENH4u02yk38rHChXevrWpVcto1Xp6Y4IjAWG1N04C851j_Mk4SiQbxbzgPjY9l3od2PdehU-Y4UN6kthYrLpgj903cXeitIOYm6jbjo5DysCSOs-FFSEPGTXfrAbmwZc5VtkC1FzbcPrAzGzsZXfYYfvBLIcWK0a1rm-lpDVT_C87IvWCQ5YYW8Jt32YXXj-m33wOhTB_cKKUUst_Wsovi_1LmbnLYuIilfTbn_v7psEcyDCtltxBvqc9ULZazXcf3t1DL1MxMBGQlYeVF0WpwlbdZTWPLtsw7jWxpo6EXtNiltFUds0E2AQzvdhegF2OsWl-lenbtlEA3ufmmSROnU5j-oJjO2uDIUCQlQiQr-h8ZTgYz2OSfDrlKXj5elzO6UF0edu0Q4-P-oWdmr9Ux18EzoDf9Cy2W_ISE9QbH1BGj7NvZGczisMuA_LOBK6xn3hYBuftGBnVMlhIz5EndB_JgtTi8gQKcMZDQd-Hd_pcm4iuZnpq8VTV4FaeGkBjMfVdr8DN0dVidoQR29GWb0Swk30xqS2OKFq0eNbDkfU2UYEhSxsDHYJGtTU6Nn2vWy__6A5RxNlUTZWOlzjllFWzyz3ndjmbByFlqBB_hKjDH2TaMF22YBHJhPFS1hfghq6FuRJ4-mNj7f1EAc3r4JlgjJmyXphCO0FB53Umi4_dsRZ9MuVpUMTtciexZhi5C_hFdRLpc_NhB3p89_GeAWctxc52VihUKRXDYrrlLHEI2wE3MUdXXqFWIXB4k3Kl8zvmY8AhluMikN5vea-4kBz0RpxzmPkdgjXp5a40Hi3PDW8QH-dpzGsN-_3euDtLLw_m-RNVQ-s8-hYDwooWUQfeLasjDNuunTZ0YyL3iCcRCUY78yvzz4-zc_H-2GmPYVrD4PCV2FMBHFBGE-yzw3ri32LAhTly-Mq5oXZxhk86hTWULYiYvXQe0ufFWGv1O9Z_XPQiwwNWDQYmljo79x3Nkhpmf1dZv8TUir75SewuEdTkd4cOVYWbl88rHG9QI9Q0qa7cjKik15HIyjCHPRl10qqHzmqPINVIUdeErcWbYTq_SOi_71E3aPhUVA0X2T2XOt6UyxOjCQ32VepYbrVxQ4F84qD8ciOnpQImGT4K_1nNgXKIE5N1swymjkhg2XkRpiq6mzKfpdYrRKDqxE7qpYe99U1Sc0SmnBK7Nm11JsLgUwTevqFiCI2bOp9kDBY6d9zNOI8CEFhDZx0HnmzfOf7LeBKf6hocIpUMev4zRr4I0ZWy3jgCeI0-DRgSKxYCF6r5jYjcv_V7TQ57dUxaR7d0hTvW_ujbehl5GuGnoGXuGJ50ZtuvMSk_m-TiangeVbCmRFy3-mW_aKfV5FRfYfw3F1rmA8ZmJo6SXwrCZb3JW1eBAz7DVvW2QUqaBC7kUf5f2OJwtJhMtMTeSllbsDOWTCnt1HY54oQ1SHm4Hgpw7iZ2YhQ&uid=2374652898496144167&mguid=&ap={AUCTION_PRICE}&tid={tid} HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /setuid?entity=529&code=22210ca70da320be2vau8i00lzzjbh0l HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D529%26code%3D22210ca70da320be2vau8i00lzzjbh0l HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=1--u-_Vnz16p9rfrz3BWLtrGR4XegvOxPDFPDGfASXryntSlWiXo5YQzxRF86jCFfZLjv5ngumHmpNH8197KEK00I5LqtBKUu4WCTFSHkD8.; uuid2=1915447673373155790
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D529%26code%3D22210ca70da320be2vau8i00lzzjbh0l HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!@wnfH8KVePiSir=BWbofRz'niK/noiJhQd1JpDN_1)zLcebTX1Szxh.Dn-wBq0I?%(2K:$doS]%6lOPn#m.O
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_3sXqBemopyiV-v69gXdEbA&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987214463; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_8Jvo9zBBQK3M49k7teMajQ&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987214463; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_-pz9qyqgg7vLmOSv1ngVkg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; ipv6=hit=1723987227561
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews__eHbFQ5Rskg7xOa4tSXEZw&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; ipv6=hit=1723987227561
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_bg10NscUf-auysqjs9o_gQ&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; ipv6=hit=1723987227561
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9sVEHeyg2Wn+bpF&MD=CZn5OTbn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_ji-uCpx5LZzaRDMZtgKdDw&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; ipv6=hit=1723987227561
Source: global traffic	HTTP traffic detected: GET /th?id=OPN.RTNews_X-rjYdpdTjIP4BaVScYlOA&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _clsk=1no8lhc%7C1723983619976%7C2%7C0%7Ct.clarity.ms%2Fcollect; _C_ETH=1; _RwBf=r=0&ilt=4&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=4&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:20:24.8204016+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; SRCHHPGUSR=SRCHLANG=en&IG=64B1A3472E0242D89EBDA4156C2A25E7&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; ipv6=hit=1723987227561
Source: global traffic	HTTP traffic detected: GET /ast/ast.js HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN
Source: global traffic	HTTP traffic detected: GET /ast/ast.js HTTP/1.1Host: acdn.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN
Source: global traffic	HTTP traffic detected: GET /b?rn=1723983665756&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse%26content%3D1%26mkt%3Den-us&c8=Inside+the+fast-moving+launch+of+Kamala+Harris+for+president&c9=https%3A%2F%2Fwww.bing.com%2F&cs_fpid=2AF646779035694A120D52A8919D686F&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=6208086025961472&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2?rn=1723983665756&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse%26content%3D1%26mkt%3Den-us&c8=Inside+the+fast-moving+launch+of+Kamala+Harris+for+president&c9=https%3A%2F%2Fwww.bing.com%2F&cs_fpid=2AF646779035694A120D52A8919D686F&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=195326101b4ed1992718e091723983666; XID=195326101b4ed1992718e091723983666
Source: global traffic	HTTP traffic detected: GET /tag?o=6208086025961472&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.3976663069404487 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html?gdpr=0&seller_id=280&pub_id=43801 HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /strikeforce/script.js HTTP/1.1Host: acdn.adnxs-simple.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKwE_BDsAkAAAMA1gAFAQizzoe2BhCK1cvOwrK1sX4YzsOF6qqwwsoaKjYJw_UoXI_C1T8Rw_UoXI_C1T8ZAAAAQArXA0Ahw_UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlDCxeztAVjktQNgAGjuAniv2QWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwASNl70iyAQA0gQPMTExMjIjRlJBMTo1Njg32gQCCAHgBAHwBMLF7O0BiAUBmAUAoAX___________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-oFFgoLcHJvdmlkZXJfaWQSBzdHNkY2U0zqBQ8KC2t2JZAUeWVhchIAASswBnN1YmNhdBIMbmV3cw1Q8Ftz6gUMCgZtYXJrZXQSAnVz6gUnCgNyaWQSIDhjZTA2MzQzMjM2NTRlNTZiY2UyMGFmY2Y2ZTY1YTM16gUKCgRsYW5nEgJlbuoFCgoGZmxpZ2h0EgDqBRsKEXNhbEErHZ1sBkFBcWNLN_AFAfoFBAgAEACQBgCYBgC4BgDBBkFoQXgg0AaSQtoGFgoQCREZAXQQABgA4AYB8gYCCACABwGIBwCgBwHIB6_ZBdIHDQkRKAEmCNoHBgFd8JwYAOAHAOoHAggA8AfHgYcDighuCmoAAAGRZW8fOH5i1ZQp0uqKKK5LBAjZEc70-5z_tzdDCaiDM6XlW
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKvE_BDrwkAAAMA1gAFAQizzoe2BhCEm-vopsrqlg8YzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAoEfhDEAhC9cJGwApESTIMQAAAIA9Cu8_MMevyAE4mAJA8lZIAlDhk4LTAVjktQNgAGjuAnj52AWAAQGKAQNVU0SSBQbwVZgBygegAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEJTkVXVVNFTjEyigJUdWYoJ2EnLCA1NTg2ODA3LCAwKTt1ZignaScsIDEwNDUxMDg0FRUsZycsIDIwOTQzNzI1FRUwcicsIDQ0MjUzNDM2OQUW8IuSAr0EIVVXNTFIQWpHNHRnYUVPR1RndE1CR0FBZzVMVURNQUE0QUVBQVNQSldVTWV2eUFGWUFHQ1dCbWdBY0FCNEFJQUJBSWdCQUpBQkFaZ0JBYUFCQWFnQkFiQUJBTGtCZ2swTUxqNEs1el9CQVlKTkRDNC1DdWNfeVFFQUFBQUFBQUR3UDlrQkFBQQUOdDhEX2dBWXp4X1FUMUFleFJPRC1ZQWdDZ0FnRzFBZwEjBEM5CQjwVURBQWdESUFnRFFBZ0RZQWdEZ0FnRG9BZ0Q0QWdDQUF3R1lBd0c2QXdsR1VrRXhPalUyTnpmZ0E1SkhnQVNPejkwT2lBVDdxTjhPa0FRQW1BUUJ3UVFBAWIFAQhNa0UFCAUBCERSQgUIKEFBd0NGQTJBUUE4LiwAOElnRnJTeVFCYk9FWmFrRg0rGEE4RC14QlERDjxBQXdRVUsxNk53UFFyblA4LigABF9SLigACDJRVQ01wER3UC1BRndMSUU4QVh0cHY0Si1BWDNfdFFDZ2dZRFZWTkVpQVlBa0FZQm1BWUFvUVkZYCQ2Z0dCTElHSkFrDUwMQUFBQh3TBEJrARIJAQBDHRjoTGdHQ3ZnSGt0UUktQWZzN1FqNEI5MzVDSUVJQ3RlamNEMEs1ei1JQ0FDUUNBQS6aApkBIU14VTkyd2o2QQIoT1MxQXlBQUtBQXgZOUw4NkNVWlNRVEU2TlRZM04wQ1NSMBGJDER3UDEdiQBGERgMQUFBRx0YAEcdGABIDRgcTUFoUUhnQWkuVQLw13cuLrICIDJBRjY0Njc3OTAzNTY5NEExMjBENTJBODkxOUQ2ODZG2AIB4AK7zlTqAoQBaHR0cHM6Ly93d3cubXNuLmNvbS9lbi11cy9uZXdzL3BvbGl0aWNzL2luc2lkZS10aGUtZmFzdC1tb3ZpbmctbGF1bmNoLW9mLWthbWFsYS1oYXJyaXMtZm9yLXByZXNpZGVudC9hci1BQTFvWkVmYj9vY2lkPUJpbmdOZXdzQnJvd3Nl8gIRCgZBRFZfSUQSBzU1ODY4MDfyAhIKBkNQR19JRBIIMm3VZPICCgoFQ1BfSUQSATDyAg0KCEFEVl9GUkVRERAcUkVNX1VTRVIFEAAMCSAYQ09ERRIA8gEPCENQRxUPEAsKB0NQFQ4QEQoFSU8BWSQIMTA0NTEwODTyASIESU8VIjgTCg9DVVNUT01fTU9ERUwBLBQA8gIaChYyFgAcTEVBRl9OQU0FcggeCho2HQAIQVNUAT4QSUZJRUQBPhwNCghTUExJVAFN8JUBMIADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTY3N9oEAggB4AQB8AThk4LTAYgFAZgFAKAF______8BBRgBwAUAyQUABQEU8D_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-oFCwoDY2F0EgQhDZDqBQwKBm1hcmtldBICdXPwBQH6BQQIABAAkAYAmAYAuAYAwQYAQWksAPA_0AaSQtoGFgoQBRAdAXQQABgA4AYB8gYCCACABwGIBwCgBwHIB_nYBdIHDQkRKQEmCNoHBgFd8JwYAOAHAOoHAggA8AfHgYcDighuCmoAAAGRZW8fOA8tqlJtGs2Ef38Z3JZj03I__nrSs8d2A4Lv-PZLDoCammEwfGmjHkKf68IbjkMA4mZblvanIpZFpiGS1wfKozSqvvSF3CZURDjkJiKPYGdMRw-DT0orOiCgnGeORAW2butcEAGVCAAAgD-YCAHACAHSC
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLnDPBDZwYAAAMA1gAFAQizzoe2BhCK1cvOwrK1sX4YzsOF6qqwwsoaKjYJw_UoXI_C1T8Rw_UoXI_C1T8ZAAAAQArXA0Ahw_UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlDCxeztAVjktQNgAGjuAniv2QWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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_b2NpZD1CaW5nTmV3c0Jyb3dzZYADAIgDAZADroRlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEEAgAEAEYrAIg-gEoADAAOAK4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjU2ODfaBAIIAeAEAfAEwsXs7QGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB8AUB-gUECAAQAJAGAJgGALgGAMEGAAAAAAAA8D_QBpJC2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcByAev2QXSBw0JAAAJKRwQABgA2gcGCAUJ8KLgBwDqBwIIAPAHx4GHA4oIbgpqAAABkWVvHzh-YtWUKdLqiiiuSwQI2RHO9Puc_7c3QwmogzOl5VqLl2BlVSBUaBJrIhlODwYzv1dwPLbpfuglqux356uRyRDc8eLcQFeGnxl5ORlTaxhUBOqzMrZiw6WUgvrHX46WOXRcfRABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=5a9e81aa3312c7aff1496c4c90007c5c47ef8525 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; X
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.3976663069404487 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLmDPBDZgYAAAMA1gAFAQizzoe2BhCEm-vopsrqlg8YzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAoEfhDEAhC9cJGwApESTIMQAAAIA9Cu8_MMevyAE4mAJA8lZIAlDhk4LTAVjktQNgAGjuAnj52AWAAQGKAQNVU0SSBQbwVZgBygegAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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_b2NpZD1CaW5nTmV3c0Jyb3dzZYADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTY3N9oEAggB4AQB8AThk4LTAYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AGkkLaBhYKEAAAAAAAAAAACUh4AAAQABgA4AYB8gYCCACABwGIBwCgBwHIB_nYBdIHDRViASYM2gcGCAUJ8KLgBwDqBwIIAPAHx4GHA4oIbgpqAAABkWVvHzgPLapSbRrNhH9_GdyWY9NyP_560rPHdgOC7_j2Sw6AmpphMHxpox5Cn-vCG45DAOJmW5b2pyKWRaYhktcHyqM0qr70hdwmVEQ45CYij2BnTEcPg09KKzogoJxnjkQFtm7rXBABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=e2b36f2bc470d6fcf8c9212ccb7c5deb9acb3adf HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=T
Source: global traffic	HTTP traffic detected: GET /country?o=6208086025961472 HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=T0KFEvj6&w=5671737388695552&o=6208086025961472&cv=2.1.48&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&sid=M1vvJGKh&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /strikeforce/script.js HTTP/1.1Host: acdn.adnxs-simple.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKwE_BDsAkAAAMA1gAFAQizzoe2BhCK1cvOwrK1sX4YzsOF6qqwwsoaKjYJw_UoXI_C1T8Rw_UoXI_C1T8ZAAAAQArXA0Ahw_UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlDCxeztAVjktQNgAGjuAniv2QWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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-AMBgAQAkgQGL3V0L3YzmAQAogQLOC40Ni4xMjMuMzOoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwASNl70iyAQA0gQPMTExMjIjRlJBMTo1Njg32gQCCAHgBAHwBMLF7O0BiAUBmAUAoAX___________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-oFFgoLcHJvdmlkZXJfaWQSBzdHNkY2U0zqBQ8KC2t2JZAUeWVhchIAASswBnN1YmNhdBIMbmV3cw1Q8Ftz6gUMCgZtYXJrZXQSAnVz6gUnCgNyaWQSIDhjZTA2MzQzMjM2NTRlNTZiY2UyMGFmY2Y2ZTY1YTM16gUKCgRsYW5nEgJlbuoFCgoGZmxpZ2h0EgDqBRsKEXNhbEErHZ1sBkFBcWNLN_AFAfoFBAgAEACQBgCYBgC4BgDBBkFoQXgg0AaSQtoGFgoQCREZAXQQABgA4AYB8gYCCACABwGIBwCgBwHIB6_ZBdIHDQkRKAEmCNoHBgFd8JwYAOAHAOoHAggA8AfHgYcDighuCmoAAAGRZW8fOH5i1ZQp0uqKKK5LBAjZEc70-5z_tzdDCaiDM6XlW
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKvE_BDrwkAAAMA1gAFAQizzoe2BhCEm-vopsrqlg8YzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAoEfhDEAhC9cJGwApESTIMQAAAIA9Cu8_MMevyAE4mAJA8lZIAlDhk4LTAVjktQNgAGjuAnj52AWAAQGKAQNVU0SSBQbwVZgBygegAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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______8BBRgBwAUAyQUABQEU8D_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-oFCwoDY2F0EgQhDZDqBQwKBm1hcmtldBICdXPwBQH6BQQIABAAkAYAmAYAuAYAwQYAQWksAPA_0AaSQtoGFgoQBRAdAXQQABgA4AYB8gYCCACABwGIBwCgBwHIB_nYBdIHDQkRKQEmCNoHBgFd8JwYAOAHAOoHAggA8AfHgYcDighuCmoAAAGRZW8fOA8tqlJtGs2Ef38Z3JZj03I__nrSs8d2A4Lv-PZLDoCammEwfGmjHkKf68IbjkMA4mZblvanIpZFpiGS1wfKozSqvvSF3CZURDjkJiKPYGdMRw-DT0orOiCgnGeORAW2butcEAGVCAAAgD-YCAHACAHSC
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLnDPBDZwYAAAMA1gAFAQizzoe2BhCK1cvOwrK1sX4YzsOF6qqwwsoaKjYJw_UoXI_C1T8Rw_UoXI_C1T8ZAAAAQArXA0Ahw_UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlDCxeztAVjktQNgAGjuAniv2QWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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_b2NpZD1CaW5nTmV3c0Jyb3dzZYADAIgDAZADroRlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEEAgAEAEYrAIg-gEoADAAOAK4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjU2ODfaBAIIAeAEAfAEwsXs7QGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB8AUB-gUECAAQAJAGAJgGALgGAMEGAAAAAAAA8D_QBpJC2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcByAev2QXSBw0JAAAJKRwQABgA2gcGCAUJ8KLgBwDqBwIIAPAHx4GHA4oIbgpqAAABkWVvHzh-YtWUKdLqiiiuSwQI2RHO9Puc_7c3QwmogzOl5VqLl2BlVSBUaBJrIhlODwYzv1dwPLbpfuglqux356uRyRDc8eLcQFeGnxl5ORlTaxhUBOqzMrZiw6WUgvrHX46WOXRcfRABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=5a9e81aa3312c7aff1496c4c90007c5c47ef8525 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKnDvBDJwcAAAMA1gAFAQizzoe2BhCnz9i9-aOXjTIYzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAwPUoCkAhC9cJGwApESTQMQAAACCuR-k_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____________AcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBQH6BQQIABAAigaAAUt4T09FVm9BQUFBREFBa0NCUUVJcnRXS0N4Q1V1cWtER1BMZHNBUWdCaWdBUUxpRXR3eElfb1MzREZDU1IxaXJMSEVBQUFBQSH9EEFIZ0FnNdoMQUFBSY1vLEpvQkFnZ0FxQUVBcy4gAHhBLi6QBgCYBgCiBg0yODAjRlJBMTo1Njc1uAYAwQYABQEo8D_QBpJC2gYWChAFEB0BKBAAGADgBgHqBih1rXIYNjk3MDY0NKUyARShchg5MTg3MDU4BRRY8gYCCACABwGIBwCgBwHIB7nZBdIHDQkRVAFRDNoHBggFCfCi4AcA6gcCCADwB8eBhwOKCG4KagAAAZFlbx84MhpdH5e2J6dfARq-Cse-bacdhCNMcJd_2YbfpAhIHh21pDHmZhK6IRuALq9XeGhTB4BvIAuQleOA7TNAy_wcXkvUaYmu5Ggj3SfRB9Ini3vQP4GqpBn30tEUx2WEY5KF9TIQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=dae7d388f6dba0376fa3072d0747fe9853b05fed HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.F
Source: global traffic	HTTP traffic detected: GET /v/s/245/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js;ord=1344852085 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country?o=6208086025961472 HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLmDPBDZgYAAAMA1gAFAQizzoe2BhCEm-vopsrqlg8YzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAoEfhDEAhC9cJGwApESTIMQAAAIA9Cu8_MMevyAE4mAJA8lZIAlDhk4LTAVjktQNgAGjuAnj52AWAAQGKAQNVU0SSBQbwVZgBygegAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-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_b2NpZD1CaW5nTmV3c0Jyb3dzZYADAIgDAZADs4RlmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEDwgAEAEY2AUgWigAMAA4ArgEAMAEkJe9IsgEANIEDzExMTIyI0ZSQTE6NTY3N9oEAggB4AQB8AThk4LTAYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AGkkLaBhYKEAAAAAAAAAAACUh4AAAQABgA4AYB8gYCCACABwGIBwCgBwHIB_nYBdIHDRViASYM2gcGCAUJ8KLgBwDqBwIIAPAHx4GHA4oIbgpqAAABkWVvHzgPLapSbRrNhH9_GdyWY9NyP_560rPHdgOC7_j2Sw6AmpphMHxpox5Cn-vCG45DAOJmW5b2pyKWRaYhktcHyqM0qr70hdwmVEQ45CYij2BnTEcPg09KKzogoJxnjkQFtm7rXBABlQgAAIA_mAgBwAgB0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=e2b36f2bc470d6fcf8c9212ccb7c5deb9acb3adf HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/s/245/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKnDvBDJwcAAAMA1gAFAQizzoe2BhCnz9i9-aOXjTIYzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAwPUoCkAhC9cJGwApESTQMQAAACCuR-k_MMavyAE4mAJA8lZIAlDLkYnxAVjktQNgAGi8h2V4udkFgAEBigEDVVNEkgEBBvBVmAGsAqAB2ASoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQD6AQlORVdVU0VOMTGKAlR1ZignYScsIDU1ODY4MDcsIDApO3VmKCdpJywgMTA0NTEwODQVFSxnJywgMjMyMTk4ODMVFQByAT4cMDU1NjMzMzkFFvCLkgK9BCFmRzJjUHdpYWd1VWJFTXVSaWZFQkdBQWc1TFVETUFBNEFFQUFTUEpXVU1hdnlBRllBR0NXQm1nQWNBQjRBSUFCQUlnQkFKQUJBWmdCQWFBQkFhZ0JBYkFCQUxrQmdrME1MajRLNXpfQkFZSk5EQzQtQ3VjX3lRRUFBQUFBQUFEd1A5a0JBQUEFDnQ4RF9nQVl6eF9RVDFBZXhST0QtWUFnQ2dBZ0cxQWcBIwRDOQkI8FVEQUFnRElBZ0RRQWdEWUFnRGdBZ0RvQWdENEFnQ0FBd0dZQXdHNkF3bEdVa0V4T2pVM056YmdBNUpIZ0FTT3o5ME9pQVM5cWQ4T2tBUUFtQVFCd1FRQQFiBQEITWtFBQgFAQhEUkIFCChBQXdDRkEyQVFBOC4sADhJZ0ZrQzJRQmUzemNLa0YNKxhBOEQteEJREQ48QUF3UVVLMTZOd1BRcm5QOC4oAARfUi4oAAgyUVUNNcBEd1AtQUZ3TElFOEFXcm5Za0wtQVgzX3RRQ2dnWURWVk5FaUFZQWtBWUJtQVlBb1FZGWAkNmdHQkxJR0pBaw1MDEFBQUId0wRCawESCQEAQx0Y4ExnR0N2Z0hrdFFJLUFmczdRajRCOTM1Q0lFSUN0ZWpjRDBLNXotSUNBQ1FDQUEumgKZASF3aFNncT5BAihPUzFBeUFBS0FBeBk5TDg2Q1VaU1FURTZOVGMzTmtDU1IwEYkMRHdQMR2JAEYRGAxBQUFHHRgARx0YAEgNGBxNQWhRSGdBaS5VAvTEAXcuLrICIDJBRjY0Njc3OTAzNTY5NEExMjBENTJBODkxOUQ2ODZG2AIB4AK7zlTqAoQBaHR0cHM6Ly93d3cubXNuLmNvbS9lbi11cy9uZXdzL3BvbGl0aWNzL2luc2lkZS10aGUtZmFzdC1tb3ZpbmctbGF1bmNoLW9mLWthbWFsYS1oYXJyaXMtZm9yLXByZXNpZGVudC9hci1BQTFvWkVmYj9vY2lkPUJpbmdOZXdzQnJvd3NlgAMAiAMBkAPt83CYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQAsgQQCAAQARisAiD6ASgAMAA4ArgEAMAEjpe9IsgEANIEDzExMTIyI0ZSQTE6NTc3NtoEAggB4AQB8ATLkYnxAYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBQH6BQQIABAAigaAAUt4T09FVm9BQUFBREFBa0NCUUVJcnRXS0N4Q1V1cWtER1BMZHNBUWdCaWdBUUxpRXR3eElfb1MzREZDU1IxaXJMSEVBQUFBQSH9EEFIZ0FnNdoMQUFBSY1vLEpvQkFnZ0FxQUVBcy4gAHhBLi6QBgCYBgCiBg0yODAjRlJBMTo1Njc1uAYAwQYABQEo8D_QBpJC2gYWChAFEB0BKBAAGADgBgHqBih1rXIYNjk3MDY0NKUyARShchg5MTg3MDU4BRRY8gYCCACABwGIBwCgBwHIB7nZBdIHDQkRVAFRDNoHBggFCfCi4AcA6gcCCADwB8eBhwOKCG4KagAAAZFlbx84MhpdH5e2J6dfARq-Cse-bacdhCNMcJd_2YbfpAhIHh21pDHmZhK6IRuALq9XeGhTB4BvIAuQleOA7TNAy_wcXkvUaYmu5Ggj3SfRB9Ini3vQP4GqpBn30tEUx2WEY5KF9TIQAZUIAACAP5gIAcAIAdIIDgiBgoSIkKDAgAEQABgA2ggECAAgAA..&s=dae7d388f6dba0376fa3072d0747fe9853b05fed HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cm
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLwFPBDcAoAAAMA1gAFAQizzoe2BhCnz9i9-aOXjTIYzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAwPUoCkAhC9cJGwApESTQMQAAACCuR-k_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_ICEgoGQ1BHX0lEEggybdVk8gIKCgVDUF9JRBIBMPICDQoIQURWX0ZSRVEREBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8IQ1BHFQ8QCwoHQ1AVDhARCgVJTwFZJAgxMDQ1MTA4NPIBIgRJTxUiOBMKD0NVU1RPTV9NT0RFTAEsFADyAhoKFjIWABxMRUFGX05BTQVyCB4KGjYdAAhBU1QBPhBJRklFRAE-HA0KCFNQTElUAU30BQEBMIADAIgDAZAD7fNwmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEEAgAEAEYrAIg-gEoADAAOAK4BADABI6XvSLIBADSBA8xMTEyMiNGUkExOjU3NzbaBAIIAeAEAfAEy5GJ8QGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB6gURCgxtc2Z0X3JlZnJlc2gSATDqBQwKBm1hcmtldBICdXPqBQ8KC2t2bXNmdF95ZWFyEgDqBQsKA2NhdBIEbmV3c-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-gUECAAQAIoGgAFLeE9PRVZvoQ3YREFBa0NCUUVJcnRXS0N4Q1V1cWtER1BMZHNBUWdCaWdBUUxpRXR3eElfb1MzREZDU1IxaXJMSK0rAQEMSGdBZ7UrDEFBQUntwCxKb0JBZ2dBcUFFQXMuIAA8QS4ukAYAmAYAogYNMjgwI2ktHDY3NbgGAMEGQfxhDCDQBpJC2gYWChAJERkBKBAAGADgBgHqBih1GsMIGDY5NzA2NDQSgwgBFA7DCBg5MTg3MDU4BRRY8gYCCACABwGIB
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLwFPBDcAoAAAMA1gAFAQizzoe2BhCnz9i9-aOXjTIYzsOF6qqwwsoaKjYJC9ejcD0K5z8RC9ejcD0K5z8ZAAAAwPUoCkAhC9cJGwApESTQMQAAACCuR-k_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_ICEgoGQ1BHX0lEEggybdVk8gIKCgVDUF9JRBIBMPICDQoIQURWX0ZSRVEREBxSRU1fVVNFUgUQAAwJIBhDT0RFEgDyAQ8IQ1BHFQ8QCwoHQ1AVDhARCgVJTwFZJAgxMDQ1MTA4NPIBIgRJTxUiOBMKD0NVU1RPTV9NT0RFTAEsFADyAhoKFjIWABxMRUFGX05BTQVyCB4KGjYdAAhBU1QBPhBJRklFRAE-HA0KCFNQTElUAU30BQEBMIADAIgDAZAD7fNwmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEALIEEAgAEAEYrAIg-gEoADAAOAK4BADABI6XvSLIBADSBA8xMTEyMiNGUkExOjU3NzbaBAIIAeAEAfAEy5GJ8QGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB6gURCgxtc2Z0X3JlZnJlc2gSATDqBQwKBm1hcmtldBICdXPqBQ8KC2t2bXNmdF95ZWFyEgDqBQsKA2NhdBIEbmV3c-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-gUECAAQAIoGgAFLeE9PRVZvoQ3YREFBa0NCUUVJcnRXS0N4Q1V1cWtER1BMZHNBUWdCaWdBUUxpRXR3eElfb1MzREZDU1IxaXJMSK0rAQEMSGdBZ7UrDEFBQUntwCxKb0JBZ2dBcUFFQXMuIAA8QS4ukAYAmAYAogYNMjgwI2ktHDY3NbgGAMEGQfxhDCDQBpJC2gYWChAJERkBKBAAGADgBgHqBih1GsMIGDY5NzA2NDQSgwgBFA7DCBg5MTg3MDU4BRRY8gYCCACABwGIB
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_H0Uqy7LYr6Y7NSjywO4LTQ2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjMwMHgyNTA=&v=5&s=v31i5imuac3&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NDk4ODAzMzk0LCJhc3RfYiI6MTExMjIsInMiOiJyZWN0YW5nbGUxXzA3Yzc3OTExNmMwNTRhYzRjZDI2ZWI4NDYwZmFkOTQ4In0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs0OTg4MDMzOTQifQ%3D%3D&cb=8512999&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pNd01IZ3lOVEE9Iiwid2QiOnsibyI6InhhbmRyIiwidyI6MzAwLCJoIjoyNTB9LCJ3ciI6Mn0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_H0Uqy7LYr6Y7NSjywO4LTQ2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: login.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=3990871db8384d808fe35950b98c5603; MSPRequ=id=264960&lt=1723983614&co=1; OParams=11O.DqabQwPb47wnEJyc4ZU9mZAviuJA!O5cPNWiK95T4wPqANQ0FgrP0TntUPRMHmK8WfPpEk5P3dQGB9wrSbLLeKM0ZXWQTL!mHCPExXBSvxtvEtLODdR0ArrD4L5UQpUcOs5UW3Ak2Jev3ZNJFC5yCVp5XXMqCA4lKS6CcTCYCHAy4C!QQmgjqzI5NCKVv2AKw1KKEcM7x2Wvch6kc5V4tpWeNqQbzv3EWV1nou7wJyX5bW2GbhKqfCCn2Qh2K!WhUPto0Ukm5eArXINh0f7NPBdw*D5ipDeA2BsxeLf9je1VfVKi4zsAetwhfjASE5d8dvBqzlHqeDyXf5tLdQVHk$
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202408150101/pubads_impl.js?cb=31086204 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjMwMHgyNTA=&v=5&s=v31i5imuac3&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NDk4ODAzMzk0LCJhc3RfYiI6MTExMjIsInMiOiJyZWN0YW5nbGUxXzA3Yzc3OTExNmMwNTRhYzRjZDI2ZWI4NDYwZmFkOTQ4In0sIm8iOiJ4YW5kciIsInRwX2NyaWQiOiJYRDoxMTEyMjs0OTg4MDMzOTQifQ%3D%3D&cb=8512999&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pNd01IZ3lOVEE9Iiwid2QiOnsibyI6InhhbmRyIiwidyI6MzAwLCJoIjoyNTB9LCJ3ciI6Mn0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202408150101/pubads_impl.js?cb=31086204 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1168653790437110&correlator=762928904195550&eid=31085738%2C31085908%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie_enabled=1&cdm=www.msn.com&abxe=1&dt=1723983676803&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=puf1plvxsfc0&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=18032&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983667360&idt=9407&adks=4103432296&frm=23&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://www.msn.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1Host: 9f5abbf91696788fd00e78e1d154037a.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa*:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202408150101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1168653790437110&correlator=762928904195550&eid=31085738%2C31085908%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie_enabled=1&cdm=www.msn.com&abxe=1&dt=1723983676803&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=puf1plvxsfc0&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=18032&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983667360&idt=9407&adks=4103432296&frm=23&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202408150101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=4203591261092814&correlator=3757972738643825&eid=31083343%2C31085738%2C31085376%2C31086204%2C31085996%2C31061691%2C31061692&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x600_US_2023_New&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x600&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983679415&adxs=935&adys=1006&biw=1263&bih=907&isw=300&ish=600&scr_x=0&scr_y=0&btvi=1&ucis=esokwjbjo2q&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&rumc=4203591261092814&rume=1&vis=2&psz=300x600&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983667464&idt=11785&adks=3729891914&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://www.msn.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1Host: 97c5cff3fee5ac6fa055b6640c0fa182.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=4203591261092814&correlator=3757972738643825&eid=31083343%2C31085738%2C31085376%2C31086204%2C31085996%2C31061691%2C31061692&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x600_US_2023_New&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x600&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983679415&adxs=935&adys=1006&biw=1263&bih=907&isw=300&ish=600&scr_x=0&scr_y=0&btvi=1&ucis=esokwjbjo2q&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&rumc=4203591261092814&rume=1&vis=2&psz=300x600&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983667464&idt=11785&adks=3729891914&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssHkQwO7FE5XAGBbev6Ls_SJkRmzMd-p6zWNnmoOw0pqAVxSGm6rQDiey6AHJKd8G5CMTSnivPXAanD9DtJ6Xv3hm-5LD6BTqbWJDYZAbo-yoeWKzjkh_f_ehG-5DQ5_293ao2qCTjW-gOJgkKmcUDPLzaVEECwC3aiP21TNmoQeMGkJRLl3N3SlzFpxo6lR9NqUzWTBDu8Re-DPQhaV8_K6hlGGumn1UKt2NRkjaVZyevchtdvFSKpTuQMJ4uyzSm9OsEG1lrbtW5RrHeQr0GLQym_CH3UjNhgPDziGvOevaRW3Qcl3ISvyqTwo6LZCkmPRst2kDyDz51_hUKsbfg6ibaaCtn5oJSfY5v4U2NTehddcnJeSpHrxLaOrvNslI4Ith5ce8ytwg&sai=AMfl-YR0OOh2Kk8B8xN0DLEJgmJdere6gZvXmHl4w5v8s_xh78BN2FV3kpJtal26sJ4JFybB8Lk9N1l3rfM1T_hPO2tXYb_OAhsgRtXZpfgfIoWf95nH4C9FEh3J-RLmxAY&sig=Cg0ArKJSzIcSwNC081jqEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssHkQwO7FE5XAGBbev6Ls_SJkRmzMd-p6zWNnmoOw0pqAVxSGm6rQDiey6AHJKd8G5CMTSnivPXAanD9DtJ6Xv3hm-5LD6BTqbWJDYZAbo-yoeWKzjkh_f_ehG-5DQ5_293ao2qCTjW-gOJgkKmcUDPLzaVEECwC3aiP21TNmoQeMGkJRLl3N3SlzFpxo6lR9NqUzWTBDu8Re-DPQhaV8_K6hlGGumn1UKt2NRkjaVZyevchtdvFSKpTuQMJ4uyzSm9OsEG1lrbtW5RrHeQr0GLQym_CH3UjNhgPDziGvOevaRW3Qcl3ISvyqTwo6LZCkmPRst2kDyDz51_hUKsbfg6ibaaCtn5oJSfY5v4U2NTehddcnJeSpHrxLaOrvNslI4Ith5ce8ytwg&sai=AMfl-YR0OOh2Kk8B8xN0DLEJgmJdere6gZvXmHl4w5v8s_xh78BN2FV3kpJtal26sJ4JFybB8Lk9N1l3rfM1T_hPO2tXYb_OAhsgRtXZpfgfIoWf95nH4C9FEh3J-RLmxAY&sig=Cg0ArKJSzIcSwNC081jqEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /tag/yktrlw8 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bing.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818; MUID=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSd1RJZsGpkD-ocJbAvAXAOq93QTHvM6_C50ufBwQOAI6AIOzonzInP-vFOm1AWZWbfQYTq7iYbaUYuikar3ZhmcHTtag HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/yktrlw8 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818; MUID=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu3Daw7rsl-bI7fYrwn_6hQjDMZFVnjhh2MIP-UD2kRt66dVhylma44ZU69kucNil-xsBBQ8_qpq0Xag-YckwJqdfDXV9-njMn0VqXODy7ry0VbkyRj8gvlUlSzHzHEEZ1-gD7pqePvCSW_2L0cbg2fP6U5jt7BnDI62pbxKAHbZP85pvqNQX4DGXR1I5CVy9jFrBQhDDXZ9V1_OID18cwYI-DvzlXqWhaWcnQIrqfD9oIv-I1OBmLmpC61vSGAaoo--4qU-dQrphKsCmKW-_QzWowOmLCEzKI1EqDJMzh4zz2s71tnp7IKseGjn7p-Zk3q-xhaS5r8CCi_kMptWZYYMN65U63WMe2UWROP8ANmSwCDJEbU9M2ElT_FocEC-_mTMIGc1p_k3nNU&sai=AMfl-YTct-fRY1IxrG-I2d4FJEPRr2QcFiTBp68qIzhmq3SgpwCLH3RcVWLHKvFiddIJyONQPniJC1Wvfm_Xrp71XThA0n8GMefhWU9rdck-Sb8rXNvPehMpJE5czJsjh2U&sig=Cg0ArKJSzGkK5Z6sx5LxEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwLzI4NzkzMjk2NjY6MzAweDYwMA==&v=5&s=v31i5imuldr&id=eyJkZnAiOnsiYWQiOjUwNDMwNTgyMDEsImMiOjEzODQ3NjI4MzUyNSwibCI6NTc5MzI0ODU2MywibyI6Mjg3OTMyOTY2NiwiQSI6Ii80MjExNTE2MywyMjU2OTc2MTk4NS9JUF9NU05fbXNuLmNvbV8zMDB4NjAwX1VTXzIwMjNfTmV3IiwieSI6MCwiY28iOjAsInMiOiJncHQtcGFzc2JhY2sifSwidHBfY3JpZCI6IlhEOjExMTIyOzUwNTU2MzMzOSJ9&cb=5783654&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0x6STROemt6TWprMk5qWTZNekF3ZURZd01BPT0iLCJ3ZCI6eyJvIjoyODc5MzI5NjY2LCJ3IjoiMzAwIiwiaCI6IjYwMCJ9LCJ3ciI6Mn0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/msn-sync.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uidmappixel?ext_uid=33E577E4B44B65A73DE1633BB58264E9&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu3Daw7rsl-bI7fYrwn_6hQjDMZFVnjhh2MIP-UD2kRt66dVhylma44ZU69kucNil-xsBBQ8_qpq0Xag-YckwJqdfDXV9-njMn0VqXODy7ry0VbkyRj8gvlUlSzHzHEEZ1-gD7pqePvCSW_2L0cbg2fP6U5jt7BnDI62pbxKAHbZP85pvqNQX4DGXR1I5CVy9jFrBQhDDXZ9V1_OID18cwYI-DvzlXqWhaWcnQIrqfD9oIv-I1OBmLmpC61vSGAaoo--4qU-dQrphKsCmKW-_QzWowOmLCEzKI1EqDJMzh4zz2s71tnp7IKseGjn7p-Zk3q-xhaS5r8CCi_kMptWZYYMN65U63WMe2UWROP8ANmSwCDJEbU9M2ElT_FocEC-_mTMIGc1p_k3nNU&sai=AMfl-YTct-fRY1IxrG-I2d4FJEPRr2QcFiTBp68qIzhmq3SgpwCLH3RcVWLHKvFiddIJyONQPniJC1Wvfm_Xrp71XThA0n8GMefhWU9rdck-Sb8rXNvPehMpJE5czJsjh2U&sig=Cg0ArKJSzGkK5Z6sx5LxEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=33E577E4B44B65A73DE1633BB58264E9 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/msn-sync.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uidmappixel?ext_uid=33E577E4B44B65A73DE1633BB58264E9&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=71be0a80-1ae4-485a-8834-eb47e51b3f84
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=nms&cs=3&ovsid=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: hbx.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwLzI4NzkzMjk2NjY6MzAweDYwMA==&v=5&s=v31i5imuldr&id=eyJkZnAiOnsiYWQiOjUwNDMwNTgyMDEsImMiOjEzODQ3NjI4MzUyNSwibCI6NTc5MzI0ODU2MywibyI6Mjg3OTMyOTY2NiwiQSI6Ii80MjExNTE2MywyMjU2OTc2MTk4NS9JUF9NU05fbXNuLmNvbV8zMDB4NjAwX1VTXzIwMjNfTmV3IiwieSI6MCwiY28iOjAsInMiOiJncHQtcGFzc2JhY2sifSwidHBfY3JpZCI6IlhEOjExMTIyOzUwNTU2MzMzOSJ9&cb=5783654&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0x6STROemt6TWprMk5qWTZNekF3ZURZd01BPT0iLCJ3ZCI6eyJvIjoyODc5MzI5NjY2LCJ3IjoiMzAwIiwiaCI6IjYwMCJ9LCJ3ciI6Mn0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=33E577E4B44B65A73DE1633BB58264E9 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=516415&c=33E577E4B44B65A73DE1633BB58264E9&mode=inverse&msn_src=ntp&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid?suid=33E577E4B44B65A73DE1633BB58264E9&sid=16&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=nms&cs=3&ovsid=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: hbx.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3669852876390551000V10; data-nms=33E577E4B44B65A73DE1633BB58264E9~~3
Source: global traffic	HTTP traffic detected: GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBEfnwWYCEJVSQJtBjbHUkFMOD_XGg60FEgEBAQE4w2bLZgAAAAAA_eMAAA&S=AQAAAoaF_IclUt9NMNjIDyhzt9g
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=33E577E4B44B65A73DE1633BB58264E9&external=true&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.popin.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://c.bing.com/c.gif?anx_uid=$UID&Red3=MSAN_pd&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=601395030127098432926; tluid=601395030127098432926
Source: global traffic	HTTP traffic detected: GET /sync?ssp=msn&id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: code.yengo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /mapuid?member=280&user=33E577E4B44B65A73DE1633BB58264E9;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D33E577E4B44B65A73DE1633BB58264E9%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3.TOK`DmJOa:3[<ShhB)Imc-4<ywWU8zSc`AcsD!ZPd%1@I6)yP0cmgkAGXqGdD0[%p[s>%q)3RIKLBN; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.
Source: global traffic	HTTP traffic detected: GET /th?id=OVFT.G89KKyU2agPq22JM3fQkdS&pid=News&w=260&h=138&c=14&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _C_ETH=1; _RwBf=r=0&ilt=6&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=6&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:15.9321571+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; ipv6=hit=1723987276789; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /th?id=OVFT.QBcVl42IfhkVOFR6h4F7HC&pid=News&w=260&h=138&c=14&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _C_ETH=1; _RwBf=r=0&ilt=6&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=6&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:15.9321571+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; ipv6=hit=1723987276789; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=33E577E4B44B65A73DE1633BB58264E9&external=true&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=04233305ddc08358a97ff0e9e9b6416e
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.mediago.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=601395030127098432926
Source: global traffic	HTTP traffic detected: GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D33E577E4B44B65A73DE1633BB58264E9%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#FTJ.Pbe83#n[17r1Y/=sJ$OF/JEO=Wh9/H5ipYY'l=QgJ8-WBwXoYcZpvN_fbl]rgl!_6-zQEVk`!0)T-QC!ZZ
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.popin.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca7b47d2d021gaozx00lzzjdk45
Source: global traffic	HTTP traffic detected: GET /mapuid?member=280&user=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D33E577E4B44B65A73DE1633BB58264E9%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#FTJ.Pbe83#n[17r1Y/=sJ$OF/JEO=Wh9/H5ipYY'l=QgJ8-WBwXoYcZpvN_fbl]rgl!_6-zQEVk`!0)T-QC!ZZ
Source: global traffic	HTTP traffic detected: GET /th?id=OVFT.07KqoZq6u1VZ2UwnctM-xS&pid=News&w=260&h=138&c=14&rs=2&qlt=90 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=0&RB=0&GB=0&RG=200&RP=0; _BINGNEWS=SW=1263&SH=907; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; _C_ETH=1; _RwBf=r=0&ilt=6&ihpd=0&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=6&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:15.9321571+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; ipv6=hit=1723987276789; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /sync?ssp=msn&id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: code.yengo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4.FEVNsVF']wIg2C$O>F+:WNSxu9Yw6w^Fw31aPiSir=BWbofRz'niK/noiJhQd1JpDN_1)zLcebTX1Szxh.Dn-oBq0I?%(2K:$doS]%6lNlE2Vn>
Source: global traffic	HTTP traffic detected: GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D33E577E4B44B65A73DE1633BB58264E9%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4.FE:2jUF']wIg2C$O>F+:W!A#F3J.Pbe83#n[17r1Y/=sJ$OF/JEO=Wh9/H5ipYY'l=QgJ8-WBwXoYcZpvN_fbl]rgl!_6-zQEVk`!0.vUQz[m]
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&bgload=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202408150101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=735214815312712&correlator=923626503393033&eid=31079956%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1_D2&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983690611&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=uu4m5cu9mcod&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=2&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x0&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983678143&idt=12451&adks=3902610557&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://www.msn.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html?n=2 HTTP/1.1Host: 8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; anj=dTM7k!M4/QDunaTF']wIg2C$O>F+:WNSxu9Yw8+%Fw31aPiSir=BWbofRz'niK/noiJhQd1JpDN_1)zLcebTX1Szxh.Dn-oBq0I?$rV([E-g@MeqB3^p5wks>-v?dEz>YRea.IOF$dmh><WiwEl]`L!nM4`!_6-zQEVk`!*M^O?_Liy
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4.FEVNsVF']wIg2C$O>F+:WNWF4ZYbi)qih]eR.k62WCy@j^FXWeyHRP$uGm2[qG2lP%G9@7@SEk2IU)BcA/PGW=M5j]^9RFMZ9T5_m!wy>P+/$4
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&bgload=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202408150101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=33E577E4B44B65A73DE1633BB58264E9; t_pt_gid=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; anj=dTM7k!M4/QDunaTF']wIg2C$O>F+:WNWF4ZYw6_UFw31aPiSir=BWbofRz'niK/noiJhQd1JpDN_1)zLcebTX1Szxh.Dn-oBq0I?$rV([E-g@MeqB3^p5wks>-v?dEz>YRea.IOF$dmh><WiwEl]`L!g[Zt!_6-zQEVk`!*g[iAtaS(
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=735214815312712&correlator=923626503393033&eid=31079956%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1_D2&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983690611&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=uu4m5cu9mcod&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=2&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x0&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983678143&idt=12451&adks=3902610557&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /879366/html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CL6Q0AIQ1cag3QIY4r67hgIwAQ&v=APEucNU40TOw-dKm6RDEq3-DiIwufatYJ2y-mdJJq13AuCRObS3oU4YmNY8Afif4hbDQ9ZdYieZYSqqT9nXJPci19ReWJGdahA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=33E577E4B44B65A73DE1633BB58264E9; t_pt_gid=33E577E4B44B65A73DE1633BB58264E9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b6&u=CAESEEj6Pq1Q6LVaNFiqvo_OYpo&google_cver=1&google_push=AXcoOmRYVfbx7yNG5vS0vUsU7Pnu3hiYGrDBzx2U3Y_PJMifWrogwWk9EzW31dbPlp9xYbIgT_mehxdjg-W4p7ngXEyvNcXIG5yq&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRYVfbx7yNG5vS0vUsU7Pnu3hiYGrDBzx2U3Y_PJMifWrogwWk9EzW31dbPlp9xYbIgT_mehxdjg-W4p7ngXEyvNcXIG5yq%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202408150101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESECnvSt13yq47bPetO8RSMNY&google_cver=1&google_push=AXcoOmSOf3RHyp_MxbSunRCob6iHT9iVP8m-X-dQMAa0Jzr1GbaUwwcFWB6wBo0eMKqkBpOoNatsXLkGs2fhxHfQlWMLWMF-JimlUg HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /879366/html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsttdXv3jmX0a6J2pB8ZFot32ksQsx1FPsic5rXcy1lEYd6tVpVMf49cClLmj9hptpcGXMl5MVuszQMAg1vg1U6SmV9nffw32WPm5YevktWhNDChU89q7IsqBIjO_g4qm6Xqr8cS5TKW05mmNfZULuspoS5cY3GURXVPHFsdEptxbo5pSAvvKvjOFRlLUbTQ47PV1e0s2GkEbnAMPhfj0nQDZkpG6FywVkg6BJ-4CfCc_aAM3v2aCWVTZ87pCJCLc-CRvgX0jYqIjkbKx5gAZ-606rZT9L33i2jbQ29kiXipsngKKQVgqvwy8YEaKRjInsdG2kA6M2RQnAex5Zve6MMrnPT5jO3z8A1WjXvscodNmyu_jXaIZRef4SoJU5xd5T48rscf-K5faROBPSKnXasAtIKsB0Sr-5pIhO9F81rmBpKhFD0tqtWtUm8pP8lVNx4kU7yGhgmKKFOh3o4wQdtpCLJhKTTvrUM0Idg9k_1WpJ2A2eXtBLvk7-haL0Iw6p4HRcu-ZLhOxp9J-5NfLIwtcnMrrMsRIojEzv5oxP4csu5wa9UV9kiJek1JQiI-IYk12K9k3DpflD7R0eurdJumEDok_Eel5roVycR43zw-weheXj-HUvH5w55iFz7H7qXhlovwFZBlyPqrSEmz6153TwhcxjdtaqBu7Uix6pV2lo4yw4VYfjb44wZE5fEVrR7CA5blseQJXoJxDs5oWE_qKpmlACiv1o2ufRsJD4Et_q2QXRCloqTDsaCpZ46pRAaw2NK_2chQtALkA2JT-0EK1FnjpnHvSea_WH--X_L3WmtzPCDgJUe3M2csMxFq4LJZEGacyra9pNMzaSPLUt4SnE6zcmEaW76_u3rPICMVQFou2nRzSpxORCfELjqwSiv5ySMBRzEF3e1xtL189dUZG5GtRUPJ_KsYCngU31M1OyglawUciF9hOhciulPrZPZacwIeP0KTbMlbB98r0QfZAQwv5HYYmkvhxnnTom0qF-Yc5vCFIosjfrMOON7hJhvfx4AdSzH20azsBEGEmiI-jJGgHsaPEGWz0UbQ1dpAkWHiiD0JbLOtwHdfggXiAr1NX0R5e3fL_wqP2Ru6QcZr2Iwadaa8OMy133FxxSx-AmQbXEu_Kx8EQFU-Okc3HWSOYcs3UFeYW2Jw0ucrPXjfZQ8X0HUOZks5uHmZsF-MZnMBqHCb3EqhAat6hLqFLMoc1Qu_-1EJQm05JSa79vhX0x3oZLYZckDc7ScJKA9PNs2pTMVwKn21erXNu9WpScqht4RUdaVxg_oUdIJnTJRYGAHN2dCLlNX42A1o_LUj57C88PzBBIZyAuMXJeos8DuARL3mxKsWyqiseuV8jWlHMZQ1IHL0yG3iOM5PawmOK-zHJS5lOLhw-YqUln5Ehlc9uaCaDo6aNMWMcPIbGQRp-4_roEL82NcPWlLlp2aiybXPB3iqAWshlPCWxzjs9XeE1nzixvdEGH0sWGG6_qnHRCXXfVNnrHvIqg00OPOeYuyMRaKaQwHN6TO4X-irYMRU7iLwWcoFmbrvvaNu8WQLK3BbsusdKORZA5hrvsHq24fqqY8zHrmCkcAAuub_bkhidNwQ0HlQM33v&sai=AMfl-YRKcyyVhQx5UzqY9gmze25zCq-c22nXvplXX-fjK8O-55VqbabEHQn8RqbkjzZzOM5J9iIw9CNxK_SBIh_Jle2WfGIGdqw67scca5Sqeftw0m7xTsN8osOphp56CKDKRUfP5jJvmD9-RLBgDnr8UYLhucm3hNQ2IInMSOB3XWdPSeMOPX1hZKNyZ28TDU17VeEzO-EHu5vhMyy_36_ir34qoOjEm1Q6spaP9ZGFeunV7tCUcp6LBx4JKIAXnN8lKQyc4TzaQG8xXbE2GVz1KoCcv_6XD-oJMFxCEWbwESdplberJ-AE2MS5vQzJPeKX10c6ypKxxjqiihvpd1_lsN_nale9iKVo37dx-XUafBe6eAVbXFA7Do3fkC9mt91wjXgriUScL03k5y4vPtaGI1ZlXoioBYBG4j8vj18eGkOH&sig=Cg0ArKJSzKYgmA-IQBBQEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9zd2lzcy5jb20saHR0cHM6Ly9leGFjdGFnLmNvbQ&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1273&cbvp=1&cstd=1252&cisv=r20240814.03769&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-M
Source: global traffic	HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZsHnTtHM668AAGr-AfzMKgAA; CMPS=1333; CMPRO=1333
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b6&u=CAESEEj6Pq1Q6LVaNFiqvo_OYpo&google_cver=1&google_push=AXcoOmRYVfbx7yNG5vS0vUsU7Pnu3hiYGrDBzx2U3Y_PJMifWrogwWk9EzW31dbPlp9xYbIgT_mehxdjg-W4p7ngXEyvNcXIG5yq&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRYVfbx7yNG5vS0vUsU7Pnu3hiYGrDBzx2U3Y_PJMifWrogwWk9EzW31dbPlp9xYbIgT_mehxdjg-W4p7ngXEyvNcXIG5yq%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=alnoeUtZdPuum7SpHmSFYvSfVZas5bZacrsjVbCZay8D
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEMREmyLJZcczGzKLaYE82i4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZsHnTtHM668AAGr-AfzMKgAA; CMPS=1333; CMPRO=1333
Source: global traffic	HTTP traffic detected: GET /sync?exchange=11&google_gid=CAESELjNoL3RC3wkGOTA68nXIyw&google_cver=1&google_push=AXcoOmTDsdeisUoraFa__ckEpzz9ghdoT6Ecj4L91DANuzK3ork5c7G-jT7cfUsOJ7kvqqfFq50FoC7I9hj0dxQDTKy0-f81hxnx HTTP/1.1Host: dsp.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4/QDunaTF']wIg2C$O>F+:WNWF4ZYw7jvFw31aPiSir=BWbofRz'niK/noiJhQd1JpDN_1)zLcebTX1Szxh.Dn-oBq0I?$rV([E-g@MeqB3^p5wks>-v?dEz>YRea.IOF$dmh><WiwEl]`L!g[^u!_6-zQEVk`!p%VBq]o+
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEEcUXY2asDVUQXbLD7nA-Rg&google_cver=1&google_push=AXcoOmSP_8t9kgivr2k1i7Nol5PfWq4chgDHae0LY3KSfeegZkDgOt_ECxKTbOmRDYbRjPmpZrneS3CspygCUMRupYo0yKUSRF2umA HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=ZsHnTtHM668AAGr-AfzMKgAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESECCvhpQSaD9MyVtxaJqmuu4&google_cver=1&google_push=AXcoOmRr_H3N7gWj4QQCRrjmzIJ5AX8UhERe_2j_Oib3yDEfktMXfg-uSZugSxw81q9kDNQLurxB2QkEN0I7eC1Jp0NHNv5GNnf8rg HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca70da320be2vau8i00lzzjbh0l
Source: global traffic	HTTP traffic detected: GET /imid/set?cid=1003212&tid=tblid&uid=33E577E4B44B65A73DE1633BB58264E9 HTTP/1.1Host: sync.im-apps.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gpt&tv=m202408150101&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b6&u=CAESEEj6Pq1Q6LVaNFiqvo_OYpo&google_cver=1&google_push=AXcoOmRYVfbx7yNG5vS0vUsU7Pnu3hiYGrDBzx2U3Y_PJMifWrogwWk9EzW31dbPlp9xYbIgT_mehxdjg-W4p7ngXEyvNcXIG5yq&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRYVfbx7yNG5vS0vUsU7Pnu3hiYGrDBzx2U3Y_PJMifWrogwWk9EzW31dbPlp9xYbIgT_mehxdjg-W4p7ngXEyvNcXIG5yq%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=a8nt6Zaw5EGiAaINQfTsPVGtQbXJaQbcZbq37XyGPlYFot7YDECSOdv9S4eSPyp3tY5GYQIeUojTFaJwQElpOSmYpmkfVj
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEG0-wwpjUeN6tui7O4FI10M&google_cver=1&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13Lz-ksO7wI5muGKSc9PhhGTRdJNTTcikg6dSFFW8FvC0yvo0kbU4R2pnqJjHp3ba496ynFZpw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=87D971852CE94806B61381AC9C494B3B&google_push=AXcoOmSOf3RHyp_MxbSunRCob6iHT9iVP8m-X-dQMAa0Jzr1GbaUwwcFWB6wBo0eMKqkBpOoNatsXLkGs2fhxHfQlWMLWMF-JimlUg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q
Source: global traffic	HTTP traffic detected: GET /ads/studio/cached_libs/tweenmax_2.0.1_min.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /879366/Enabler_01_247.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsttdXv3jmX0a6J2pB8ZFot32ksQsx1FPsic5rXcy1lEYd6tVpVMf49cClLmj9hptpcGXMl5MVuszQMAg1vg1U6SmV9nffw32WPm5YevktWhNDChU89q7IsqBIjO_g4qm6Xqr8cS5TKW05mmNfZULuspoS5cY3GURXVPHFsdEptxbo5pSAvvKvjOFRlLUbTQ47PV1e0s2GkEbnAMPhfj0nQDZkpG6FywVkg6BJ-4CfCc_aAM3v2aCWVTZ87pCJCLc-CRvgX0jYqIjkbKx5gAZ-606rZT9L33i2jbQ29kiXipsngKKQVgqvwy8YEaKRjInsdG2kA6M2RQnAex5Zve6MMrnPT5jO3z8A1WjXvscodNmyu_jXaIZRef4SoJU5xd5T48rscf-K5faROBPSKnXasAtIKsB0Sr-5pIhO9F81rmBpKhFD0tqtWtUm8pP8lVNx4kU7yGhgmKKFOh3o4wQdtpCLJhKTTvrUM0Idg9k_1WpJ2A2eXtBLvk7-haL0Iw6p4HRcu-ZLhOxp9J-5NfLIwtcnMrrMsRIojEzv5oxP4csu5wa9UV9kiJek1JQiI-IYk12K9k3DpflD7R0eurdJumEDok_Eel5roVycR43zw-weheXj-HUvH5w55iFz7H7qXhlovwFZBlyPqrSEmz6153TwhcxjdtaqBu7Uix6pV2lo4yw4VYfjb44wZE5fEVrR7CA5blseQJXoJxDs5oWE_qKpmlACiv1o2ufRsJD4Et_q2QXRCloqTDsaCpZ46pRAaw2NK_2chQtALkA2JT-0EK1FnjpnHvSea_WH--X_L3WmtzPCDgJUe3M2csMxFq4LJZEGacyra9pNMzaSPLUt4SnE6zcmEaW76_u3rPICMVQFou2nRzSpxORCfELjqwSiv5ySMBRzEF3e1xtL189dUZG5GtRUPJ_KsYCngU31M1OyglawUciF9hOhciulPrZPZacwIeP0KTbMlbB98r0QfZAQwv5HYYmkvhxnnTom0qF-Yc5vCFIosjfrMOON7hJhvfx4AdSzH20azsBEGEmiI-jJGgHsaPEGWz0UbQ1dpAkWHiiD0JbLOtwHdfggXiAr1NX0R5e3fL_wqP2Ru6QcZr2Iwadaa8OMy133FxxSx-AmQbXEu_Kx8EQFU-Okc3HWSOYcs3UFeYW2Jw0ucrPXjfZQ8X0HUOZks5uHmZsF-MZnMBqHCb3EqhAat6hLqFLMoc1Qu_-1EJQm05JSa79vhX0x3oZLYZckDc7ScJKA9PNs2pTMVwKn21erXNu9WpScqht4RUdaVxg_oUdIJnTJRYGAHN2dCLlNX42A1o_LUj57C88PzBBIZyAuMXJeos8DuARL3mxKsWyqiseuV8jWlHMZQ1IHL0yG3iOM5PawmOK-zHJS5lOLhw-YqUln5Ehlc9uaCaDo6aNMWMcPIbGQRp-4_roEL82NcPWlLlp2aiybXPB3iqAWshlPCWxzjs9XeE1nzixvdEGH0sWGG6_qnHRCXXfVNnrHvIqg00OPOeYuyMRaKaQwHN6TO4X-irYMRU7iLwWcoFmbrvvaNu8WQLK3BbsusdKORZA5hrvsHq24fqqY8zHrmCkcAAuub_bkhidNwQ0HlQM33v&sai=AMfl-YRKcyyVhQx5UzqY9gmze25zCq-c22nXvplXX-fjK8O-55VqbabEHQn8RqbkjzZzOM5J9iIw9CNxK_SBIh_Jle2WfGIGdqw67scca5Sqeftw0m7xTsN8osOphp56CKDKRUfP5jJvmD9-RLBgDnr8UYLhucm3hNQ2IInMSOB3XWdPSeMOPX1hZKNyZ28TDU17VeEzO-EHu5vhMyy_36_ir34qoOjEm1Q6spaP9ZGFeunV7tCUcp6LBx4JKIAXnN8lKQyc4TzaQG8xXbE2GVz1KoCcv_6XD-oJMFxCEWbwESdplberJ-AE2MS5vQzJPeKX10c6ypKxxjqiihvpd1_lsN_nale9iKVo37dx-XUafBe6eAVbXFA7Do3fkC9mt91wjXgriUScL03k5y4vPtaGI1ZlXoioBYBG4j8vj18eGkOH&sig=Cg0ArKJSzKYgmA-IQBBQEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9zd2lzcy5jb20saHR0cHM6Ly9leGFjdGFnLmNvbQ&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1273&cbvp=1&cstd=1252&cisv=r20240814.03769&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ7
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEMREmyLJZcczGzKLaYE82i4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZsHnTtHM668AAGr-AfzMKgAA; CMPS=1333; CMPRO=1333
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=MTkxNTQ0NzY3MzM3MzE1NTc5MA%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEMREmyLJZcczGzKLaYE82i4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZsHnTtHM668AAGr-AfzMKgAA; CMPS=1333; CMPRO=1333
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEEcUXY2asDVUQXbLD7nA-Rg&google_cver=1&google_push=AXcoOmSP_8t9kgivr2k1i7Nol5PfWq4chgDHae0LY3KSfeegZkDgOt_ECxKTbOmRDYbRjPmpZrneS3CspygCUMRupYo0yKUSRF2umA&rdf=1 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&code=CAESEFr6FhU7fmT_qFE1Ooqa974&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M4/QDunaTF']wIg2C$O>F+:WNWF4ZYw7jvFw31aPiSir=BWbofRz'niK/noiJhQd1JpDN_1)zLcebTX1Szxh.Dn-oBq0I?$rV([E-g@MeqB3^p5wks>-v?dEz>YRea.IOF$dmh><WiwEl]`L!g[^u!_6-zQEVk`!p%VBq]o+
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adkernel&google_hm=QTUwOTE3NDIwMTY2NTAwNTc3Mzk&google_push=AXcoOmTDsdeisUoraFa__ckEpzz9ghdoT6Ecj4L91DANuzK3ork5c7G-jT7cfUsOJ7kvqqfFq50FoC7I9hj0dxQDTKy0-f81hxnx HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmRr_H3N7gWj4QQCRrjmzIJ5AX8UhERe_2j_Oib3yDEfktMXfg-uSZugSxw81q9kDNQLurxB2QkEN0I7eC1Jp0NHNv5GNnf8rg&google_hm=22210ca70da320be2vau8i00lzzjbh0l HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEG0-wwpjUeN6tui7O4FI10M&google_cver=1&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=5747e5fc-35c0-41a5-9a09-3eeddad4a6b6; c=1723983696; tuuid_lu=1723983696
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFDeoTOfBZvrkEePH7_UP2dbz-Q-z_OfDdZuig--fEsqgsKf1ChABINjjiB1gyQagAe_o0qMByAEJqQKkIjWj4H-yPqgDAcgDmwSqBJwCT9BcgGOe0FaplRjbVN7ypBj0DiyiwfKAMAbV7gArjxQFohpoGQ0WkQFUd1d-Uu8KRh1JCv1IlJGevoSMowqI42etfuPxj4m_x2M1QY7GT1MgN72vkmATrJmZZgWpi7MmYzvRiwIFO9j3tL9XYSMoL8Pvt1FLIE96IxhX_dpq8X1TsshAygMlNgDZvWKjTwY6Sbpaw9APZEjonhAPIfjSiT90oKsvZosMvbF5s-VErVC9g7_pAFkREeUaZknPkSg1NFwc1Dw4cFKSkgrOej_F9u5eNc19JkjZGfE7it2MKOI5MwxcaJqjMH-RczYeYq5wVB3SBvXzDyfNl9sHn64bcShm3YPCDfYNyYCj2YRTJ3nT6kUUEr_J5zoef8jABPzF7ILtBOAEA4gFqNKBkk6QBgGgBkyAB_mWrdwCqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB0yAooCOguAQIDAgICAoKiAAki9_cE6WJX2zNzD_ocD8ggbYWR4LXN1YnN5bi0zMTU5NDYyMDYxNzM2NTM3gAoDmAsByAsBgAwBqg0CVVPiDRMI8Z7N3MP-hwMV4-O7CB1Z6zz_sBO4ip0Y0BMA2BMN2BQB0BUB-BYBgBcBshcCGAKyGAkSAqBPGEwiAQA&sigh=6uEjE41wq2s&cid=CAQSPADpaXnfIHRlXpAo7jC9QY0XAG4Hd2UjxwiLTrPrydN-vCM95_YFQWSAkFvCXe9Xsb9-tnIHJONZHuvZ3g&label=window_focus&gqid&qqid=CPq6z9zD_ocDFePjuwgdWes8_w&bgload=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /imid/set?cid=1003212&tid=tblid&uid=33E577E4B44B65A73DE1633BB58264E9 HTTP/1.1Host: sync.im-apps.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: imid_secure=lTigKHomSK-qM87_DSojsQ; imid_created_secure=1723983696
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEMREmyLJZcczGzKLaYE82i4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZsHnTtHM668AAGr-AfzMKgAA; CMPS=1333; CMPRO=1333
Source: global traffic	HTTP traffic detected: GET /ads/studio/cached_libs/tweenmax_2.0.1_min.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /879366/Enabler_01_247.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsttdXv3jmX0a6J2pB8ZFot32ksQsx1FPsic5rXcy1lEYd6tVpVMf49cClLmj9hptpcGXMl5MVuszQMAg1vg1U6SmV9nffw32WPm5YevktWhNDChU89q7IsqBIjO_g4qm6Xqr8cS5TKW05mmNfZULuspoS5cY3GURXVPHFsdEptxbo5pSAvvKvjOFRlLUbTQ47PV1e0s2GkEbnAMPhfj0nQDZkpG6FywVkg6BJ-4CfCc_aAM3v2aCWVTZ87pCJCLc-CRvgX0jYqIjkbKx5gAZ-606rZT9L33i2jbQ29kiXipsngKKQVgqvwy8YEaKRjInsdG2kA6M2RQnAex5Zve6MMrnPT5jO3z8A1WjXvscodNmyu_jXaIZRef4SoJU5xd5T48rscf-K5faROBPSKnXasAtIKsB0Sr-5pIhO9F81rmBpKhFD0tqtWtUm8pP8lVNx4kU7yGhgmKKFOh3o4wQdtpCLJhKTTvrUM0Idg9k_1WpJ2A2eXtBLvk7-haL0Iw6p4HRcu-ZLhOxp9J-5NfLIwtcnMrrMsRIojEzv5oxP4csu5wa9UV9kiJek1JQiI-IYk12K9k3DpflD7R0eurdJumEDok_Eel5roVycR43zw-weheXj-HUvH5w55iFz7H7qXhlovwFZBlyPqrSEmz6153TwhcxjdtaqBu7Uix6pV2lo4yw4VYfjb44wZE5fEVrR7CA5blseQJXoJxDs5oWE_qKpmlACiv1o2ufRsJD4Et_q2QXRCloqTDsaCpZ46pRAaw2NK_2chQtALkA2JT-0EK1FnjpnHvSea_WH--X_L3WmtzPCDgJUe3M2csMxFq4LJZEGacyra9pNMzaSPLUt4SnE6zcmEaW76_u3rPICMVQFou2nRzSpxORCfELjqwSiv5ySMBRzEF3e1xtL189dUZG5GtRUPJ_KsYCngU31M1OyglawUciF9hOhciulPrZPZacwIeP0KTbMlbB98r0QfZAQwv5HYYmkvhxnnTom0qF-Yc5vCFIosjfrMOON7hJhvfx4AdSzH20azsBEGEmiI-jJGgHsaPEGWz0UbQ1dpAkWHiiD0JbLOtwHdfggXiAr1NX0R5e3fL_wqP2Ru6QcZr2Iwadaa8OMy133FxxSx-AmQbXEu_Kx8EQFU-Okc3HWSOYcs3UFeYW2Jw0ucrPXjfZQ8X0HUOZks5uHmZsF-MZnMBqHCb3EqhAat6hLqFLMoc1Qu_-1EJQm05JSa79vhX0x3oZLYZckDc7ScJKA9PNs2pTMVwKn21erXNu9WpScqht4RUdaVxg_oUdIJnTJRYGAHN2dCLlNX42A1o_LUj57C88PzBBIZyAuMXJeos8DuARL3mxKsWyqiseuV8jWlHMZQ1IHL0yG3iOM5PawmOK-zHJS5lOLhw-YqUln5Ehlc9uaCaDo6aNMWMcPIbGQRp-4_roEL82NcPWlLlp2aiybXPB3iqAWshlPCWxzjs9XeE1nzixvdEGH0sWGG6_qnHRCXXfVNnrHvIqg00OPOeYuyMRaKaQwHN6TO4X-irYMRU7iLwWcoFmbrvvaNu8WQLK3BbsusdKORZA5hrvsHq24fqqY8zHrmCkcAAuub_bkhidNwQ0HlQM33v&sai=AMfl-YRKcyyVhQx5UzqY9gmze25zCq-c22nXvplXX-fjK8O-55VqbabEHQn8RqbkjzZzOM5J9iIw9CNxK_SBIh_Jle2WfGIGdqw67scca5Sqeftw0m7xTsN8osOphp56CKDKRUfP5jJvmD9-RLBgDnr8UYLhucm3hNQ2IInMSOB3XWdPSeMOPX1hZKNyZ28TDU17VeEzO-EHu5vhMyy_36_ir34qoOjEm1Q6spaP9ZGFeunV7tCUcp6LBx4JKIAXnN8lKQyc4TzaQG8xXbE2GVz1KoCcv_6XD-oJMFxCEWbwESdplberJ-AE2MS5vQzJPeKX10c6ypKxxjqiihvpd1_lsN_nale9iKVo37dx-XUafBe6eAVbXFA7Do3fkC9mt91wjXgriUScL03k5y4vPtaGI1ZlXoioBYBG4j8vj18eGkOH&sig=Cg0ArKJSzKYgmA-IQBBQEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9zd2lzcy5jb20saHR0cHM6Ly9leGFjdGFnLmNvbQ&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3758&vt=11&dtpt=2485&dett=3&cstd=1252&cisv=r20240814.03769&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-s
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=AQtrj3dFTtGypZhqu1xkCw%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmSP_8t9kgivr2k1i7Nol5PfWq4chgDHae0LY3KSfeegZkDgOt_ECxKTbOmRDYbRjPmpZrneS3CspygCUMRupYo0yKUSRF2umA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&code=CAESEFr6FhU7fmT_qFE1Ooqa974&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; icu=ChgImdYCEAoYASABKAEwtM6HtgY4AUABSAEQtM6HtgYYAA..; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<ZrXsiVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa/bEJcd#A^e+.<Q!!hAYYEy<t
Source: global traffic	HTTP traffic detected: GET /meversion?partner=msnews&market=en-us HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4672102/main.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFDeoTOfBZvrkEePH7_UP2dbz-Q-z_OfDdZuig--fEsqgsKf1ChABINjjiB1gyQagAe_o0qMByAEJqQKkIjWj4H-yPqgDAcgDmwSqBJwCT9BcgGOe0FaplRjbVN7ypBj0DiyiwfKAMAbV7gArjxQFohpoGQ0WkQFUd1d-Uu8KRh1JCv1IlJGevoSMowqI42etfuPxj4m_x2M1QY7GT1MgN72vkmATrJmZZgWpi7MmYzvRiwIFO9j3tL9XYSMoL8Pvt1FLIE96IxhX_dpq8X1TsshAygMlNgDZvWKjTwY6Sbpaw9APZEjonhAPIfjSiT90oKsvZosMvbF5s-VErVC9g7_pAFkREeUaZknPkSg1NFwc1Dw4cFKSkgrOej_F9u5eNc19JkjZGfE7it2MKOI5MwxcaJqjMH-RczYeYq5wVB3SBvXzDyfNl9sHn64bcShm3YPCDfYNyYCj2YRTJ3nT6kUUEr_J5zoef8jABPzF7ILtBOAEA4gFqNKBkk6QBgGgBkyAB_mWrdwCqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB0yAooCOguAQIDAgICAoKiAAki9_cE6WJX2zNzD_ocD8ggbYWR4LXN1YnN5bi0zMTU5NDYyMDYxNzM2NTM3gAoDmAsByAsBgAwBqg0CVVPiDRMI8Z7N3MP-hwMV4-O7CB1Z6zz_sBO4ip0Y0BMA2BMN2BQB0BUB-BYBgBcBshcCGAKyGAkSAqBPGEwiAQA&sigh=6uEjE41wq2s&cid=CAQSPADpaXnfIHRlXpAo7jC9QY0XAG4Hd2UjxwiLTrPrydN-vCM95_YFQWSAkFvCXe9Xsb9-tnIHJONZHuvZ3g&label=window_focus&gqid&qqid=CPq6z9zD_ocDFePjuwgdWes8_w&bgload=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsttdXv3jmX0a6J2pB8ZFot32ksQsx1FPsic5rXcy1lEYd6tVpVMf49cClLmj9hptpcGXMl5MVuszQMAg1vg1U6SmV9nffw32WPm5YevktWhNDChU89q7IsqBIjO_g4qm6Xqr8cS5TKW05mmNfZULuspoS5cY3GURXVPHFsdEptxbo5pSAvvKvjOFRlLUbTQ47PV1e0s2GkEbnAMPhfj0nQDZkpG6FywVkg6BJ-4CfCc_aAM3v2aCWVTZ87pCJCLc-CRvgX0jYqIjkbKx5gAZ-606rZT9L33i2jbQ29kiXipsngKKQVgqvwy8YEaKRjInsdG2kA6M2RQnAex5Zve6MMrnPT5jO3z8A1WjXvscodNmyu_jXaIZRef4SoJU5xd5T48rscf-K5faROBPSKnXasAtIKsB0Sr-5pIhO9F81rmBpKhFD0tqtWtUm8pP8lVNx4kU7yGhgmKKFOh3o4wQdtpCLJhKTTvrUM0Idg9k_1WpJ2A2eXtBLvk7-haL0Iw6p4HRcu-ZLhOxp9J-5NfLIwtcnMrrMsRIojEzv5oxP4csu5wa9UV9kiJek1JQiI-IYk12K9k3DpflD7R0eurdJumEDok_Eel5roVycR43zw-weheXj-HUvH5w55iFz7H7qXhlovwFZBlyPqrSEmz6153TwhcxjdtaqBu7Uix6pV2lo4yw4VYfjb44wZE5fEVrR7CA5blseQJXoJxDs5oWE_qKpmlACiv1o2ufRsJD4Et_q2QXRCloqTDsaCpZ46pRAaw2NK_2chQtALkA2JT-0EK1FnjpnHvSea_WH--X_L3WmtzPCDgJUe3M2csMxFq4LJZEGacyra9pNMzaSPLUt4SnE6zcmEaW76_u3rPICMVQFou2nRzSpxORCfELjqwSiv5ySMBRzEF3e1xtL189dUZG5GtRUPJ_KsYCngU31M1OyglawUciF9hOhciulPrZPZacwIeP0KTbMlbB98r0QfZAQwv5HYYmkvhxnnTom0qF-Yc5vCFIosjfrMOON7hJhvfx4AdSzH20azsBEGEmiI-jJGgHsaPEGWz0UbQ1dpAkWHiiD0JbLOtwHdfggXiAr1NX0R5e3fL_wqP2Ru6QcZr2Iwadaa8OMy133FxxSx-AmQbXEu_Kx8EQFU-Okc3HWSOYcs3UFeYW2Jw0ucrPXjfZQ8X0HUOZks5uHmZsF-MZnMBqHCb3EqhAat6hLqFLMoc1Qu_-1EJQm05JSa79vhX0x3oZLYZckDc7ScJKA9PNs2pTMVwKn21erXNu9WpScqht4RUdaVxg_oUdIJnTJRYGAHN2dCLlNX42A1o_LUj57C88PzBBIZyAuMXJeos8DuARL3mxKsWyqiseuV8jWlHMZQ1IHL0yG3iOM5PawmOK-zHJS5lOLhw-YqUln5Ehlc9uaCaDo6aNMWMcPIbGQRp-4_roEL82NcPWlLlp2aiybXPB3iqAWshlPCWxzjs9XeE1nzixvdEGH0sWGG6_qnHRCXXfVNnrHvIqg00OPOeYuyMRaKaQwHN6TO4X-irYMRU7iLwWcoFmbrvvaNu8WQLK3BbsusdKORZA5hrvsHq24fqqY8zHrmCkcAAuub_bkhidNwQ0HlQM33v&sai=AMfl-YRKcyyVhQx5UzqY9gmze25zCq-c22nXvplXX-fjK8O-55VqbabEHQn8RqbkjzZzOM5J9iIw9CNxK_SBIh_Jle2WfGIGdqw67scca5Sqeftw0m7xTsN8osOphp56CKDKRUfP5jJvmD9-RLBgDnr8UYLhucm3hNQ2IInMSOB3XWdPSeMOPX1hZKNyZ28TDU17VeEzO-EHu5vhMyy_36_ir34qoOjEm1Q6spaP9ZGFeunV7tCUcp6LBx4JKIAXnN8lKQyc4TzaQG8xXbE2GVz1KoCcv_6XD-oJMFxCEWbwESdplberJ-AE2MS5vQzJPeKX10c6ypKxxjqiihvpd1_lsN_nale9iKVo37dx-XUafBe6eAVbXFA7Do3fkC9mt91wjXgriUScL03k5y4vPtaGI1ZlXoioBYBG4j8vj18eGkOH&sig=Cg0ArKJSzKYgmA-IQBBQEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9zd2lzcy5jb20saHR0cHM6Ly9leGFjdGFnLmNvbQ&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3758&vt=11&dtpt=2485&dett=3&cstd=1252&cisv=r20240814.03769&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqT
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODYzMjEwNTU0OTkyMzg5OTQxOA&google_push=AXcoOmRR0ff_2f93k8Jhy0vXFWIVW8hhVagJp5ORPtpyKQwp97gAm2oE0EQYOuswOSOrZ7ItbhIZMNmcQBqoNHQCeWpf4b2Usebw4Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/js/rum.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /meversion?partner=msnews&market=en-us HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4672102/lx_300x250_default.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4672102/main.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=119&user_id=5108559734713326131&expires=30&ssp=google HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=5747e5fc-35c0-41a5-9a09-3eeddad4a6b6; c=1723983696; tuuid_lu=1723983697; google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFDeoTOfBZvrkEePH7_UP2dbz-Q-z_OfDdZuig--fEsqgsKf1ChABINjjiB1gyQagAe_o0qMByAEJqQKkIjWj4H-yPqgDAcgDmwSqBJwCT9BcgGOe0FaplRjbVN7ypBj0DiyiwfKAMAbV7gArjxQFohpoGQ0WkQFUd1d-Uu8KRh1JCv1IlJGevoSMowqI42etfuPxj4m_x2M1QY7GT1MgN72vkmATrJmZZgWpi7MmYzvRiwIFO9j3tL9XYSMoL8Pvt1FLIE96IxhX_dpq8X1TsshAygMlNgDZvWKjTwY6Sbpaw9APZEjonhAPIfjSiT90oKsvZosMvbF5s-VErVC9g7_pAFkREeUaZknPkSg1NFwc1Dw4cFKSkgrOej_F9u5eNc19JkjZGfE7it2MKOI5MwxcaJqjMH-RczYeYq5wVB3SBvXzDyfNl9sHn64bcShm3YPCDfYNyYCj2YRTJ3nT6kUUEr_J5zoef8jABPzF7ILtBOAEA4gFqNKBkk6QBgGgBkyAB_mWrdwCqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB0yAooCOguAQIDAgICAoKiAAki9_cE6WJX2zNzD_ocD8ggbYWR4LXN1YnN5bi0zMTU5NDYyMDYxNzM2NTM3gAoDmAsByAsBgAwBqg0CVVPiDRMI8Z7N3MP-hwMV4-O7CB1Z6zz_sBO4ip0Y0BMA2BMN2BQB0BUB-BYBgBcBshcCGAKyGAkSAqBPGEwiAQA&sigh=6uEjE41wq2s&cid=CAQSPADpaXnfIHRlXpAo7jC9QY0XAG4Hd2UjxwiLTrPrydN-vCM95_YFQWSAkFvCXe9Xsb9-tnIHJONZHuvZ3g&label=window_focus&gqid&qqid=CPq6z9zD_ocDFePjuwgdWes8_w&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFDeoTOfBZvrkEePH7_UP2dbz-Q-z_OfDdZuig--fEsqgsKf1ChABINjjiB1gyQagAe_o0qMByAEJqQKkIjWj4H-yPqgDAcgDmwSqBJwCT9BcgGOe0FaplRjbVN7ypBj0DiyiwfKAMAbV7gArjxQFohpoGQ0WkQFUd1d-Uu8KRh1JCv1IlJGevoSMowqI42etfuPxj4m_x2M1QY7GT1MgN72vkmATrJmZZgWpi7MmYzvRiwIFO9j3tL9XYSMoL8Pvt1FLIE96IxhX_dpq8X1TsshAygMlNgDZvWKjTwY6Sbpaw9APZEjonhAPIfjSiT90oKsvZosMvbF5s-VErVC9g7_pAFkREeUaZknPkSg1NFwc1Dw4cFKSkgrOej_F9u5eNc19JkjZGfE7it2MKOI5MwxcaJqjMH-RczYeYq5wVB3SBvXzDyfNl9sHn64bcShm3YPCDfYNyYCj2YRTJ3nT6kUUEr_J5zoef8jABPzF7ILtBOAEA4gFqNKBkk6QBgGgBkyAB_mWrdwCqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB0yAooCOguAQIDAgICAoKiAAki9_cE6WJX2zNzD_ocD8ggbYWR4LXN1YnN5bi0zMTU5NDYyMDYxNzM2NTM3gAoDmAsByAsBgAwBqg0CVVPiDRMI8Z7N3MP-hwMV4-O7CB1Z6zz_sBO4ip0Y0BMA2BMN2BQB0BUB-BYBgBcBshcCGAKyGAkSAqBPGEwiAQA&sigh=6uEjE41wq2s&cid=CAQSPADpaXnfIHRlXpAo7jC9QY0XAG4Hd2UjxwiLTrPrydN-vCM95_YFQWSAkFvCXe9Xsb9-tnIHJONZHuvZ3g&label=window_focus&gqid&qqid=CPq6z9zD_ocDFePjuwgdWes8_w&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4672102/lx_300x250_default.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl&google_hm=V0fl_DXAQaWaCT7t2tSmtg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/studio/cached_libs/gsap_3.11.5_min.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/js/rum.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFDeoTOfBZvrkEePH7_UP2dbz-Q-z_OfDdZuig--fEsqgsKf1ChABINjjiB1gyQagAe_o0qMByAEJqQKkIjWj4H-yPqgDAcgDmwSqBJwCT9BcgGOe0FaplRjbVN7ypBj0DiyiwfKAMAbV7gArjxQFohpoGQ0WkQFUd1d-Uu8KRh1JCv1IlJGevoSMowqI42etfuPxj4m_x2M1QY7GT1MgN72vkmATrJmZZgWpi7MmYzvRiwIFO9j3tL9XYSMoL8Pvt1FLIE96IxhX_dpq8X1TsshAygMlNgDZvWKjTwY6Sbpaw9APZEjonhAPIfjSiT90oKsvZosMvbF5s-VErVC9g7_pAFkREeUaZknPkSg1NFwc1Dw4cFKSkgrOej_F9u5eNc19JkjZGfE7it2MKOI5MwxcaJqjMH-RczYeYq5wVB3SBvXzDyfNl9sHn64bcShm3YPCDfYNyYCj2YRTJ3nT6kUUEr_J5zoef8jABPzF7ILtBOAEA4gFqNKBkk6QBgGgBkyAB_mWrdwCqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB0yAooCOguAQIDAgICAoKiAAki9_cE6WJX2zNzD_ocD8ggbYWR4LXN1YnN5bi0zMTU5NDYyMDYxNzM2NTM3gAoDmAsByAsBgAwBqg0CVVPiDRMI8Z7N3MP-hwMV4-O7CB1Z6zz_sBO4ip0Y0BMA2BMN2BQB0BUB-BYBgBcBshcCGAKyGAkSAqBPGEwiAQA&sigh=6uEjE41wq2s&cid=CAQSPADpaXnfIHRlXpAo7jC9QY0XAG4Hd2UjxwiLTrPrydN-vCM95_YFQWSAkFvCXe9Xsb9-tnIHJONZHuvZ3g&label=window_focus&gqid&qqid=CPq6z9zD_ocDFePjuwgdWes8_w&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8087982859a1d684e85e915a9548fa55.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/studio/cached_libs/gsap_3.11.5_min.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4669666/MadeOfSwitzerland.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4669666/star_alliance.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4669666/en_swiss_rgb.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creatives/assets/4669663/Abendstimmung_Offer_300x250.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12953987991237766043/index.html?e=69&leftOffset=0&topOffset=0&c=p7ZX3a6kct&t=1&renderingType=2&ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFDeoTOfBZvrkEePH7_UP2dbz-Q-z_OfDdZuig--fEsqgsKf1ChABINjjiB1gyQagAe_o0qMByAEJqQKkIjWj4H-yPqgDAcgDmwSqBJwCT9BcgGOe0FaplRjbVN7ypBj0DiyiwfKAMAbV7gArjxQFohpoGQ0WkQFUd1d-Uu8KRh1JCv1IlJGevoSMowqI42etfuPxj4m_x2M1QY7GT1MgN72vkmATrJmZZgWpi7MmYzvRiwIFO9j3tL9XYSMoL8Pvt1FLIE96IxhX_dpq8X1TsshAygMlNgDZvWKjTwY6Sbpaw9APZEjonhAPIfjSiT90oKsvZosMvbF5s-VErVC9g7_pAFkREeUaZknPkSg1NFwc1Dw4cFKSkgrOej_F9u5eNc19JkjZGfE7it2MKOI5MwxcaJqjMH-RczYeYq5wVB3SBvXzDyfNl9sHn64bcShm3YPCDfYNyYCj2YRTJ3nT6kUUEr_J5zoef8jABPzF7ILtBOAEA4gFqNKBkk6QBgGgBkyAB_mWrdwCqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB0yAooCOguAQIDAgICAoKiAAki9_cE6WJX2zNzD_ocD8ggbYWR4LXN1YnN5bi0zMTU5NDYyMDYxNzM2NTM3gAoDmAsByAsBgAwBqg0CVVPiDRMI8Z7N3MP-hwMV4-O7CB1Z6zz_sBO4ip0Y0BMA2BMN2BQB0BUB-BYBgBcBshcCGAKyGAkSAqBPGEwiAQA&sigh=6uEjE41wq2s&cid=CAQSPADpaXnfIHRlXpAo7jC9QY0XAG4Hd2UjxwiLTrPrydN-vCM95_YFQWSAkFvCXe9Xsb9-tnIHJONZHuvZ3g&label=window_focus&gqid&qqid=CPq6z9zD_ocDFePjuwgdWes8_w&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js;ord=1766829498 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ut/v3 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js;ord=1766829498 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.ab0328e0642cd3dce109af83af811ed6&pid=Wdp&w=468&h=304&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.4db43b19d975b0dbaf86471def913929&pid=Wdp&w=468&h=304&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.11a5d67eb793050fe326b589fd64c1fb&pid=Wdp&w=468&h=304&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.1e9d457232ae80c0509de014ddb43bae&pid=Wdp&w=468&h=304&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i5imv8tj&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTQyNTI5OTQyLCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV8xOGFlZDk2ODM3ZWY0NmFlZThmYWJkN2NhZTk2ZjE3NyJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzU0MjUyOTk0MiJ9&cb=2328385&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.0d839e0baef4caf1078f7daf24ae1093&pid=Wdp&w=468&h=304&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QL2DvBMdgcAAAMA1gAFAQjVzoe2BhDgms60y6WM7WAYzsOF6qqwwsoaKjYJ4O6s3Xah7D8RAe2zb5NW6T8ZAAAAoEfhDEAhAe2zb5NW6T8p4O4JJMgxAAAAgD0K7z8wx6_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_xEBGAHABQDJBQAFARTwP9IFCQkFC3wAAADYBQHgBQHwBWH6BQQIABAAkAYAmAYAogYNMjgwIwlgHDQwN7gGAMEGAS8wAADwP9AG1gHaBhYKEAkRGQFgEAAYAOAGAfIGhwEI0PpqEoABRmhSNVVGb0EB2ERBQWtDQlFFSW52N1NDaEN0emNvQkdNU2U3d0lnQnlnQVFNZmJzQVpJbVBuZEMxQ1NSMWlITW42HwIAZ1UfDEFBQUmtHCxKb0JBZ2dBcUFFQXMuIABMQS4ugAcBiAcAoAcByAfUhwbSBw0V-AGsCNoHBgHz8KQYAOAHAOoHAggA8AfHgYcDighuCmoAAAGRZW-kCGDaMSy2k41gW2OonN0CxosS_onpW2eQwojj8k-hCHQMTJ4Z0CKbRUKi9Q9lGvvWS90zMDbOnCrGlPzdc_k2Xy93UDg5srFiY8IOejA5IcUzMaNXTJybdK8PkgaPNikZU8Q8EAGVCAAAgD-YCAHACAHSCA4IgYKEiJCgwIABEAAYANoIBAgAIAA.&s=51581a945b89c4480d20655ac72ccc892b67c7f7 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Lan
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLnDPBDZwYAAAMA1gAFAQjVzoe2BhCJz9OxjcSMjSwYzsOF6qqwwsoaKjYJH4XrUbge1T8RH4XrUbge1T8ZAAAAQArXA0AhH4UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlCZq8DTAVjktQNgAGjuAnjx1wWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEJTkVXVVNFTjEzigJUdWYoJ2EnLCA0MDg1MDU0LCAwKTt1ZignaScsIDEwNDUxMTA5FRUsZycsIDE2MzIzMTg0FRUAcgE-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_oFWYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQBsgQQCAAQARisAiD6ASgAMAA4ArgEAMAEjZe9IsgEANIEDzExMTIyI0ZSQTE6NTMyNdoEAggB4AQB8ASZq8DTAYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AGkkLaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwHIB_HXBdIHDQkAAAkpHBAAGADaBwYIBQnwouAHAOoHAggA8AfzuswRighuCmoAAAGRZW-kCCwaMiDWNOeJkZYGdKeC2OuzEQr_aEM8iCYaSVxs_-1SzfvpOQpLPA7Vqtr5inXc5wPNzUKnqSCdz2Xk-faXlHdrxH8L7S3nCTCENyOsvRcEnvwr_AyQNkbKT44Rs3IvFw5gEAGVCAAAgD-YCAHACAHSCA4IgYKEiJCgwIABEAAYANoIBAgAIAA.&s=8d77b233cc8b91e1d24b4b4651568442a757f6cd HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v101.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202408120101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i5imv8tj&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTQyNTI5OTQyLCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV8xOGFlZDk2ODM3ZWY0NmFlZThmYWJkN2NhZTk2ZjE3NyJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzU0MjUyOTk0MiJ9&cb=2328385&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ== HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QL2DvBMdgcAAAMA1gAFAQjVzoe2BhDgms60y6WM7WAYzsOF6qqwwsoaKjYJ4O6s3Xah7D8RAe2zb5NW6T8ZAAAAoEfhDEAhAe2zb5NW6T8p4O4JJMgxAAAAgD0K7z8wx6_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_xEBGAHABQDJBQAFARTwP9IFCQkFC3wAAADYBQHgBQHwBWH6BQQIABAAkAYAmAYAogYNMjgwIwlgHDQwN7gGAMEGAS8wAADwP9AG1gHaBhYKEAkRGQFgEAAYAOAGAfIGhwEI0PpqEoABRmhSNVVGb0EB2ERBQWtDQlFFSW52N1NDaEN0emNvQkdNU2U3d0lnQnlnQVFNZmJzQVpJbVBuZEMxQ1NSMWlITW42HwIAZ1UfDEFBQUmtHCxKb0JBZ2dBcUFFQXMuIABMQS4ugAcBiAcAoAcByAfUhwbSBw0V-AGsCNoHBgHz8KQYAOAHAOoHAggA8AfHgYcDighuCmoAAAGRZW-kCGDaMSy2k41gW2OonN0CxosS_onpW2eQwojj8k-hCHQMTJ4Z0CKbRUKi9Q9lGvvWS90zMDbOnCrGlPzdc_k2Xy93UDg5srFiY8IOejA5IcUzMaNXTJybdK8PkgaPNikZU8Q8EAGVCAAAgD-YCAHACAHSCA4IgYKEiJCgwIABEAAYANoIBAgAIAA.&s=51581a945b89c4480d20655ac72ccc892b67c7f7 HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4*gh
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLnDPBDZwYAAAMA1gAFAQjVzoe2BhCJz9OxjcSMjSwYzsOF6qqwwsoaKjYJH4XrUbge1T8RH4XrUbge1T8ZAAAAQArXA0AhH4UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlCZq8DTAVjktQNgAGjuAnjx1wWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEJTkVXVVNFTjEzigJUdWYoJ2EnLCA0MDg1MDU0LCAwKTt1ZignaScsIDEwNDUxMTA5FRUsZycsIDE2MzIzMTg0FRUAcgE-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_oFWYAxegAwGqAwDAA9gEyAMA2AOmBeADAOgDAPgDAYAEAJIEBi91dC92M5gEAKIECzguNDYuMTIzLjMzqAQBsgQQCAAQARisAiD6ASgAMAA4ArgEAMAEjZe9IsgEANIEDzExMTIyI0ZSQTE6NTMyNdoEAggB4AQB8ASZq8DTAYgFAZgFAKAF____________AcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBQH6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AGkkLaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwHIB_HXBdIHDQkAAAkpHBAAGADaBwYIBQnwouAHAOoHAggA8AfzuswRighuCmoAAAGRZW-kCCwaMiDWNOeJkZYGdKeC2OuzEQr_aEM8iCYaSVxs_-1SzfvpOQpLPA7Vqtr5inXc5wPNzUKnqSCdz2Xk-faXlHdrxH8L7S3nCTCENyOsvRcEnvwr_AyQNkbKT44Rs3IvFw5gEAGVCAAAgD-YCAHACAHSCA4IgYKEiJCgwIABEAAYANoIBAgAIAA.&s=8d77b233cc8b91e1d24b4b4651568442a757f6cd HTTP/1.1Host: fra1-ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N3340.4244959OMG_OUTCOMES/B32383863.400918311;dc_ver=101.296;sz=728x90;u_sd=1;nel=1;dc_adk=2018517514;ord=u8id6f;click=https%3A%2F%2Ffra1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfCBmwAAAAMAxBkFAQjVzoe2BhDgms60y6WM7WAYzsOF6qqwwsoaIMevyAEomAIwnAU4AkCWs9mCAkjktQNQAFoDVVNEYgNVU0Ro2AVwWnjuAoAB1IcGiAEBkAEBmAEFoAECqQHg7qzddqHsP7EBAe2zb5NW6T-5AQAAAKBH4QxAwQEB7QkUBMkBESgg2AEB4AEA8AEA%2Fs%3Daeec1c6ca56b69e6beaddf42d535f9452fe256f0%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521ZhAsjwjL27EdEJaz2YICGOS1AyAAKAAxAAAAAAAAAAA6CUZSQTE6NjU3NkCSR0kAAAAAAADwP1EAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAAAAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw..%2Fcca%3DNjY4I0ZSQTE6NjU3Ng%3D%3D%2Fbn%3D99284%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=1,https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse$0;xdt=0;crlt=493UiWMiz2;stc=1;chaa=1;sttr=2806;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.3c3df640d0679ac4fd1a7f86154c8505&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKwE_BDsAkAAAMA1gAFAQjVzoe2BhCJz9OxjcSMjSwYzsOF6qqwwsoaKjYJH4XrUbge1T8RH4XrUbge1T8ZAAAAQArXA0AhH4UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlCZq8DTAVjktQNgAGjuAnjx1wWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEJTkVXVVNFTjEzigJUdWYoJ2EnLCA0MDg1MDU0LCAwKTt1ZignaScsIDEwNDUxMTA5FRUsZycsIDE2MzIzMTg0FRUAcgE-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-HA0KCFNQTElUAU30BwQBMIADAIgDAZAD_6BVmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEEAgAEAEYrAIg-gEoADAAOAK4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjUzMjXaBAIIAeAEAfAEmavA0wGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB6gUQCglzYWxlc19wb3MSA0FURuoFCgoDcHViEgNtc27qBQwKBm1hcmtldBICdXPqBQsKA2NhdBIEbmV3c-oFFgoGc3ViY2F0EgxuZXdzcG9saXRpY3PqBdkBCgpjb250X3RvcGljEsoBcG9saXRpY3MscG9saXRpY3NfYW5kX2dvdmVybm1lbnQsbmV3cyxuZXdzX21lZGlhLGthbWFsYV9oYXJyaXMsd29tZW4sY29udHJvdmVyc2llcyxqb3VybmFsaXNtLHNjYW5kYWxzLHBvbGl0aWNhbF9kZWJhdGVzLGJpZGVuX3ByZXNpZGVuY3kscG9saXRpY2FsX3NjaWVuY2UsdmljZV9wcmVzaWRlbnRpYWxfZGViYXRlcyxwb2xpdGljYWxfY2FuZGlkYXRlc-oFGgoPc2FsZXNfcGFnZV90eXBlEgdhcnRpY2xl6gUPCgtrdm1zZnRfeWVhchIA6gUUCglwYWdlX3R5cGUSB2FydGljbGXqBQoKBmZsaWdodBIA6gURCgxtc2Z0X3JlZnJlc2gSATHqBQ8KC2t2bXNmdF9tYWtlEgDqBRkKC2RldmljZV90eXBlEgpkZXNrdG9wd2Vi6gUKCgRsYW5nEgJlbuoFFgoLcHJvdmlkZXJfaWQSBzdHNkY2U0zqBRsKEXNhbGVzX3Byb3ZpZGVyX2lkEgZBQXFjSzfqBScKA3JpZBIgOGNlMDYzNDMyMzY1NGU1NmJjZTIwYWZjZjZlNjVhMzXqBRAKDGt2bXNmdF9tb2RlbBIA8AUB-gUECAAQAJAGAJgGALgGAMEGAAAAAAAA8D_QBpJC2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcByAfx1wXSBw0JAAAAAAAAAAAQABgA2gcGCAAQABgA4AcA6gcCC
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202408120101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1461090454189421&correlator=1968341624220134&eid=31079956%2C31086033%2C31086221%2C31085777%2C31085995%2C31065644%2C21065725&output=ldjh&gdfp_req=1&vrg=202408120101&ptt=17&impl=fif&iu_parts=78792240%3A22569761985%2CMSN_US_300x250_YH_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=276x250%7C278x250%7C256x250%7C285x250%7C250x250%7C300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983705215&adxs=935&adys=430&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=dpn29g5o1tm7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983700949&idt=4225&adks=985191438&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://www.msn.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.7749d498d5407a0eaf8b6e14f370572f&pid=Wdp&w=468&h=304&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N3340.4244959OMG_OUTCOMES/B32383863.400918311;dc_ver=101.296;sz=728x90;u_sd=1;nel=1;dc_adk=2018517514;ord=u8id6f;click=https%3A%2F%2Ffra1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfCBmwAAAAMAxBkFAQjVzoe2BhDgms60y6WM7WAYzsOF6qqwwsoaIMevyAEomAIwnAU4AkCWs9mCAkjktQNQAFoDVVNEYgNVU0Ro2AVwWnjuAoAB1IcGiAEBkAEBmAEFoAECqQHg7qzddqHsP7EBAe2zb5NW6T-5AQAAAKBH4QxAwQEB7QkUBMkBESgg2AEB4AEA8AEA%2Fs%3Daeec1c6ca56b69e6beaddf42d535f9452fe256f0%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521ZhAsjwjL27EdEJaz2YICGOS1AyAAKAAxAAAAAAAAAAA6CUZSQTE6NjU3NkCSR0kAAAAAAADwP1EAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAAAAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw..%2Fcca%3DNjY4I0ZSQTE6NjU3Ng%3D%3D%2Fbn%3D99284%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=1,https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse$0;xdt=0;crlt=493UiWMiz2;stc=1;chaa=1;sttr=2806;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbCI6ndRYsHrJ9IvodppZ4Y8nHVQpc09cTRjwrW6IuVpfecyRZ4FqhbcjTDirsDYGvRYdAZJU2jzBKKuguwiE_PWgdKairMJa-HzhBJOx-_vgtOBH2LbyeQhPY0ssKUgapznXRyTn3KdJBWy4NigFAAOpx8cW7cL7jWwyT_PxSL1qNx0Z6_yyzfquyM5GY181QMa2d-8t-5QfPwHbGhSyG&sai=AMfl-YSk9eHGotV8hEIRg4-DKML3cbTUNlDjDHUkbCEHjPEIDNPXfN9tnUoLM1_ZgN3y853lQoYmPfgQ-L8GNrkyKQgXPxi_mir-vc_k1A&sig=Cg0ArKJSzDgtvwSx6fGbEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9uaXNzYW51c2EuY29t&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240814.22776&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-sourceReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7AA41OgX8WYBNK_e0tvKFY1-p7l6V6fuYm0zMhzZNESo0Q3Q
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.37dffe4dc438e0527f249d2ef2f165bc&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.9f9ad2ca640aff0de81072c6150dc973&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QKwE_BDsAkAAAMA1gAFAQjVzoe2BhCJz9OxjcSMjSwYzsOF6qqwwsoaKjYJH4XrUbge1T8RH4XrUbge1T8ZAAAAQArXA0AhH4UJGwApESTIMQAAAKCZmeE_MKfMnw44mAJA8lZIAlCZq8DTAVjktQNgAGjuAnjx1wWAAQGKAQNVU0SSBQbwVZgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEJTkVXVVNFTjEzigJUdWYoJ2EnLCA0MDg1MDU0LCAwKTt1ZignaScsIDEwNDUxMTA5FRUsZycsIDE2MzIzMTg0FRUAcgE-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-HA0KCFNQTElUAU30BwQBMIADAIgDAZAD_6BVmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEEAgAEAEYrAIg-gEoADAAOAK4BADABI2XvSLIBADSBA8xMTEyMiNGUkExOjUzMjXaBAIIAeAEAfAEmavA0wGIBQGYBQCgBf___________wHABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB6gUQCglzYWxlc19wb3MSA0FURuoFCgoDcHViEgNtc27qBQwKBm1hcmtldBICdXPqBQsKA2NhdBIEbmV3c-oFFgoGc3ViY2F0EgxuZXdzcG9saXRpY3PqBdkBCgpjb250X3RvcGljEsoBcG9saXRpY3MscG9saXRpY3NfYW5kX2dvdmVybm1lbnQsbmV3cyxuZXdzX21lZGlhLGthbWFsYV9oYXJyaXMsd29tZW4sY29udHJvdmVyc2llcyxqb3VybmFsaXNtLHNjYW5kYWxzLHBvbGl0aWNhbF9kZWJhdGVzLGJpZGVuX3ByZXNpZGVuY3kscG9saXRpY2FsX3NjaWVuY2UsdmljZV9wcmVzaWRlbnRpYWxfZGViYXRlcyxwb2xpdGljYWxfY2FuZGlkYXRlc-oFGgoPc2FsZXNfcGFnZV90eXBlEgdhcnRpY2xl6gUPCgtrdm1zZnRfeWVhchIA6gUUCglwYWdlX3R5cGUSB2FydGljbGXqBQoKBmZsaWdodBIA6gURCgxtc2Z0X3JlZnJlc2gSATHqBQ8KC2t2bXNmdF9tYWtlEgDqBRkKC2RldmljZV90eXBlEgpkZXNrdG9wd2Vi6gUKCgRsYW5nEgJlbuoFFgoLcHJvdmlkZXJfaWQSBzdHNkY2U0zqBRsKEXNhbGVzX3Byb3ZpZGVyX2lkEgZBQXFjSzfqBScKA3JpZBIgOGNlMDYzNDMyMzY1NGU1NmJjZTIwYWZjZjZlNjVhMzXqBRAKDGt2bXNmdF9tb2RlbBIA8AUB-gUECAAQAJAGAJgGALgGAMEGAAAAAAAA8D_QBpJC2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcByAfx1wXSBw0JAAAAAAAAAAAQABgA2gcGCAAQABgA4AcA6gcCC
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.d3d37ddf92d81d1f2f8d17a851422011&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5&OCID=BingNewsBrowse
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1461090454189421&correlator=1968341624220134&eid=31079956%2C31086033%2C31086221%2C31085777%2C31085995%2C31065644%2C21065725&output=ldjh&gdfp_req=1&vrg=202408120101&ptt=17&impl=fif&iu_parts=78792240%3A22569761985%2CMSN_US_300x250_YH_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=276x250%7C278x250%7C256x250%7C285x250%7C250x250%7C300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983705215&adxs=935&adys=430&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=dpn29g5o1tm7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983700949&idt=4225&adks=985191438&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsutjTbhwCwAeKcOSU_GRCkDK8mL-HQ4usHVMxP-wV2g6p8x_bu6N-FSuw5wMAC4x7WZ3jCb7bQ8QvlY37c_Ilq9YIhR7PohC1fPKDJ5MRrc7LsjOUqUKUC_ztpNpnl8cveoYCNjQBC0rNkyBBUEZO1W5LqTBB0enzy6lRbBWcKMR_cRhZZG6fVif4dB95iZh7_F2rLC1O8TB0gfNG23dk1K34dj2LsTR6nGlAsiEMycs-cnKyOzwSkQc-HnAifWeGVttC3tKtJzXs65P49k7SMFXOPysYeiWenw734NA18Y0Z9eaohP3nxzJiXlY3x-cL5F5d7JVFEIlGLa7QzOCaRz7xd56Rr-_LEVd5BxPAPTLK9w_gw19aVx9w&sai=AMfl-YTBUIbr-M1eShE4djDwEvYHGR6E037E3u_5jHxiay7Ul-z52fbH6ylAiHdw9YrLzbudbIzGvoWRNRMpP-iDCSw9NXQ2oIKIFqWMl_fDMCmRdPi_sOdyFtI-TNbuwbk&sig=Cg0ArKJSzJt-giUv51dNEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7AA41OgX8WYBNK_e0tvKFY1-p7l6V6fuYm0zMhzZNESo0Q3Q
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbCI6ndRYsHrJ9IvodppZ4Y8nHVQpc09cTRjwrW6IuVpfecyRZ4FqhbcjTDirsDYGvRYdAZJU2jzBKKuguwiE_PWgdKairMJa-HzhBJOx-_vgtOBH2LbyeQhPY0ssKUgapznXRyTn3KdJBWy4NigFAAOpx8cW7cL7jWwyT_PxSL1qNx0Z6_yyzfquyM5GY181QMa2d-8t-5QfPwHbGhSyG&sai=AMfl-YSk9eHGotV8hEIRg4-DKML3cbTUNlDjDHUkbCEHjPEIDNPXfN9tnUoLM1_ZgN3y853lQoYmPfgQ-L8GNrkyKQgXPxi_mir-vc_k1A&sig=Cg0ArKJSzDgtvwSx6fGbEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9uaXNzYW51c2EuY29t&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240814.22776&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7KrjuVftbE70eyMdUgmURlsCoNn-B-j8F1f_i1SBNZd7U0iw
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaTQRd3fF8eOkXwsTVmbB3gVS_WRABOq9AT3oA24nSXjwq8ybIu7nAx0zIGNi-umBFlaKXO3_1_M6WpqiiDiotvbeaZGtg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwLzQzNDUxMTkyMDozMDB4MjUw&v=5&s=v31i5imveqp&id=eyJkZnAiOnsiYWQiOjUwODYxNjAwLCJjIjoxMzg0NzY3NTE5MjYsImwiOjY1ODI0NDE1MjIsIm8iOjQzNDUxMTkyMCwiQSI6Ii83ODc5MjI0MCwyMjU2OTc2MTk4NS9NU05fVVNfMzAweDI1MF9ZSF81IiwieSI6MCwiY28iOjAsInMiOiJncHQtcGFzc2JhY2sifSwidHBfY3JpZCI6IlhEOjExMTIyOzQ0MzU1MzE3NyJ9&cb=1778707&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0x6UXpORFV4TVRreU1Eb3pNREI0TWpVdyIsIndkIjp7Im8iOjQzNDUxMTkyMCwidyI6IjMwMCIsImgiOiIyNTAifSwid3IiOjJ9 HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7AA41OgX8WYBNK_e0tvKFY1-p7l6V6fuYm0zMhzZNESo0Q3Q
Source: global traffic	HTTP traffic detected: GET /simgad/549548057492328521 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbs3aENBrbCIgoUvHB73rTpZ-G8vXqskbV4QI5xduNGGBDlcg0jsjNdHvdiBG0pBLr3i3UWTeJg&label=window_focus&gqid&qqid=CI2-0ePD_ocDFfLzEQgdBEwIKg&bgload=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7AA41OgX8WYBNK_e0tvKFY1-p7l6V6fuYm0zMhzZNESo0Q3Q
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbs3aENBrbCIgoUvHB73rTpZ-G8vXqskbV4QI5xduNGGBDlcg0jsjNdHvdiBG0pBLr3i3UWTeJg&label=window_focus&gqid&qqid=CI2-0ePD_ocDFfLzEQgdBEwIKg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7AA41OgX8WYBNK_e0tvKFY1-p7l6V6fuYm0zMhzZNESo0Q3Q
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.74dc79c596ee1584d0def046d22406ea&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5&OCID=BingNewsBrowse
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsutjTbhwCwAeKcOSU_GRCkDK8mL-HQ4usHVMxP-wV2g6p8x_bu6N-FSuw5wMAC4x7WZ3jCb7bQ8QvlY37c_Ilq9YIhR7PohC1fPKDJ5MRrc7LsjOUqUKUC_ztpNpnl8cveoYCNjQBC0rNkyBBUEZO1W5LqTBB0enzy6lRbBWcKMR_cRhZZG6fVif4dB95iZh7_F2rLC1O8TB0gfNG23dk1K34dj2LsTR6nGlAsiEMycs-cnKyOzwSkQc-HnAifWeGVttC3tKtJzXs65P49k7SMFXOPysYeiWenw734NA18Y0Z9eaohP3nxzJiXlY3x-cL5F5d7JVFEIlGLa7QzOCaRz7xd56Rr-_LEVd5BxPAPTLK9w_gw19aVx9w&sai=AMfl-YTBUIbr-M1eShE4djDwEvYHGR6E037E3u_5jHxiay7Ul-z52fbH6ylAiHdw9YrLzbudbIzGvoWRNRMpP-iDCSw9NXQ2oIKIFqWMl_fDMCmRdPi_sOdyFtI-TNbuwbk&sig=Cg0ArKJSzJt-giUv51dNEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7KrjuVftbE70eyMdUgmURlsCoNn-B-j8F1f_i1SBNZd7U0iw
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaTQRd3fF8eOkXwsTVmbB3gVS_WRABOq9AT3oA24nSXjwq8ybIu7nAx0zIGNi-umBFlaKXO3_1_M6WpqiiDiotvbeaZGtg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvz5EWBN_09HFTvNxCl4_Xo5lcjVEflDYkfbZBYwRvDJKksloxZoJLyxlJmfFihDTLA_VmVxX1fBU9rZfqds8041QTHnlsEUKCMor_VSv-Ejkr48lHk4TggyTN7NjwEKhN3FwEKq5YW80DfaknVC1RtRePvbPIrp5cxbqzvFfvC1sYvezGQ7H0CfYgqsvt2m2pzwgqimQernrsbWR1vxYfUUMocinDOj44jRwI35-3x3OflQkOgtKphz9_ZKl2lcOaW8ADG8zLg5S367XrrRoozb1ztBEJo1NWvvtS3yRfP9RtKWGy4fYHaSlVV37m8hYV-74Obx2DHqnVH8OHvBdBoEKMTmeSIkEBbsQm11leF270ykWsDNO-6aGt0&sai=AMfl-YSRsEXvHisZ3VK4blOvdeKXazWY5kTcPjl-fRe5uoa6wYwBdHW7E3LLiUfmtEe8mU7S3vs7Q_J-h_ie97xyGJWg4L_g6zpexPZT7Dt0si4H938EOkUoCbxGJ1l0keY&sig=Cg0ArKJSzC0woU_E3jbYEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=1915447673373155790; receive-cookie-deprecation=1; XANDR_PANID=TLwLIBPUBbLm66GQ64D3R8a0UXklRLd8r-eJrI0Uz51W3Msy_EIj0xD2955G5LRM3ZtWfwyHFfSvtXqdpR1Jy7nBkxlGHvxXBfXGHbv3bvA.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=280&pub_id=43801&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; uuid2=1915447673373155790; XANDR_PANID=-IH9wjKpsfkyo00eSNVZlPHOCnXl19vGctMssIacHQhZtBx8YC77mIaRtgR0rY94rQnPZXnWNiYgJr8CyooFRi5xXUxBaI42sv_j3pa5moY.; anj=dTM7k!M40me8)4ghqdmU(3$!WKpL3!s9=8<Ztp^iVu0E(ZqWiUaCcSjK)bY>IUcY=XmL?U@WxDb?jsNS-'5@I@#T9(s7cag=qZ(j'$:f7R_wR2d.?h0=RlW7qZLg^3('RIthzh(D]UW7pQsg^5:s#oXJqFU=TST_%Z.K):x>K)/?oJ6AmL>[o6*39H:rt_t3f_sxbVa0TvRcd#A^e+.<Q!!snJZBuWw; icu=ChgImdYCEAoYAiACKAIw1c6HtgY4AkACSAIQ1c6HtgYYAQ..
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwLzQzNDUxMTkyMDozMDB4MjUw&v=5&s=v31i5imveqp&id=eyJkZnAiOnsiYWQiOjUwODYxNjAwLCJjIjoxMzg0NzY3NTE5MjYsImwiOjY1ODI0NDE1MjIsIm8iOjQzNDUxMTkyMCwiQSI6Ii83ODc5MjI0MCwyMjU2OTc2MTk4NS9NU05fVVNfMzAweDI1MF9ZSF81IiwieSI6MCwiY28iOjAsInMiOiJncHQtcGFzc2JhY2sifSwidHBfY3JpZCI6IlhEOjExMTIyOzQ0MzU1MzE3NyJ9&cb=1778707&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0x6UXpORFV4TVRreU1Eb3pNREI0TWpVdyIsIndkIjp7Im8iOjQzNDUxMTkyMCwidyI6IjMwMCIsImgiOiIyNTAifSwid3IiOjJ9 HTTP/1.1Host: protected-by.clarium.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7KrjuVftbE70eyMdUgmURlsCoNn-B-j8F1f_i1SBNZd7U0iw
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbs3aENBrbCIgoUvHB73rTpZ-G8vXqskbV4QI5xduNGGBDlcg0jsjNdHvdiBG0pBLr3i3UWTeJg&label=window_focus&gqid&qqid=CI2-0ePD_ocDFfLzEQgdBEwIKg&bgload=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7KrjuVftbE70eyMdUgmURlsCoNn-B-j8F1f_i1SBNZd7U0iw
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.97faf204605008bf0990cec8735fa566&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5&OCID=BingNewsBrowse
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbs3aENBrbCIgoUvHB73rTpZ-G8vXqskbV4QI5xduNGGBDlcg0jsjNdHvdiBG0pBLr3i3UWTeJg&label=window_focus&gqid&qqid=CI2-0ePD_ocDFfLzEQgdBEwIKg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7KrjuVftbE70eyMdUgmURlsCoNn-B-j8F1f_i1SBNZd7U0iw
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.209c9d234c2a6b3169520e37a29f523f&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1 HTTP/1.1Host: th.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _Rwho=u=d&ts=2024-08-18; SRCHUSR=DOB=20240818&T=1723983583000&TPC=1723983612000; ipv6=hit=1723987276789; _clsk=1no8lhc%7C1723983684997%7C3%7C0%7Ct.clarity.ms%2Fcollect; _RwBf=r=0&ilt=8&ihpd=0&ispd=0&rc=5&rb=0&gb=0&rg=200&pc=5&mtu=0&rbb=0&g=0&cid=&clo=0&v=8&l=2024-08-18T07:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&ard=0001-01-01T00:00:00.0000000&rwdbt=0001-01-01T00:00:00.0000000&rwflt=0001-01-01T00:00:00.0000000&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2024-08-18T12:21:30.0643337+00:00&rwred=0&wls=&wlb=&wle=&ccp=&cpt=&lka=0&lkt=0&aad=0&TH=; _BINGNEWS=SW=1263&SH=890; SRCHHPGUSR=SRCHLANG=en&IG=3947DF07162944008B7CC8B693785EFC&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0&HV=1723983613&WTS=63859580383; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A&R=5&RB=0&GB=0&RG=200&RP=5&OCID=BingNewsBrowse
Source: global traffic	HTTP traffic detected: GET /simgad/549548057492328521 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbCI6ndRYsHrJ9IvodppZ4Y8nHVQpc09cTRjwrW6IuVpfecyRZ4FqhbcjTDirsDYGvRYdAZJU2jzBKKuguwiE_PWgdKairMJa-HzhBJOx-_vgtOBH2LbyeQhPY0ssKUgapznXRyTn3KdJBWy4NigFAAOpx8cW7cL7jWwyT_PxSL1qNx0Z6_yyzfquyM5GY181QMa2d-8t-5QfPwHbGhSyG&sai=AMfl-YSk9eHGotV8hEIRg4-DKML3cbTUNlDjDHUkbCEHjPEIDNPXfN9tnUoLM1_ZgN3y853lQoYmPfgQ-L8GNrkyKQgXPxi_mir-vc_k1A&sig=Cg0ArKJSzDgtvwSx6fGbEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9uaXNzYW51c2EuY29t&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2350&vt=11&dtpt=2348&dett=2&cstd=0&cisv=r20240814.22776&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-trigger, event-sourceReferer: https://www.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlYpKZzhvXm7dnQ74znLtAt9HBbuZDtW12czu9g4kfr4WgovzNemUnkDB8d07Q; ar_debug=1; APC=AfxxVi7AA41OgX8WYBNK_e0tvKFY1-p7l6V6fuYm0zMhzZNESo0Q3Q
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&e=wqT_3QLQFfBM0AoAAAMA1gAFAQjVzoe2BhDgms60y6WM7WAYzsOF6qqwwsoaKjYJ4O6s3Xah7D8RAe2zb5NW6T8ZAAAAoEfhDEAhAe2zb5NW6T8p4O4JJMgxAAAAgD0K7z8wx6_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-HBUKCFNQTElUAU0Z2vB9gAMAiAMBkAMAmAMXoAMBqgMAwAPYBMgDANgDpgXgAwDoAwD4AwGABACSBAYvdXQvdjOYBACiBAs4LjQ2LjEyMy4zM6gEAbIEDwgAEAEY2AUgWigAMAA4ArgEAMAEj5e9IsgEANIEDTY2OCNGUkExOjY1NzbaBAIIAeAEAfAExU0giAUBmAUAoAX_EQEYAcAFAMkFAAUBFPA_0gUJCQUL8EAAAADYBQHgBQHqBRAKCXNhbGVzX3BvcxIDQVRG6gUPCgtrdm1zZnRfbWFrZRIA6gUWCgZzdWJjYXQSDG5ld3Nwb0lodOoFFgoLcHJvdmlkZXJfaWQSBzdIRDY2RkPqBRsKEQ1XHR9ABkFBcWNLN-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-hY9hEQUFrQ0JRRUludjdTQ2hDdHpjb0JHTVNlN3dJZ0J5Z0FRTWZic0FaS

Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: for good reason. <em>The Worst Person in the World</em> stars Renate Reinsve as a young woman in her twenties navigating her own personal identity in matters of career, life, and naturally, love. The indie darling falls into the subgenre of messy women learning through experience. Lena Dunham walked so Renate Reinsve could run (through the streets in a scene stealing fashion, iykyk).</p><p><a class=\"body-btn-link\" href=\"https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fe30177ce-5201-402d-a346-6333ca2fe5b8&sref=https%3A%2F%2Fwww.cosmopolitan.com%2Fentertainment%2Fmovies%2Fg38941793%2Fbest-romance-movies-on-hulu%2F\">Shop Now</a></p><p><a href=\"https://www.youtube.com/watch?v=IWIF_gAFIKY\">See the original post on Youtube</a></p>","focalRegion":{"x1":208,"x2":310,"y1":123,"y2":225},"source":"msn"}},{"title":"2) Portrait of a Lady on Fire","body":"<p>This is what you and the Duolingo owl have been training for. Enter one of the best modern French films to exist,<em> Portrait of a Lady on Fire</em>. This 2019 drama explores forbidden romance between two young women in 18th century France; one an aristocrat set to be married off to a rich Italian man, and the other an artist commissioned to paint her portrait. It equals www.youtube.com (Youtube)
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: for good reason. <em>The Worst Person in the World</em> stars Renate Reinsve as a young woman in her twenties navigating her own personal identity in matters of career, life, and naturally, love. The indie darling falls into the subgenre of messy women learning through experience. Lena Dunham walked so Renate Reinsve could run (through the streets in a scene stealing fashion, iykyk).</p><p><a class=\"body-btn-link\" href=\"https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fe30177ce-5201-402d-a346-6333ca2fe5b8&sref=https%3A%2F%2Fwww.countryliving.com%2Flife%2Fentertainment%2Fg46570841%2Fbest-romance-movies-on-hulu%2F\">Shop Now</a></p><p><a href=\"https://www.youtube.com/watch?v=IWIF_gAFIKY\">See the original post on Youtube</a></p>","image":{"width":480,"height":360,"quality":88,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1n0L9b.img","attribution":"Rotten Tomatoes Indie@Youtube","title":"1) The Worst Person in the World","caption":"<p>This Norwegian rom-com was the cinematic golden child of 2021 equals www.youtube.com (Youtube)
Source: chromecache_851.1.dr, chromecache_886.1.dr	String found in binary or memory: "use strict";(self.viewsWebpackChunks=self.viewsWebpackChunks\|\|[]).push([["video-card-wc"],{94394:function(e,t,n){n.d(t,{G:function(){return o},d:function(){return r}});const r=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;if(!e\|\|!e.length)return;return[...e].sort(((e,n)=>{const r=o(e,t);return o(n,t)-r}))[0]},o=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;if(!e)return 0;const n=window.innerHeight,r=window.pageYOffset,o=r+n,{top:i=0,height:u=1}=e.getBoundingClientRect(),c=i+r-t,a=c+u;if(a<r\|\|c>o)return 0;return(Math.min(a,o)-Math.max(c,r))/u100}},87274:function(e,t,n){n.d(t,{JL:function(){return i},Nt:function(){return r},Om:function(){return a},SK:function(){return o},bI:function(){return s},gN:function(){return u},qN:function(){return c}});const r="consumption-feed-activity-change",o="immersive-fullscreen-close",i="consumption-trigger-star-rating",u="consumption-gallery-refresh-rectangle-ads",c="header-route-changed",a="selectedNavItemClicked",s="refreshOnChannelStore"},48809:function(e,t,n){n.d(t,{Te:function(){return l},sn:function(){return d}});var r=n(87260),o=n(72322),i=n(857),u=n(76733);const c={"yidianzixun.com":"https://msn.yidianzixun.com/zh-cn","doris.yidianzixun.com":"https://msn.yidianzixun.com/zh-cn"};function a(){return r.jG.CurrentMarket===o.IY.PLPL?"wideo":"video"}function s(e){return encodeURI(e.trim().toLowerCase().replace(/[\uD83C\|\uD83D\|\uD83E][\uDC00-\uDFFF]\|[0-9\|\|#]\uFE0F\u20E3\|[0-9\|#]\u20E3\|[\u203C-\u3299]\uFE0F\u200D\|[\u203C-\u3299]\uFE0F\|[\u2122-\u2B55]\|\u303D\|[\uA9\|\uAE]\u3030\|\uA9\|\uAE\|\u3030/gi,"").slice(0,600).replace(/[\][!"#$%&'()*+,./:;<=>?@\\^_{\|}~]/g,"").replace(/\s+/g,"-").replace(/-+$/,""))\|\|"title"}function f(e){const t=new URL(e),n=(0,i.ku)();return n&&t.searchParams.set("ocid",n),t.href}function l(e,t){const n=r.jG.HostPage.verticalKey\|\|"watch",o=a();return f(`${r.jG.NavTargetUrlWithLocale}/${o}/${n}/${s(t)}/vi-${e}`)}function d(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"web-content",i=arguments.length>3&&void 0!==arguments[3]?arguments[3]:"webcontent";try{if(r.jG.CurrentMarket==o.IY.ZHCN)return function(e,t,n){try{const r=new URL(t);r.searchParams.delete("ocid");const o=c[r.hostname];if(o){const t=new URL(`${o}/video/${n}/web-content/vi-${e}`);return t.search=`?vid=vi-${e}&provider=yd`,f(t.href)}return f(r.href)}catch(e){return u.k.logError(`WatchUrlUtility: GetWatchDeeplinkForWebContentZHCN: Failed to compose web video url: ${t}`),t}}(e,t,i);const l=new URL(t);l.searchParams.delete("ocid");const d=a(),h=new URL(`${r.jG.NavTargetUrlWithLocale}/${d}/${i}/${s(n)}/vi-${e}`);if("www.youtube.com"==l.hostname)return h.searchParams.set("vid",l.searchParams.get("v")\|\|""),h.searchParams.set("provider","yt"),f(h.href);if("www.facebook.com"==l.hostname){const e=t.match(/^http(?:s?):\/\/(?:www\.\|web\.\|m\.)?facebook\.com\/([A-z0-9.]+)\/videos(?:\/[0-9A-z].+)?\/(\d+)(?:.+)?$/);return h.searchParams.set("vid",e&&e[2]\|\|""),h.searchParams
Source: chromecache_851.1.dr, chromecache_886.1.dr	String found in binary or memory: "use strict";(self.viewsWebpackChunks=self.viewsWebpackChunks\|\|[]).push([["video-card-wc"],{94394:function(e,t,n){n.d(t,{G:function(){return o},d:function(){return r}});const r=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;if(!e\|\|!e.length)return;return[...e].sort(((e,n)=>{const r=o(e,t);return o(n,t)-r}))[0]},o=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;if(!e)return 0;const n=window.innerHeight,r=window.pageYOffset,o=r+n,{top:i=0,height:u=1}=e.getBoundingClientRect(),c=i+r-t,a=c+u;if(a<r\|\|c>o)return 0;return(Math.min(a,o)-Math.max(c,r))/u100}},87274:function(e,t,n){n.d(t,{JL:function(){return i},Nt:function(){return r},Om:function(){return a},SK:function(){return o},bI:function(){return s},gN:function(){return u},qN:function(){return c}});const r="consumption-feed-activity-change",o="immersive-fullscreen-close",i="consumption-trigger-star-rating",u="consumption-gallery-refresh-rectangle-ads",c="header-route-changed",a="selectedNavItemClicked",s="refreshOnChannelStore"},48809:function(e,t,n){n.d(t,{Te:function(){return l},sn:function(){return d}});var r=n(87260),o=n(72322),i=n(857),u=n(76733);const c={"yidianzixun.com":"https://msn.yidianzixun.com/zh-cn","doris.yidianzixun.com":"https://msn.yidianzixun.com/zh-cn"};function a(){return r.jG.CurrentMarket===o.IY.PLPL?"wideo":"video"}function s(e){return encodeURI(e.trim().toLowerCase().replace(/[\uD83C\|\uD83D\|\uD83E][\uDC00-\uDFFF]\|[0-9\|\|#]\uFE0F\u20E3\|[0-9\|#]\u20E3\|[\u203C-\u3299]\uFE0F\u200D\|[\u203C-\u3299]\uFE0F\|[\u2122-\u2B55]\|\u303D\|[\uA9\|\uAE]\u3030\|\uA9\|\uAE\|\u3030/gi,"").slice(0,600).replace(/[\][!"#$%&'()*+,./:;<=>?@\\^_{\|}~]/g,"").replace(/\s+/g,"-").replace(/-+$/,""))\|\|"title"}function f(e){const t=new URL(e),n=(0,i.ku)();return n&&t.searchParams.set("ocid",n),t.href}function l(e,t){const n=r.jG.HostPage.verticalKey\|\|"watch",o=a();return f(`${r.jG.NavTargetUrlWithLocale}/${o}/${n}/${s(t)}/vi-${e}`)}function d(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"web-content",i=arguments.length>3&&void 0!==arguments[3]?arguments[3]:"webcontent";try{if(r.jG.CurrentMarket==o.IY.ZHCN)return function(e,t,n){try{const r=new URL(t);r.searchParams.delete("ocid");const o=c[r.hostname];if(o){const t=new URL(`${o}/video/${n}/web-content/vi-${e}`);return t.search=`?vid=vi-${e}&provider=yd`,f(t.href)}return f(r.href)}catch(e){return u.k.logError(`WatchUrlUtility: GetWatchDeeplinkForWebContentZHCN: Failed to compose web video url: ${t}`),t}}(e,t,i);const l=new URL(t);l.searchParams.delete("ocid");const d=a(),h=new URL(`${r.jG.NavTargetUrlWithLocale}/${d}/${i}/${s(n)}/vi-${e}`);if("www.youtube.com"==l.hostname)return h.searchParams.set("vid",l.searchParams.get("v")\|\|""),h.searchParams.set("provider","yt"),f(h.href);if("www.facebook.com"==l.hostname){const e=t.match(/^http(?:s?):\/\/(?:www\.\|web\.\|m\.)?facebook\.com\/([A-z0-9.]+)\/videos(?:\/[0-9A-z].+)?\/(\d+)(?:.+)?$/);return h.searchParams.set("vid",e&&e[2]\|\|""),h.searchParams
Source: chromecache_1052.1.dr, chromecache_636.1.dr	String found in binary or memory: (self.viewsWebpackChunks=self.viewsWebpackChunks\|\|[]).push([["web-components_share-view_dist_index_js"],{56825:function(e,t,a){"use strict";var r,i,n;a.d(t,{Ck:function(){return l},I8:function(){return s},OF:function(){return n},UP:function(){return o},be:function(){return r}}),function(e){e.SetEdgeAsDefault="9",e.SetEdgeAsDefaultV2="rewards_anaheim_install",e.EdgeNTP_NewsDailySet_Child1="EdgeNTP_NewsDailySet_Child1",e.EdgeNTP_NewsDailySet_Child2="EdgeNTP_NewsDailySet_Child2",e.EdgeNTP_NewsDailySet_Child3="EdgeNTP_NewsDailySet_Child3",e.ENUS_infomode_switch_keep_s1_100="ENUS_infomode_switch_keep_s1_100",e.ENUS_infomode_switch_keep_s2_400="ENUS_infomode_switch_keep_s2_400",e.ENUS_infomode_keep_disqualification="ENUS_infomode_keep_disqualification",e.ENUS_FV_sign_in_200points="ENUS_FV_sign_in_200points",e.EdgeNTP_ENTP_AccLink_Promo="EdgeNTP_ENTP_AccLink_Promo",e.ENUS_readarticle10_100points="ENUS_readarticle10_100points",e.ENUS_readarticle5_50points="ENUS_readarticle5_50points",e.ENUS_readarticle3_30points="ENUS_readarticle3_30points",e.ENUS_sharearticle5_20points="ENUS_sharearticle5_20points",e.ENUS_sharearticle10_40points="ENUS_sharearticle10_40points",e.ENUS_sharearticle20_80points="ENUS_sharearticle20_80points",e.BackupPayment="ENUS_readandearn_backup_payment"}(r\|\|(r={})),function(e){e.TopicDataActions="TopicDataActions",e.LayoutActions="LayoutActions"}(i\|\|(i={})),function(e){e.TryInformationalMode="TryInformationalMode",e.SetEdgeAsDefault="SetEdgeAsDefault"}(n\|\|(n={}));const o="https://www.bing.com/fd/auth/signin?action=acclink&provider=windows_live_id&return_url=https://www.bing.com&src=EXPLICIT&cobrandid=6bc5c73f-92af-46e7-87d4-c9c4ea2cb56d&publ=RewardsDO&pn=AccountLinking&crea=ML2DRL",s=new Map;s.set(r.SetEdgeAsDefault,!1),s.set(r.SetEdgeAsDefaultV2,!1),s.set(r.ENUS_infomode_switch_keep_s1_100,!1);const l=new Map,d={experienceConnector:i.LayoutActions,actionName:n.TryInformationalMode,requiredCount:1,observedActivityCount:0},c={activities:[{experienceConnector:i.LayoutActions,actionName:n.SetEdgeAsDefault,requiredCount:1,observedActivityCount:0}],isRewardActivityComplete:!1,isOfferReported:!1},h={activities:[d],isRewardActivityComplete:!1,isOfferReported:!1,isLocalMessage:!0,isLocalFollowOnMessage:!0};l.set(r.SetEdgeAsDefault,[c]),l.set(r.SetEdgeAsDefaultV2,[c]),l.set(r.ENUS_infomode_switch_keep_s1_100,[h])},62123:function(e,t,a){"use strict";a.r(t),a.d(t,{MsnContentShareView:function(){return ce}});var r=a(33940),i=a(28904),n=a(99452),o=a(56825);function s(){return navigator&&navigator.share}function l(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"socialshare";const r=new URL(e);return t&&(r.search=""),r.searchParams.set("ocid",a),r.toString()}var d=a(82898);var c=a(85205),h=a(87260);const u=(0,h.Yq)().StaticsUrl,g=`${u}latest/views/icons/Link.svg`,p=`${u}latest/views/icons/social/Facebook.svg`,f=`${u}latest/views/icons/social/X.svg`,b=`${u}latest/views/icons/soci
Source: chromecache_1052.1.dr, chromecache_636.1.dr	String found in binary or memory: (self.viewsWebpackChunks=self.viewsWebpackChunks\|\|[]).push([["web-components_share-view_dist_index_js"],{56825:function(e,t,a){"use strict";var r,i,n;a.d(t,{Ck:function(){return l},I8:function(){return s},OF:function(){return n},UP:function(){return o},be:function(){return r}}),function(e){e.SetEdgeAsDefault="9",e.SetEdgeAsDefaultV2="rewards_anaheim_install",e.EdgeNTP_NewsDailySet_Child1="EdgeNTP_NewsDailySet_Child1",e.EdgeNTP_NewsDailySet_Child2="EdgeNTP_NewsDailySet_Child2",e.EdgeNTP_NewsDailySet_Child3="EdgeNTP_NewsDailySet_Child3",e.ENUS_infomode_switch_keep_s1_100="ENUS_infomode_switch_keep_s1_100",e.ENUS_infomode_switch_keep_s2_400="ENUS_infomode_switch_keep_s2_400",e.ENUS_infomode_keep_disqualification="ENUS_infomode_keep_disqualification",e.ENUS_FV_sign_in_200points="ENUS_FV_sign_in_200points",e.EdgeNTP_ENTP_AccLink_Promo="EdgeNTP_ENTP_AccLink_Promo",e.ENUS_readarticle10_100points="ENUS_readarticle10_100points",e.ENUS_readarticle5_50points="ENUS_readarticle5_50points",e.ENUS_readarticle3_30points="ENUS_readarticle3_30points",e.ENUS_sharearticle5_20points="ENUS_sharearticle5_20points",e.ENUS_sharearticle10_40points="ENUS_sharearticle10_40points",e.ENUS_sharearticle20_80points="ENUS_sharearticle20_80points",e.BackupPayment="ENUS_readandearn_backup_payment"}(r\|\|(r={})),function(e){e.TopicDataActions="TopicDataActions",e.LayoutActions="LayoutActions"}(i\|\|(i={})),function(e){e.TryInformationalMode="TryInformationalMode",e.SetEdgeAsDefault="SetEdgeAsDefault"}(n\|\|(n={}));const o="https://www.bing.com/fd/auth/signin?action=acclink&provider=windows_live_id&return_url=https://www.bing.com&src=EXPLICIT&cobrandid=6bc5c73f-92af-46e7-87d4-c9c4ea2cb56d&publ=RewardsDO&pn=AccountLinking&crea=ML2DRL",s=new Map;s.set(r.SetEdgeAsDefault,!1),s.set(r.SetEdgeAsDefaultV2,!1),s.set(r.ENUS_infomode_switch_keep_s1_100,!1);const l=new Map,d={experienceConnector:i.LayoutActions,actionName:n.TryInformationalMode,requiredCount:1,observedActivityCount:0},c={activities:[{experienceConnector:i.LayoutActions,actionName:n.SetEdgeAsDefault,requiredCount:1,observedActivityCount:0}],isRewardActivityComplete:!1,isOfferReported:!1},h={activities:[d],isRewardActivityComplete:!1,isOfferReported:!1,isLocalMessage:!0,isLocalFollowOnMessage:!0};l.set(r.SetEdgeAsDefault,[c]),l.set(r.SetEdgeAsDefaultV2,[c]),l.set(r.ENUS_infomode_switch_keep_s1_100,[h])},62123:function(e,t,a){"use strict";a.r(t),a.d(t,{MsnContentShareView:function(){return ce}});var r=a(33940),i=a(28904),n=a(99452),o=a(56825);function s(){return navigator&&navigator.share}function l(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"socialshare";const r=new URL(e);return t&&(r.search=""),r.searchParams.set("ocid",a),r.toString()}var d=a(82898);var c=a(85205),h=a(87260);const u=(0,h.Yq)().StaticsUrl,g=`${u}latest/views/icons/Link.svg`,p=`${u}latest/views/icons/social/Facebook.svg`,f=`${u}latest/views/icons/social/X.svg`,b=`${u}latest/views/icons/soci
Source: chromecache_638.1.dr	String found in binary or memory: We Had an Abortion'","focalRegion":{"x1":434,"x2":652,"y1":107,"y2":325},"source":"msn"}],"provider":{"id":"BBBo0VO","name":"Rolling Stone","logoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1g7fkP.img","profileId":"vid-2t5f7gttp3xcma5w9x67f4cnhwxq3pg3d6ej3xbxnwf5a7cyd9cs","lightThemeSVGLogo":{"width":68,"height":12,"url":"https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13DrkE"},"darkThemeSVGLogo":{"width":68,"height":12,"url":"https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13DrkE-dark"}},"category":"news","reactionSummary":{"totalCount":200,"subReactionSummaries":[{"totalCount":112,"type":"upvote"},{"totalCount":88,"type":"downvote"}]},"reactionStatus":"on","commentSummary":{"totalCount":191,"subCommentSummaries":[{"totalCount":132,"type":"comment"},{"totalCount":59,"type":"reply"}]},"commentStatus":"on","recoDocMetadata":null,"feed":{"id":"Y_9eb0ac10-32bc-43cf-816e-5beaaf524f7a","feedName":"News","lastFreActionTimestamp":0},"isWorkNewsContent":false,"recoId":"wWagCgLrKXhr0GNJ2rPq-uE-Qm","source":"msn"},{"id":"AA1oxecm","type":"video","title":"Throwback: \"Drastic Repair\" Kamala Harris for Attorney General","abstract":"Kamala Harris was elected to Attorney General of userfornia in 2010 and 2014! Accessed at Kamala Harris, Kamala Harris: Drastic Repair, YouTube, <a href=\"https://www.youtube.com/watch?v=6viSLXP1S7c\">https://www.youtube.com/watch?v=6viSLXP1S7c</a>","url":"https://www.msn.com/en-us/news/politics/throwback-drastic-repair-kamala-harris-for-attorney-general/vi-AA1oxecm?ocid=winp1","locale":"en-us","isLocalContent":false,"placement":"River","galleryItemCount":0,"videoMetadata":{"playTime":32,"closedCaptions":[{"locale":"en-us","href":"https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/AA1oxecm?blobrefkey=closedcaptionen-us&$blob=1"}]},"externalVideoFiles":[{"url":"https://prod-streaming-video-msn-com.akamaized.net/63005f0e-c3c9-4414-8822-74a7972907b2/c8cf6ead-4138-4f01-ae26-5199626ae8aa.mp4","contentType":"video/mp4","fileSize":3094244},{"url":"https://prod-streaming-video-msn-com.akamaized.net/73850dc3-1456-45cb-a8a6-32058a9e242a/c8cf6ead-4138-4f01-ae26-5199626a.ism/manifest","width":484,"height":360},{"url":"https://prod-streaming-video-msn-com.akamaized.net/73850dc3-1456-45cb-a8a6-32058a9e242a/c8cf6ead-4138-4f01-ae26-5199626a.ism/manifest(format=m3u8-aapl)","width":484,"height":360},{"url":"https://prod-streaming-video-msn-com.akamaized.net/73850dc3-1456-45cb-a8a6-32058a9e242a/c8cf6ead-4138-4f01-ae26-5199626a.ism/manifest(format=mpd-time-csf)","width":484,"height":360},{"url":"https://prod-streaming-video-msn-com.akamaized.net/73850dc3-1456-45cb-a8a6-32058a9e242a/c8cf6ead-4138-4f01-ae26-5199626a_650.mp4","width":484,"height":360,"contentType":"video/mp4","fileSize":2940454}],"publishedDateTime":"2024-08-09T17:57:12Z","isFeatured":false,"images":[{"width":1272,"height":756,"url":"https://th.bing.com/th?id=ORMS.8ce2851c1e0bfa3f3d1d1efb835b86bb&pid=Wdp","title":"Screenshot fr
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: s romantic and heartbreaking and existential and infuriating.</p><p> <a class=\"body-btn-link\" href=\"https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fd514447d-1954-4bf8-8164-fa3d6fdfe73f&sref=https%3A%2F%2Fwww.cosmopolitan.com%2Fentertainment%2Fmovies%2Fg38941793%2Fbest-romance-movies-on-hulu%2F\">Shop Now</a></p><p><a href=\"https://www.youtube.com/watch?v=6sS4_CPqmY0\">See the original post on Youtube</a></p>","focalRegion":{"x1":148,"x2":279,"y1":119,"y2":250},"source":"msn"}}],"publishedDateTime":"2024-08-17T19:42:04Z","isFeatured":false,"images":[{"width":3981,"height":2100,"url":"https://th.bing.com/th?id=ORMS.bcf0a7550e3bb01fd4f88040656d37f6&pid=Wdp","title":"Behold, the 28 Best Romance Movies to Stream on Hulu Right Now","caption":"<p class=\"body-dropcap\">Whether you equals www.youtube.com (Youtube)
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: s romantic and heartbreaking and existential and infuriating.</p><p> <a class=\"body-btn-link\" href=\"https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fd514447d-1954-4bf8-8164-fa3d6fdfe73f&sref=https%3A%2F%2Fwww.countryliving.com%2Flife%2Fentertainment%2Fg46570841%2Fbest-romance-movies-on-hulu%2F\">Shop Now</a></p><p><a href=\"https://www.youtube.com/watch?v=6sS4_CPqmY0\">See the original post on Youtube</a></p>","image":{"width":480,"height":360,"quality":88,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1n10VZ.img","attribution":"Rotten Tomatoes Indie@Youtube","title":"2) Portrait of a Lady on Fire","caption":"<p>This is what you and the Duolingo owl have been training for. Enter one of the best modern French films to exist,<em> Portrait of a Lady on Fire</em>. This 2019 drama explores forbidden romance between two young women in 18th century France; one an aristocrat set to be married off to a rich Italian man, and the other an artist commissioned to paint her portrait. It equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: nxejt.polluxcastor.top
Source: global traffic	DNS traffic detected: DNS query: ads.msn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: shftr.adnxs.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: nym1-ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: srtb.msn.com
Source: global traffic	DNS traffic detected: DNS query: trace.mediago.io
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: www.msn.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com
Source: global traffic	DNS traffic detected: DNS query: browser.events.data.msn.com
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: confiant.msn.com
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: fra1-ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs-simple.com
Source: global traffic	DNS traffic detected: DNS query: api.btloader.com
Source: global traffic	DNS traffic detected: DNS query: i.clean.gg
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: aefd.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: deff.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: protected-by.clarium.io
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: hbx.media.net
Source: global traffic	DNS traffic detected: DNS query: api.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cm.mgid.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: code.yengo.com
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: trace.popin.cc
Source: global traffic	DNS traffic detected: DNS query: sync.inmobi.com
Source: global traffic	DNS traffic detected: DNS query: m.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: tsdtocl.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: dsp.adkernel.com
Source: global traffic	DNS traffic detected: DNS query: gtrace.mediago.io
Source: global traffic	DNS traffic detected: DNS query: sync.im-apps.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: c.betrad.com
Source: global traffic	DNS traffic detected: DNS query: cdn.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com

Source: unknown

HTTP traffic detected: POST /report/ESTS-UX-All HTTP/1.1Host: csp.microsoft.comConnection: keep-aliveContent-Length: 1739sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/csp-reportAccept: */*Origin: https://login.microsoftonline.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_1157.1.dr	String found in binary or memory: http://greensock.com
Source: chromecache_1157.1.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/ads?client=dclk-3pas-query&output=xml&geo=true
Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/ads?client=dclk-3pas-query&output=xml&geo=true&adtest=on
Source: chromecache_706.1.dr, chromecache_1077.1.dr	String found in binary or memory: http://s0.2mdn.net/ads/studio/close.png
Source: chromecache_1249.1.dr	String found in binary or memory: http://schema.org
Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: http://tpc.googlesyndication.com
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_1495.1.dr, chromecache_691.1.dr, chromecache_1295.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_1498.1.dr, chromecache_1208.1.dr	String found in binary or memory: http://www.beian.gov.cn/portal/registerSystemInfo?recordcode=11010802022657
Source: chromecache_1495.1.dr, chromecache_1295.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_1216.1.dr, chromecache_719.1.dr, chromecache_1189.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: http://www.cnn.com/
Source: chromecache_860.1.dr, chromecache_1190.1.dr	String found in binary or memory: http://www.contoso.com/specificpage.html)
Source: chromecache_1042.1.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_965.1.dr, chromecache_1202.1.dr	String found in binary or memory: https://abcnews.go.com/
Source: chromecache_459.1.dr, chromecache_1144.1.dr	String found in binary or memory: https://abcnews.go.com/US/george-santos-expected-plead-guilty-hearing-monday/story?id=112918028
Source: chromecache_459.1.dr, chromecache_1144.1.dr	String found in binary or memory: https://abcnews.go.com/US/judge-denies-former-rep-george-santos-motion-dismiss/story?id=112114555
Source: chromecache_459.1.dr, chromecache_1144.1.dr	String found in binary or memory: https://abcnews.go.com/US/live-updates/george-santos-court-appearance/?id=99214419
Source: chromecache_459.1.dr, chromecache_1144.1.dr	String found in binary or memory: https://abcnews.go.com/alerts/george---------------santos
Source: chromecache_578.1.dr	String found in binary or memory: https://acdn.adnxs.com/video/player/vastPlayer/XandrVastPlayer.js
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://api.msn.com/news/feed/pages/viewsfullpage?activityId=8CE06343-2365-4E56-BCE2-0AFCF6E65A35&ti
Source: chromecache_1092.1.dr, chromecache_865.1.dr	String found in binary or memory: https://api.msn.com:443/news/feed/pages/viewspage?activityId=8CE06343-2365-4E56-BCE2-0AFCF6E65A35&ti
Source: chromecache_1350.1.dr, chromecache_700.1.dr	String found in binary or memory: https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66
Source: chromecache_680.1.dr, chromecache_627.1.dr	String found in binary or memory: https://assets.msn.$
Source: chromecache_1290.1.dr, chromecache_843.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/audio-view/AudioViewBackgroundImage.jpg
Source: chromecache_1058.1.dr, chromecache_1388.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/arrow-down.svg
Source: chromecache_1058.1.dr, chromecache_1388.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/arrow-right.svg
Source: chromecache_1058.1.dr, chromecache_1388.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/community-icon.svg
Source: chromecache_1058.1.dr, chromecache_1388.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/disclaimer-icon.svg
Source: chromecache_1058.1.dr, chromecache_1388.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/poll-icon.svg
Source: chromecache_1290.1.dr, chromecache_843.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/views/icons/fluent/headphones_sound_wave_24_filled.sv
Source: chromecache_1290.1.dr, chromecache_843.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/views/icons/fluent/pause_20_filled.svg
Source: chromecache_1290.1.dr, chromecache_843.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/views/icons/fluent/play_20_filled.svg
Source: chromecache_1490.1.dr, chromecache_1316.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/views/icons/right-rail-provider-carousel/GoToPartnerS
Source: chromecache_1490.1.dr, chromecache_1316.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/latest/views/icons/right-rail-provider-carousel/content-prov
Source: chromecache_1051.1.dr, chromecache_1497.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationN
Source: chromecache_1051.1.dr, chromecache_1497.1.dr	String found in binary or memory: https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationO
Source: chromecache_1498.1.dr, chromecache_1208.1.dr	String found in binary or memory: https://beian.miit.gov.cn/
Source: chromecache_1058.1.dr, chromecache_1388.1.dr	String found in binary or memory: https://camera.flip.com/
Source: chromecache_1336.1.dr, chromecache_1192.1.dr	String found in binary or memory: https://cdn.adnxs-simple.com/js/anjam.js
Source: chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA12PNdd
Source: chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA12PNdd-dark
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13DrkE
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13DrkE-dark
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13eNIw
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13eNIw-dark
Source: chromecache_638.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2C0
Source: chromecache_638.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2C0-dark
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gAyL
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gAyL-dark
Source: chromecache_840.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKBA
Source: chromecache_840.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKBA-dark
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glmx
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glmx-dark
Source: chromecache_840.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyc7
Source: chromecache_840.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyc7-dark
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyvW
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyvW-dark
Source: chromecache_1010.1.dr, chromecache_965.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyym
Source: chromecache_1010.1.dr, chromecache_965.1.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyym-dark
Source: chromecache_1350.1.dr, chromecache_700.1.dr	String found in binary or memory: https://cdn.taboola.com/scripts/ifs.js
Source: chromecache_742.1.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_1237.1.dr, chromecache_1083.1.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_751.1.dr, chromecache_1209.1.dr, chromecache_621.1.dr, chromecache_861.1.dr, chromecache_560.1.dr, chromecache_879.1.dr, chromecache_1042.1.dr, chromecache_1248.1.dr	String found in binary or memory: https://github.com/shaka-project/shaka-packager
Source: chromecache_751.1.dr, chromecache_1042.1.dr	String found in binary or memory: https://github.com/shaka-project/shaka-packagerv3.0.4-ceeb378-release
Source: chromecache_1522.1.dr	String found in binary or memory: https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fd514447d-1954
Source: chromecache_1522.1.dr	String found in binary or memory: https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fe30177ce-5201
Source: chromecache_1289.1.dr, chromecache_506.1.dr	String found in binary or memory: https://greensock.com
Source: chromecache_1289.1.dr, chromecache_506.1.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA11CbJ7.img
Source: chromecache_1010.1.dr, chromecache_965.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA15sabj.img
Source: chromecache_1010.1.dr, chromecache_965.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA15spNo.img
Source: chromecache_1010.1.dr, chromecache_965.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA15srQ9.img
Source: chromecache_965.1.dr, chromecache_1202.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA15syDR.img
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1g7bhz.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1g7fkP.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1lSnwK.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1n0L9b.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1n10VZ.img
Source: chromecache_638.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1ngK0C.img
Source: chromecache_1193.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oXEED.img
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oXJfq.img
Source: chromecache_459.1.dr, chromecache_1144.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oY6c5.img
Source: chromecache_459.1.dr, chromecache_1144.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oYdde.img
Source: chromecache_515.1.dr, chromecache_1226.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oYdde.img?w=140&h=90
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oZBo6.img
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oZGbz.img
Source: chromecache_472.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oZKDc.img
Source: chromecache_752.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oZKDc.img?w=140&h=90
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oZSYp.img
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1oZjxu.img
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1p00IX.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA3AZO2.img
Source: chromecache_840.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA6oz5z.img
Source: chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAPZ3U2.img
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAYNJKz.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAZzRFn.img
Source: chromecache_516.1.dr, chromecache_1216.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAxXYw5.img
Source: chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAywGC0.img
Source: chromecache_516.1.dr, chromecache_1216.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAywuAQ.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1hBZLW.img
Source: chromecache_840.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1maCGO.img
Source: chromecache_840.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1maH8a.img
Source: chromecache_840.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1maybP.img
Source: chromecache_1216.1.dr, chromecache_719.1.dr, chromecache_1189.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1neFU6.img
Source: chromecache_840.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBYTL1i.img
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBiuSr7.img
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBqlLky.img
Source: chromecache_1249.1.dr	String found in binary or memory: https://login.live.com/login.srf?wa=wsignin1.0
Source: chromecache_539.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_849.1.dr, chromecache_951.1.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: chromecache_849.1.dr, chromecache_951.1.dr	String found in binary or memory: https://login.microsoftonline.com/common/discovery/v2.0/keys
Source: chromecache_849.1.dr, chromecache_951.1.dr	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/token
Source: chromecache_1179.1.dr, chromecache_629.1.dr	String found in binary or memory: https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration
Source: chromecache_539.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_1498.1.dr, chromecache_1208.1.dr	String found in binary or memory: https://mem.gfx.ms/meversion?partner=$
Source: chromecache_1055.1.dr, chromecache_825.1.dr	String found in binary or memory: https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327
Source: chromecache_1099.1.dr, chromecache_959.1.dr	String found in binary or memory: https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803
Source: chromecache_886.1.dr	String found in binary or memory: https://msn.yidianzixun.com/zh-cn
Source: chromecache_876.1.dr	String found in binary or memory: https://nypost.com/2024/08/18/us-news/out-of-control-nyc-pedicab-drivers-terrorize-tourists-locals-a
Source: chromecache_550.1.dr, chromecache_635.1.dr, chromecache_1364.1.dr, chromecache_552.1.dr, chromecache_649.1.dr, chromecache_923.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_1026.1.dr, chromecache_645.1.dr, chromecache_651.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_706.1.dr, chromecache_1077.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_890.1.dr, chromecache_1456.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_1219.1.dr, chromecache_791.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_1026.1.dr, chromecache_645.1.dr, chromecache_651.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_635.1.dr, chromecache_1364.1.dr, chromecache_552.1.dr, chromecache_649.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_635.1.dr, chromecache_1364.1.dr, chromecache_552.1.dr, chromecache_649.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_1218.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_1026.1.dr, chromecache_645.1.dr, chromecache_651.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_876.1.dr	String found in binary or memory: https://pix11.com/news/politics/pixonpolitics/assemblymember-rajkumar-announces-candidacy-for-nyc-co
Source: chromecache_706.1.dr, chromecache_1077.1.dr	String found in binary or memory: https://play.google.com/store/apps/details
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/08a4d93c-47d8-4f3b-9c9e-c6a25c583b28/92124cc2-aee
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/63005f0e-c3c9-4414-8822-74a7972907b2/c8cf6ead-413
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/6baa2acd-c7a9-40b4-99f9-3ddf27740e5b/92124cc2-aee
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/73850dc3-1456-45cb-a8a6-32058a9e242a/c8cf6ead-413
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/7c15781b-ab31-4b7f-bd9f-6b4435c7fbb2/6167f5a0-fb4
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/a0f3a1bc-a166-4902-b439-a400a184eb85/6167f5a0-fb4
Source: chromecache_971.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/b25fc2d9-c2b8-45ef-bf8c-6c212a119a20/359f6523-806
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/cfb0f236-a4de-4602-939a-9f866c0914fb/359f6523-806
Source: chromecache_1193.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_971.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/v1/eus005/3176b6d9-78d9-4e81-8f55-d912d8e2a208/95
Source: chromecache_1522.1.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/v1/eus005/6908cfa3-1f04-4110-b682-e54c43e026dc/27
Source: chromecache_1193.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_971.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/AA1oYeps?blobrefkey=close
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/AA1oaWRh?blobrefkey=close
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/AA1oxecm?blobrefkey=close
Source: chromecache_638.1.dr	String found in binary or memory: https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/BB1qDq8t?blobrefkey=close
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/BB1qY8CQ?blobrefkey=close
Source: chromecache_1239.1.dr, chromecache_1215.1.dr, chromecache_715.1.dr, chromecache_513.1.dr, chromecache_1171.1.dr, chromecache_603.1.dr, chromecache_855.1.dr	String found in binary or memory: https://protected-by.clarium.io
Source: chromecache_1239.1.dr, chromecache_1171.1.dr	String found in binary or memory: https://protected-by.clarium.io/pixel?tag=wt_
Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: https://secureframe.doubleclick.net
Source: chromecache_742.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_742.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_1052.1.dr, chromecache_636.1.dr	String found in binary or memory: https://service.weibo.com/share/share.php?url=
Source: chromecache_1052.1.dr, chromecache_636.1.dr	String found in binary or memory: https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title=
Source: chromecache_1249.1.dr	String found in binary or memory: https://storage.live.com/users/0x
Source: chromecache_1350.1.dr, chromecache_700.1.dr	String found in binary or memory: https://sync.im-apps.net/imid/set?cid=1003212&tid=tblid&uid=
Source: chromecache_651.1.dr, chromecache_1114.1.dr, chromecache_1231.1.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_706.1.dr, chromecache_1077.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/%
Source: chromecache_1026.1.dr, chromecache_645.1.dr, chromecache_651.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_1350.1.dr, chromecache_700.1.dr	String found in binary or memory: https://trc.taboola.com/sg/msn/1/cm?taboola_hm=
Source: chromecache_1193.1.dr	String found in binary or memory: https://www.businessinsider.com/best-and-worst-jarred-tomato-sauce-to-buy-reviewed-photos-2021-10
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/07/22/politics/video/kamala-harris-campaign-headquarters-speech-digvid?cid=
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/07/23/politics/harris-immigration-work-gop-attacks/index.html?cid=external-
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/07/26/politics/kamala-harris-election-campaign/index.html?cid=external-feed
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/07/29/politics/laugh-harris-trump-what-matters/index.html?cid=external-feed
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/07/30/politics/anita-dunn-biden-harris/index.html?cid=external-feeds_ilumin
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/08/01/politics/russia-us-prisoner-swap/index.html?cid=external-feeds_ilumin
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr	String found in binary or memory: https://www.cnn.com/2024/08/17/sport/caitlin-clark-double-double-wnba-return-spt-intl?cid=external-f
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cnn.com/2024/08/18/entertainment/alain-delon-french-movie-legend-dies-intl-hnk?cid=exter
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cnn.com/2024/08/18/europe/israel-strike-central-gaza-blinken-ceasefire-intl?cid=external
Source: chromecache_456.1.dr, chromecache_472.1.dr	String found in binary or memory: https://www.cnn.com/2024/08/18/politics/kamala-harris-presidential-campaign?cid=external-feeds_ilumi
Source: chromecache_1092.1.dr, chromecache_865.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cnn.com/2024/08/18/sport/patrick-mahomes-behind-back-pass-spt-intl?cid=external-feeds_il
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/entertainment/celebs/news/g3144/tearjerkers-movies/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/entertainment/g38013953/best-documentaries-on-hulu/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/entertainment/movies/a43261062/best-apple-movies/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/entertainment/movies/a9638535/best-romantic-comedy-movies/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/entertainment/movies/g19738089/horror-movies-based-on-true-stories/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/entertainment/movies/g26514405/most-romantic-movies-all-time/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/lifestyle/g38677270/best-place-to-buy-a-couch/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/lifestyle/g42625292/best-stemless-wine-glasses/
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.cosmopolitan.com/sex-love/g37092671/sexy-movies-on-hulu/
Source: chromecache_1193.1.dr	String found in binary or memory: https://www.foodnetwork.com/recipes/giada-de-laurentiis/baked-potatoes-with-sausage-and-arugula-sauc
Source: chromecache_651.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_1026.1.dr, chromecache_645.1.dr, chromecache_651.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_505.1.dr, chromecache_416.1.dr, chromecache_691.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_603.1.dr	String found in binary or memory: https://www.msn.com/
Source: chromecache_1099.1.dr, chromecache_959.1.dr	String found in binary or memory: https://www.msn.com/$
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/health/other/military-mental-health-is-focus-as-ai-training-simulates-real
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/health/other/the-14-best-face-washes-for-oily-skin-that-wont-be-too-drying
Source: chromecache_840.1.dr	String found in binary or memory: https://www.msn.com/en-us/health/other/the-best-inspirational-quotes-to-motivate-and-uplift-you-out-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/family/friends-of-late-newington-girl-regan-martins-set-up-pink-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/home-and-garden/6-old-fashioned-tricks-grandma-didnt-tell-you-ab
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/lifestyle-buzz/blake-lively-recently-wore-a-19000-pair-how-much-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/lifestyle-buzz/dog-making-himself-sick-from-stress-of-shelter-li
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/lifestyle-buzz/duchess-meghan-changes-into-pink-midi-dress-for-d
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/shopping/13-oversized-denim-shorts-and-jeans-you-can-wear-from-s
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/lifestyle/shopping/this-appliance-might-be-all-you-need-to-ditch-your-ac-t
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/money/careersandeducation/their-student-debt-disappeared-but-their-financi
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/money/companies/elon-musk-s-x-to-close-operations-in-brazil-as-clash-over-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/money/markets/trump-mercilessly-mocked-over-frighteningly-false-tariffs-cl
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/movies/news/how-sing-sing-s-real-life-theater-prison-program-is-building-c
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/music/news/splash-house-alanis-morissette-and-more10-things-to-do-in-the-c
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/disgraced-congressman-george-santos-expected-to-take-plea-deal-
Source: chromecache_1249.1.dr, chromecache_1226.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/george-santos-expected-to-plead-guilty-during-a-hearing-monday-
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/ketamine-queen-may-expose-hollywood-dealers-and-users-in-matthe
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/matthew-perry-s-last-words-to-assistant-revealed-following-arre
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/nypd-rescues-family-of-7-from-nyc-home-invasion/ar-AA1oYNVP?oci
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/old-legal-quirk-lets-police-take-your-money-with-little-reason-
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/crime/trump-rally-shooting-local-swat-officer-fired-first-shot-knocki
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/other/which-states-start-early-voting-first-in-the-2024-presidential-
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/2024-could-be-a-get-out-of-jail-free-election-for-donald-tru
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/as-his-standing-in-the-polls-slides-trump-ramps-up-false-att
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/beyond-interim-senator-how-laphonza-butler-joined-harris-s-i
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/biden-designates-1908-springfield-race-riot-site-as-national
Source: chromecache_1249.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/cracks-in-the-wall-of-media-praise-for-harris-multiple-outle
Source: chromecache_1249.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/democrats-announce-themes-for-4-nights-of-convention/ar-AA1o
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/election-interference-trump-lawyers-calls-for-delayed-senten
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/election-officials-keep-green-party-presidential-candidate-o
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/election-polls-don-t-reflect-sentiment-rep-scott-perry/ar-AA
Source: chromecache_1249.1.dr, chromecache_638.1.dr, chromecache_971.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/far-right-influencers-turn-against-trump-campaign/ar-AA1oZNY
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/florida-primary-will-set-us-senate-race-but-largely-focus-on
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/georgia-election-board-member-denies-asking-for-trump-white-
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/gov-jb-pritzker-was-bidens-man-in-the-midwest-wheres-that-le
Source: chromecache_638.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/haley-said-in-january-that-if-trump-was-gop-nominee-harris-w
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/harris-flipped-the-script-of-the-campaign-but-there-s-much-s
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/harris-strategy-hasn-t-changed-since-biden-but-now-the-troll
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/harris-to-meet-with-teamsters-but-union-president-isn-t-invi
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/how-will-voters-react-to-moms-for-liberty-candidates-in-the-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/inside-the-fast-moving-launch-of-kamala-harris-for-president
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/jd-vance-debating-tim-walz-could-backfire/ar-AA1oY5ZC?ocid=B
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/jd-vances-ethnic-enclaves-remark-raises-eyebrows/ar-AA1oY1W9
Source: chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/kamala-harris-and-nancy-pelosi-how-america-s-most-powerful-w
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/kamala-harris-putting-herself-through-college-by-working-at-
Source: chromecache_638.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/kamala-harris-surges-in-new-polling/ar-AA1oXZ0I?ocid=winp1
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/mark-robinson-who-often-calls-abortion-murder-we-had-an-abor
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/mcconnell-says-congress-has-the-power-to-vote-by-proxy/ar-AA
Source: chromecache_638.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/neil-gorsuch-s-new-dissent-baffles-conservatives/ar-AA1oYlZL
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/neil-gorsuchs-new-dissent-baffles-conservatives/ar-AA1oYlZL?
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/nuclear-explosion-inside-trump-s-feud-with-kemp-in-georgia/a
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/opinion-democrats-still-might-invoke-the-25th-amendment-to-m
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/overstock-com-founder-byrne-s-trump-aligned-lawyer-disqualif
Source: chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/protesters-paused-to-consider-opposing-harris-at-the-dnc-the
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/randy-mastro-talks-corporation-counsel-nomination/vi-BB1qY8C
Source: chromecache_1193.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_971.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/rfk-jr-is-null-and-void-for-the-rest-of-the-election-after-v
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/should-make-republicans-awfully-nervous-what-new-poll-number
Source: chromecache_638.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/squandered-the-moment-washington-post-editorial-board-blasts
Source: chromecache_638.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/throwback-drastic-repair-kamala-harris-for-attorney-general/
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/trump-campaign-reset-goes-awry-in-pennsylvania-as-he-attacks
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/trump-jabs-harris-on-inflation-before-pivoting-to-her-laugh/
Source: chromecache_834.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/voting-rally-to-be-held-in-downtown-gainesville-ahead-of-202
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/technology/dinosaur-killing-asteroid-was-likely-a-giant-mudball-study
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/technology/national-public-data-confirms-massive-data-breach-included
Source: chromecache_1193.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/a-dewy-eyed-look-at-the-life-and-death-of-carolyn-bessette-kennedy
Source: chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/abcarian-the-role-of-the-post-menopausal-female-in-society-jd-vanc
Source: chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/donald-trump-s-asinine-comments-criticized-by-veterans-of-foreign-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/dramatic-video-shows-officers-rescuing-residents-from-burning-nort
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/how-horses-at-the-spirit-horse-ranch-help-maui-wildfire-survivors-
Source: chromecache_876.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/nyc-beaches-close-due-to-dangerous-rip-currents-from-tropical-stor
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/scranton-campers-raise-money-for-charity-by-washing-cars/ar-AA1opY
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/shooting-incident-reported-near-jbsa-lackland-base-officials-say/a
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/alain-delon-french-movie-legend-dies-at-88/ar-AA1oZv1u?ocid=Bin
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/blinken-to-push-for-gaza-ceasefire-israel-launches-fresh-strike
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/campus-protests-pushed-ivy-league-presidents-out-how-leaders-ar
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/chechen-warlord-invites-musk-to-russia-after-hes-filmed-driving
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/dnc-comes-to-little-palestine-as-gaza-deaths-top-40000/ar-AA1oZ
Source: chromecache_1496.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/harris-ancestral-village-in-india-cheers-for-daughter-of-this-l
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/how-israel-killed-a-ghost/ar-AA1oZ0OT?ocid=BingNewsBrowse
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/now-even-north-korea-has-weighed-in-on-ukraines-supposedly-unfo
Source: chromecache_1193.1.dr, chromecache_638.1.dr, chromecache_840.1.dr, chromecache_971.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/paetongtarn-shinawatra-becomes-thai-prime-minister-after-royal-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/russia-issues-nuclear-warning-amid-ukraines-kursk-invasion/ar-A
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/russian-conscripts-tell-of-mass-surrender-in-kursk-region-the-n
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/russian-supply-bridges-destroyed-by-ukraine-amid-kursk-incursio
Source: chromecache_638.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/starmer-s-britain-is-a-worse-nightmare-than-anyone-imagined/ar-
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/ukraine-destroys-key-russian-stronghold-as-putin-makes-terrifyi
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/vladimir-putin-faces-coup-over-ukraine-failure-as-russia-teeter
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/boxing/trump-again-decries-two-gold-medalist-olympic-athletes-false
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/nfl/5-dolphins-records-that-could-get-broken-in-2024/ar-AA1oRlIA?oc
Source: chromecache_1193.1.dr, chromecache_971.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/nfl/police-believe-nfl-player-air-mcnair-was-murdered-by-his-girlfr
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/nfl/top-five-most-valuable-people-for-baltimore-ravens-in-2024/ar-A
Source: chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/other/aces-becky-hammon-a-ja-wilson-point-out-missing-factor-in-los
Source: chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/other/cas-makes-bold-statement-about-claims-of-corruption-in-jordan
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/other/im-not-sure-how-she-was-getting-open-mercury-head-coach-nate-
Source: chromecache_840.1.dr	String found in binary or memory: https://www.msn.com/en-us/sports/other/perspective-how-i-ve-changed-in-my-thinking-about-brittney-gr
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/travel/news/alligators-and-swamp-buggies-how-a-roadside-attraction-in-orla
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/travel/news/lifeline-animal-project-faces-record-intake-in-atlanta-shelter
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/travel/news/watch-giant-pandas-make-public-debut-at-san-diego-zoo/ar-AA1ov
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/tv/news/pup-s-energy-keeps-her-waiting-at-shelter-can-t-understand-what-sh
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/video/animals/scared-rescued-dog-was-too-afraid-to-come-inside-the-house-u
Source: chromecache_638.1.dr	String found in binary or memory: https://www.msn.com/en-us/video/peopleandplaces/meet-comedian-who-went-viral-for-her-impression-of-k
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/weather/topstories/ernesto-weakens-to-tropical-storm-after-lashing-bermuda
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/weather/topstories/northern-lights-and-perseid-meteor-shower-spotted-in-we
Source: chromecache_1249.1.dr	String found in binary or memory: https://www.msn.com/en-us/weather/topstories/the-perseid-meteor-shower-peaks-soon-heres-where-to-see
Source: chromecache_876.1.dr	String found in binary or memory: https://www.nydailynews.com/2024/08/18/nyc-sheriff-accused-of-using-lights-and-sirens-to-beat-traffi
Source: chromecache_834.1.dr	String found in binary or memory: https://www.nytimes.com/2024/08/16/nyregion/nj-menendez-suspends-senate-race.html
Source: chromecache_876.1.dr	String found in binary or memory: https://www.nytimes.com/2024/08/18/nyregion/israel-gaza-lander-adams.html
Source: chromecache_876.1.dr	String found in binary or memory: https://www.silive.com/weather-alerts/2024/08/ny-weather-be-ready-for-marble-sized-hail-with-thunder
Source: chromecache_834.1.dr	String found in binary or memory: https://www.texastribune.org/2024/08/16/texas-voter-disabilities-election-2024/
Source: chromecache_840.1.dr	String found in binary or memory: https://www.womansday.com/life/a39152674/monday-motivation-quotes/
Source: chromecache_840.1.dr	String found in binary or memory: https://www.womansday.com/life/a39501588/buddha-quotes/
Source: chromecache_1522.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=6sS4_CPqmY0
Source: chromecache_638.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=6viSLXP1S7c
Source: chromecache_1522.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=IWIF_gAFIKY

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 51583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 50899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50985
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50988
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 50761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50936
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50948
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50965
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 51247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51429
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 51568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50577
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51436
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51437
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51433
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51451
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 51432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 51223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51405
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51407
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 51451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 51095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50496
Source: unknown	Network traffic detected: HTTP traffic on port 50986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51587
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51590
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51361
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51381
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50901
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50917
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50923
Source: unknown	Network traffic detected: HTTP traffic on port 50679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50925
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50927
Source: unknown	Network traffic detected: HTTP traffic on port 50495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 51205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51186
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51198
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 50625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50628
Source: unknown	Network traffic detected: HTTP traffic on port 51078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50875
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50877
Source: unknown	Network traffic detected: HTTP traffic on port 51492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50639
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50630
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50888
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50881
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50811
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50818
Source: unknown	Network traffic detected: HTTP traffic on port 51275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50827
Source: unknown	Network traffic detected: HTTP traffic on port 51435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50832
Source: unknown	Network traffic detected: HTTP traffic on port 51010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50833
Source: unknown	Network traffic detected: HTTP traffic on port 51457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50830
Source: unknown	Network traffic detected: HTTP traffic on port 51562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50848
Source: unknown	Network traffic detected: HTTP traffic on port 51511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51548
Source: unknown	Network traffic detected: HTTP traffic on port 50850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51541
Source: unknown	Network traffic detected: HTTP traffic on port 50523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51542
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51316
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51314
Source: unknown	Network traffic detected: HTTP traffic on port 51265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51556

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:50262 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@38/1570@282/77

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://nxejt.polluxcastor.top/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,6656110166945875421,12403813930226990931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6592 --field-trial-handle=1964,i,6656110166945875421,12403813930226990931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,6656110166945875421,12403813930226990931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6592 --field-trial-handle=1964,i,6656110166945875421,12403813930226990931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_1249.1.dr

Binary or memory string: processEmbImg('emb2372F5E955','data:image/jpeg;base64,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

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://nxejt.polluxcastor.top	0%	Avira URL Cloud	safe
http://nxejt.polluxcastor.top	3%	Virustotal		Browse

Source	Detection	Scanner	Link
s-part-0016.t-0009.t-msedge.net	0%	Virustotal	Browse
securepubads.g.doubleclick.net	0%	Virustotal	Browse
um.simpli.fi	0%	Virustotal	Browse
tls13.taboola.map.fastly.net	0%	Virustotal	Browse
s-part-0033.t-0009.t-msedge.net	0%	Virustotal	Browse
fra1-ib.adnxs.com	0%	Virustotal	Browse
i.clean.gg	0%	Virustotal	Browse
cm.mgid.com	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
ds-pr-bh.ybp.gysm.yahoodns.net	0%	Virustotal	Browse
pagead-googlehosted.l.google.com	0%	Virustotal	Browse
protected-by.clarium.io	0%	Virustotal	Browse
sni1gl.wpc.omegacdn.net	0%	Virustotal	Browse
nydc1.outbrain.org	0%	Virustotal	Browse
nxejt.polluxcastor.top	3%	Virustotal	Browse
eu-eb2.3lift.com	0%	Virustotal	Browse
lb-sin.mgid.com	0%	Virustotal	Browse
ep2.adtrafficquality.google	0%	Virustotal	Browse
pugm-lhrc.pubmnet.com	0%	Virustotal	Browse
sb.scorecardresearch.com	0%	Virustotal	Browse
gtrace.mediago.io	0%	Virustotal	Browse
sync.im-apps.net	0%	Virustotal	Browse
m.anycast.adnxs.com	0%	Virustotal	Browse
prod.appnexus.map.fastly.net	0%	Virustotal	Browse
s0.2mdn.net	0%	Virustotal	Browse
a.tribalfusion.com	0%	Virustotal	Browse
s.tribalfusion.com	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
btloader.com	0%	Virustotal	Browse
hbx.media.net	0%	Virustotal	Browse
user-data-eu.bidswitch.net	0%	Virustotal	Browse
s-part-0032.t-0009.t-msedge.net	0%	Virustotal	Browse
dsp.adkernel.com	0%	Virustotal	Browse
www.googletagservices.com	0%	Virustotal	Browse
api.btloader.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	0%	URL Reputation	safe
https://greensock.com/standard-license	0%	URL Reputation	safe
https://googleads.g.doubleclick.net/pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbs3aENBrbCIgoUvHB73rTpZ-G8vXqskbV4QI5xduNGGBDlcg0jsjNdHvdiBG0pBLr3i3UWTeJg&label=window_focus&gqid&qqid=CI2-0ePD_ocDFfLzEQgdBEwIKg&bgload=1	0%	Avira URL Cloud	safe
https://trace.popin.cc/cs/msn?id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://s0.2mdn.net/creatives/assets/4672102/lx_300x250_default.js	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/mark-robinson-who-often-calls-abortion-murder-we-had-an-abor	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/money/markets/trump-mercilessly-mocked-over-frighteningly-false-tariffs-cl	0%	Avira URL Cloud	safe
http://s0.2mdn.net/ads/studio/close.png	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/overstock-com-founder-byrne-s-trump-aligned-lawyer-disqualif	0%	Avira URL Cloud	safe
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i5imv8tj&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTQyNTI5OTQyLCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV8xOGFlZDk2ODM3ZWY0NmFlZThmYWJkN2NhZTk2ZjE3NyJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzU0MjUyOTk0MiJ9&cb=2328385&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ==	0%	Avira URL Cloud	safe
https://www.womansday.com/life/a39152674/monday-motivation-quotes/	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEMREmyLJZcczGzKLaYE82i4&google_cver=1	0%	Avira URL Cloud	safe
https://www.womansday.com/life/a39501588/buddha-quotes/	0%	Avira URL Cloud	safe
https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fe30177ce-5201	0%	Avira URL Cloud	safe
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEEcUXY2asDVUQXbLD7nA-Rg&google_cver=1&google_push=AXcoOmSP_8t9kgivr2k1i7Nol5PfWq4chgDHae0LY3KSfeegZkDgOt_ECxKTbOmRDYbRjPmpZrneS3CspygCUMRupYo0yKUSRF2umA&rdf=1	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/poll-icon.svg	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	0%	Avira URL Cloud	safe
https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327	0%	Avira URL Cloud	safe
https://nym1-ib.adnxs.com/ot?ps=5a076f8c8fa8dbb3a25976ee107e72acee62642a&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQiEzoe2BhAFGXyeP21Up9U_IVyjL84pktQ_KJgCMLhoOI_DcUDeyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDWgAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSABOyAogerw7QEwBTkRZABBEWQUSABQAFoNFUcUEAAYAGISFQ8AEQldCAAAakoUAARwAA..&pp=0.32&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fcs%2Fxandr%3Frdid%3D190ff5f896905fe7fa92815f83d24d19	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/as-his-standing-in-the-polls-slides-trump-ramps-up-false-att	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyvW-dark	0%	Avira URL Cloud	safe
https://pr-bh.ybp.yahoo.com/sync/msn?gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://github.com/shaka-project/shaka-packager	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationN	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl&google_hm=V0fl_DXAQaWaCT7t2tSmtg==&gdpr=&gdpr_consent=	0%	Avira URL Cloud	safe
https://www.msn.com/$	0%	Avira URL Cloud	safe
https://www.googletagservices.com/dcm/impl_v101.js	0%	Avira URL Cloud	safe
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSd1RJZsGpkD-ocJbAvAXAOq93QTHvM6_C50ufBwQOAI6AIOzonzInP-vFOm1AWZWbfQYTq7iYbaUYuikar3ZhmcHTtag	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/how-will-voters-react-to-moms-for-liberty-candidates-in-the-	0%	Avira URL Cloud	safe
https://abcnews.go.com/US/live-updates/george-santos-court-appearance/?id=99214419	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationO	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/lifestyle/lifestyle-buzz/dog-making-himself-sick-from-stress-of-shelter-li	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=2	0%	Avira URL Cloud	safe
http://ad.doubleclick.net/viewad/817-grey.gif	0%	Avira URL Cloud	safe
https://ib.adnxs.com/setuid?entity=483&code=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13Lz-ksO7wI5muGKSc9PhhGTRdJNTTcikg6dSFFW8FvC0yvo0kbU4R2pnqJjHp3ba496ynFZpw	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/world/ukraine-destroys-key-russian-stronghold-as-putin-makes-terrifyi	0%	Avira URL Cloud	safe
https://cdn.taboola.com/scripts/msn-sync.es5.js	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyc7-dark	0%	Avira URL Cloud	safe
https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/movies/news/how-sing-sing-s-real-life-theater-prison-program-is-building-c	0%	Avira URL Cloud	safe
http://www.contoso.com/specificpage.html)	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=MTkxNTQ0NzY3MzM3MzE1NTc5MA%3D%3D	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/georgia-election-board-member-denies-asking-for-trump-white-	0%	Avira URL Cloud	safe
https://btloader.com/tag?o=6208086025961472&upapi=true	0%	Avira URL Cloud	safe
https://github.com/microsoft/clarity	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/sports/other/cas-makes-bold-statement-about-claims-of-corruption-in-jordan	0%	Avira URL Cloud	safe
https://login.microsoftonline.com/common/discovery/v2.0/keys	0%	Avira URL Cloud	safe
https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glmx-dark	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1168653790437110&correlator=762928904195550&eid=31085738%2C31085908%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie_enabled=1&cdm=www.msn.com&abxe=1&dt=1723983676803&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=puf1plvxsfc0&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=18032&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983667360&idt=9407&adks=4103432296&frm=23&eoidce=1	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&bgload=1	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/crime/matthew-perry-s-last-words-to-assistant-revealed-following-arre	0%	Avira URL Cloud	safe
https://msn.yidianzixun.com/zh-cn	0%	Avira URL Cloud	safe
https://m.adnxs.com/mapuid?member=280&user=33E577E4B44B65A73DE1633BB58264E9;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D33E577E4B44B65A73DE1633BB58264E9%2526gdpr%253D0%2526gdpr_consent%253D	0%	Avira URL Cloud	safe
https://www.cosmopolitan.com/sex-love/g37092671/sexy-movies-on-hulu/	0%	Avira URL Cloud	safe
https://m.adnxs.com/mapuid?member=280&user=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D33E577E4B44B65A73DE1633BB58264E9%2526gdpr%253D0%2526gdpr_consent%253D	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/world/vladimir-putin-faces-coup-over-ukraine-failure-as-russia-teeter	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2C0	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/sports/nfl/police-believe-nfl-player-air-mcnair-was-murdered-by-his-girlfr	0%	Avira URL Cloud	safe
https://www.msn.com/	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/sports/boxing/trump-again-decries-two-gold-medalist-olympic-athletes-false	0%	Avira URL Cloud	safe
https://www.cnn.com/2024/07/23/politics/harris-immigration-work-gop-attacks/index.html?cid=external-	0%	Avira URL Cloud	safe
https://www.cosmopolitan.com/lifestyle/g38677270/best-place-to-buy-a-couch/	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/world/russian-supply-bridges-destroyed-by-ukraine-amid-kursk-incursio	0%	Avira URL Cloud	safe
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwLzI4NzkzMjk2NjY6MzAweDYwMA==&v=5&s=v31i5imuldr&id=eyJkZnAiOnsiYWQiOjUwNDMwNTgyMDEsImMiOjEzODQ3NjI4MzUyNSwibCI6NTc5MzI0ODU2MywibyI6Mjg3OTMyOTY2NiwiQSI6Ii80MjExNTE2MywyMjU2OTc2MTk4NS9JUF9NU05fbXNuLmNvbV8zMDB4NjAwX1VTXzIwMjNfTmV3IiwieSI6MCwiY28iOjAsInMiOiJncHQtcGFzc2JhY2sifSwidHBfY3JpZCI6IlhEOjExMTIyOzUwNTU2MzMzOSJ9&cb=5783654&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0x6STROemt6TWprMk5qWTZNekF3ZURZd01BPT0iLCJ3ZCI6eyJvIjoyODc5MzI5NjY2LCJ3IjoiMzAwIiwiaCI6IjYwMCJ9LCJ3ciI6Mn0=	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/pagead/js/rum.js	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	0%	Avira URL Cloud	safe
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=33E577E4B44B65A73DE1633BB58264E9	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=1&e=0.3976663069404487	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/world/alain-delon-french-movie-legend-dies-at-88/ar-AA1oZv1u?ocid=Bin	0%	Avira URL Cloud	safe
https://protected-by.clarium.io/pixel?tag=wt_	0%	Avira URL Cloud	safe
https://hbx.media.net/cksync.php?type=nms&cs=3&ovsid=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://s0.2mdn.net/creatives/assets/4672102/main.js	0%	Avira URL Cloud	safe
https://abcnews.go.com/	0%	Avira URL Cloud	safe
https://s0.2mdn.net/creatives/assets/4669666/star_alliance.svg	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/harris-flipped-the-script-of-the-campaign-but-there-s-much-s	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/music/news/splash-house-alanis-morissette-and-more10-things-to-do-in-the-c	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/latest/views/icons/fluent/pause_20_filled.svg	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/latest/views/icons/right-rail-provider-carousel/content-prov	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKBA	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/randy-mastro-talks-corporation-counsel-nomination/vi-BB1qY8C	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1461090454189421&correlator=1968341624220134&eid=31079956%2C31086033%2C31086221%2C31085777%2C31085995%2C31065644%2C21065725&output=ldjh&gdfp_req=1&vrg=202408120101&ptt=17&impl=fif&iu_parts=78792240%3A22569761985%2CMSN_US_300x250_YH_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=276x250%7C278x250%7C256x250%7C285x250%7C250x250%7C300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983705215&adxs=935&adys=430&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=dpn29g5o1tm7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983700949&idt=4225&adks=985191438&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX	0%	Avira URL Cloud	safe
https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEG0-wwpjUeN6tui7O4FI10M&google_cver=1&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13eNIw	0%	Avira URL Cloud	safe
https://acdn.adnxs.com/video/player/vastPlayer/XandrVastPlayer.js	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/news/politics/kamala-harris-and-nancy-pelosi-how-america-s-most-powerful-w	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/health/other/the-best-inspirational-quotes-to-motivate-and-uplift-you-out-	0%	Avira URL Cloud	safe
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA12PNdd	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODYzMjEwNTU0OTkyMzg5OTQxOA&google_push=AXcoOmRR0ff_2f93k8Jhy0vXFWIVW8hhVagJp5ORPtpyKQwp97gAm2oE0EQYOuswOSOrZ7ItbhIZMNmcQBqoNHQCeWpf4b2Usebw4Q	0%	Avira URL Cloud	safe
https://www.msn.com/en-us/health/other/military-mental-health-is-focus-as-ai-training-simulates-real	0%	Avira URL Cloud	safe
https://ep2.adtrafficquality.google/sodar/sodar2.js	0%	Avira URL Cloud	safe
https://assets.msn.com/staticsb/statics/latest/views/icons/right-rail-provider-carousel/GoToPartnerS	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=735214815312712&correlator=923626503393033&eid=31079956%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1_D2&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983690611&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=uu4m5cu9mcod&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=2&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x0&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983678143&idt=12451&adks=3902610557&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX	0%	Avira URL Cloud	safe
https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title=	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
securepubads.g.doubleclick.net	216.58.212.130	true	false	0%, Virustotal, Browse	unknown
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	0%, Virustotal, Browse	unknown
um.simpli.fi	35.204.74.118	true	false	0%, Virustotal, Browse	unknown
protected-by.clarium.io	54.194.12.48	true	false	0%, Virustotal, Browse	unknown
tls13.taboola.map.fastly.net	151.101.1.44	true	false	0%, Virustotal, Browse	unknown
cm.mgid.com	104.19.130.76	true	false	0%, Virustotal, Browse	unknown
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	0%, Virustotal, Browse	unknown
i.clean.gg	34.95.69.49	true	false	0%, Virustotal, Browse	unknown
fra1-ib.adnxs.com	37.252.172.123	true	false	0%, Virustotal, Browse	unknown
eu-eb2.3lift.com	13.248.245.213	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.181.226	true	false	0%, Virustotal, Browse	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	54.78.225.93	true	false	0%, Virustotal, Browse	unknown
sync.im-apps.net	95.101.111.136	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
nxejt.polluxcastor.top	188.114.97.3	true	false	3%, Virustotal, Browse	unknown
pagead-googlehosted.l.google.com	142.250.184.225	true	false	0%, Virustotal, Browse	unknown
nydc1.outbrain.org	64.202.112.223	true	false	0%, Virustotal, Browse	unknown
pugm-lhrc.pubmnet.com	185.64.190.78	true	false	0%, Virustotal, Browse	unknown
ep2.adtrafficquality.google	142.250.185.161	true	false	0%, Virustotal, Browse	unknown
lb-sin.mgid.com	172.241.51.68	true	false	0%, Virustotal, Browse	unknown
gtrace.mediago.io	35.214.168.80	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	172.217.16.130	true	false	0%, Virustotal, Browse	unknown
a.tribalfusion.com	104.18.24.173	true	false	0%, Virustotal, Browse	unknown
sb.scorecardresearch.com	18.244.18.32	true	false	0%, Virustotal, Browse	unknown
prod.appnexus.map.fastly.net	151.101.193.108	true	false	0%, Virustotal, Browse	unknown
btloader.com	104.22.74.216	true	false	0%, Virustotal, Browse	unknown
m.anycast.adnxs.com	185.89.210.90	true	false	0%, Virustotal, Browse	unknown
s0.2mdn.net	142.250.184.230	true	false	0%, Virustotal, Browse	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	0%, Virustotal, Browse	unknown
s.tribalfusion.com	104.18.25.173	true	false	0%, Virustotal, Browse	unknown
api.btloader.com	130.211.23.194	true	false	0%, Virustotal, Browse	unknown
www.googletagservices.com	216.58.212.130	true	false	0%, Virustotal, Browse	unknown
hbx.media.net	23.212.88.20	true	false	0%, Virustotal, Browse	unknown
user-data-eu.bidswitch.net	35.214.149.91	true	false	0%, Virustotal, Browse	unknown
dsp.adkernel.com	174.137.133.49	true	false	0%, Virustotal, Browse	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false		unknown
tsdtocl.com	151.101.1.44	true	false		unknown
cn-0001.cn-msedge.net	202.89.233.100	true	false		unknown
ep1.adtrafficquality.google	142.250.184.194	true	false		unknown
ad.doubleclick.net	172.217.16.198	true	false		unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false		unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false		unknown
trace.popin.cc	35.213.89.133	true	false		unknown
trace.mediago.io	35.208.249.213	true	false		unknown
ad-delivery.net	104.26.3.70	true	false		unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false		unknown
nym1-ib.adnxs.com	68.67.160.186	true	false		unknown
ib.anycast.adnxs.com	185.89.210.244	true	false		unknown
visitor-fra02.omnitagjs.com	185.255.84.152	true	false		unknown
js.monitor.azure.com	unknown	unknown	false		unknown
api.taboola.com	unknown	unknown	false		unknown
sync.inmobi.com	unknown	unknown	false		unknown
t.clarity.ms	unknown	unknown	false		unknown
acdn.adnxs-simple.com	unknown	unknown	false		unknown
c.clarity.ms	unknown	unknown	false		unknown
acdn.adnxs.com	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false		unknown
c1.adform.net	unknown	unknown	false		unknown
ads.msn.com	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
m.adnxs.com	unknown	unknown	false		unknown
confiant.msn.com	unknown	unknown	false		unknown
aefd.nelreports.net	unknown	unknown	false		unknown
cdn.taboola.com	unknown	unknown	false		unknown
cdn.doubleverify.com	unknown	unknown	false		unknown
shftr.adnxs.net	unknown	unknown	false		unknown
p.rfihub.com	unknown	unknown	false		unknown
c.evidon.com	unknown	unknown	false		unknown
c.msn.com	unknown	unknown	false		unknown
srtb.msn.com	unknown	unknown	false		unknown
deff.nelreports.net	unknown	unknown	false		unknown
image6.pubmatic.com	unknown	unknown	false		unknown
sync.outbrain.com	unknown	unknown	false		unknown
browser.events.data.msn.com	unknown	unknown	false		unknown
visitor.omnitagjs.com	unknown	unknown	false		unknown
pr-bh.ybp.yahoo.com	unknown	unknown	false		unknown
x.bidswitch.net	unknown	unknown	false		unknown
assets.msn.com	unknown	unknown	false		unknown
code.yengo.com	unknown	unknown	false		unknown
www.msn.com	unknown	unknown	false		unknown
www.clarity.ms	unknown	unknown	false		unknown
mem.gfx.ms	unknown	unknown	false		unknown
cdn.adnxs.com	unknown	unknown	false		unknown
c.betrad.com	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		unknown
login.microsoftonline.com	unknown	unknown	false		unknown
api.msn.com	unknown	unknown	false		unknown
eb2.3lift.com	unknown	unknown	false		unknown

Name	Malicious	Antivirus Detection	Reputation
https://trace.popin.cc/cs/msn?id=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbs3aENBrbCIgoUvHB73rTpZ-G8vXqskbV4QI5xduNGGBDlcg0jsjNdHvdiBG0pBLr3i3UWTeJg&label=window_focus&gqid&qqid=CI2-0ePD_ocDFfLzEQgdBEwIKg&bgload=1	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/creatives/assets/4672102/lx_300x250_default.js	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEMREmyLJZcczGzKLaYE82i4&google_cver=1	false	Avira URL Cloud: safe	unknown
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwL3hhbmRyOjcyOHg5MA==&v=5&s=v31i5imv8tj&id=eyJhc3QiOnsiYXN0X3MiOiJydGIiLCJhc3RfYyI6NTQyNTI5OTQyLCJhc3RfYiI6NjY4LCJzIjoiYmFubmVyMV8xOGFlZDk2ODM3ZWY0NmFlZThmYWJkN2NhZTk2ZjE3NyJ9LCJvIjoieGFuZHIiLCJ0cF9jcmlkIjoiWEQ6NjY4OzU0MjUyOTk0MiJ9&cb=2328385&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0wzaGhibVJ5T2pjeU9IZzVNQT09Iiwid2QiOnsibyI6InhhbmRyIiwidyI6NzI4LCJoIjo5MH0sIndyIjoyfQ==	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEEcUXY2asDVUQXbLD7nA-Rg&google_cver=1&google_push=AXcoOmSP_8t9kgivr2k1i7Nol5PfWq4chgDHae0LY3KSfeegZkDgOt_ECxKTbOmRDYbRjPmpZrneS3CspygCUMRupYo0yKUSRF2umA&rdf=1	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	false	Avira URL Cloud: safe	unknown
https://nym1-ib.adnxs.com/ot?ps=5a076f8c8fa8dbb3a25976ee107e72acee62642a&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQiEzoe2BhAFGXyeP21Up9U_IVyjL84pktQ_KJgCMLhoOI_DcUDeyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDWgAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSABOyAogerw7QEwBTkRZABBEWQUSABQAFoNFUcUEAAYAGISFQ8AEQldCAAAakoUAARwAA..&pp=0.32&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fcs%2Fxandr%3Frdid%3D190ff5f896905fe7fa92815f83d24d19	false	Avira URL Cloud: safe	unknown
https://pr-bh.ybp.yahoo.com/sync/msn?gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl&google_hm=V0fl_DXAQaWaCT7t2tSmtg==&gdpr=&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://www.googletagservices.com/dcm/impl_v101.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSd1RJZsGpkD-ocJbAvAXAOq93QTHvM6_C50ufBwQOAI6AIOzonzInP-vFOm1AWZWbfQYTq7iYbaUYuikar3ZhmcHTtag	false	Avira URL Cloud: safe	unknown
https://ad-delivery.net/px.gif?ch=2	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/setuid?entity=483&code=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13Lz-ksO7wI5muGKSc9PhhGTRdJNTTcikg6dSFFW8FvC0yvo0kbU4R2pnqJjHp3ba496ynFZpw	false	Avira URL Cloud: safe	unknown
https://cdn.taboola.com/scripts/msn-sync.es5.js	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=MTkxNTQ0NzY3MzM3MzE1NTc5MA%3D%3D	false	Avira URL Cloud: safe	unknown
https://btloader.com/tag?o=6208086025961472&upapi=true	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	URL Reputation: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1168653790437110&correlator=762928904195550&eid=31085738%2C31085908%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie_enabled=1&cdm=www.msn.com&abxe=1&dt=1723983676803&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=puf1plvxsfc0&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=18032&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983667360&idt=9407&adks=4103432296&frm=23&eoidce=1	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSPADpaXnfbIUk9YPME1SjrhAArsB_fEzf6dwA6uT_KEFZiUW66hamp8CH_FdlVQwUSBRDEEqNSjEevP7S_A&label=window_focus&gqid&qqid=CJ3EoNfD_ocDFfsoVQgde5cbFQ&bgload=1	false	Avira URL Cloud: safe	unknown
https://m.adnxs.com/mapuid?member=280&user=33E577E4B44B65A73DE1633BB58264E9;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D33E577E4B44B65A73DE1633BB58264E9%2526gdpr%253D0%2526gdpr_consent%253D	false	Avira URL Cloud: safe	unknown
https://m.adnxs.com/mapuid?member=280&user=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D33E577E4B44B65A73DE1633BB58264E9%2526gdpr%253D0%2526gdpr_consent%253D	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=d7b530a4-7680-4c23-a8bf-c52c121d2e87&scope=User.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fwww.msn.com%2Fstaticsb%2Fstatics%2Flatest%2Fauth%2Fauth-redirect-blank.html&client-request-id=6e58fe90-4747-48ba-8531-6d14ef6e9e2d&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.18.0&x-client-OS=&x-client-CPU=&client_info=1&code_challenge=Ie_OIdLPDloHwyUz7PMP78CmLwMTtgl9JgawTs83-5A&code_challenge_method=S256&prompt=none&nonce=b0a52ac5-5c32-46b9-8584-0febae4f5aef&state=eyJpZCI6IjIzNTI4YTljLTg5NzItNDNlNS04ZDhhLWQ0NDRhNzgzZjZjZSIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19	false		unknown
https://protected-by.clarium.io/pixel?tag=wt_OHdVQlZlOHdtQlR0VTVJTDRBa2N2N3RaU3AwLzI4NzkzMjk2NjY6MzAweDYwMA==&v=5&s=v31i5imuldr&id=eyJkZnAiOnsiYWQiOjUwNDMwNTgyMDEsImMiOjEzODQ3NjI4MzUyNSwibCI6NTc5MzI0ODU2MywibyI6Mjg3OTMyOTY2NiwiQSI6Ii80MjExNTE2MywyMjU2OTc2MTk4NS9JUF9NU05fbXNuLmNvbV8zMDB4NjAwX1VTXzIwMjNfTmV3IiwieSI6MCwiY28iOjAsInMiOiJncHQtcGFzc2JhY2sifSwidHBfY3JpZCI6IlhEOjExMTIyOzUwNTU2MzMzOSJ9&cb=5783654&h=www.msn.com&d=eyJ3aCI6Ik9IZFZRbFpsT0hkdFFsUjBWVFZKVERSQmEyTjJOM1JhVTNBd0x6STROemt6TWprMk5qWTZNekF3ZURZd01BPT0iLCJ3ZCI6eyJvIjoyODc5MzI5NjY2LCJ3IjoiMzAwIiwiaCI6IjYwMCJ9LCJ3ciI6Mn0=	false	Avira URL Cloud: safe	unknown
https://ad-delivery.net/px.gif?ch=1&e=0.3976663069404487	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/rum.js	false	Avira URL Cloud: safe	unknown
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8&user.id=33E577E4B44B65A73DE1633BB58264E9	false	Avira URL Cloud: safe	unknown
https://hbx.media.net/cksync.php?type=nms&cs=3&ovsid=33E577E4B44B65A73DE1633BB58264E9&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/creatives/assets/4672102/main.js	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/creatives/assets/4669666/star_alliance.svg	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1461090454189421&correlator=1968341624220134&eid=31079956%2C31086033%2C31086221%2C31085777%2C31085995%2C31065644%2C21065725&output=ldjh&gdfp_req=1&vrg=202408120101&ptt=17&impl=fif&iu_parts=78792240%3A22569761985%2CMSN_US_300x250_YH_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=276x250%7C278x250%7C256x250%7C285x250%7C250x250%7C300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983705215&adxs=935&adys=430&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=dpn29g5o1tm7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.msn.com&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x250&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983700949&idt=4225&adks=985191438&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEG0-wwpjUeN6tui7O4FI10M&google_cver=1&google_push=AXcoOmQwiPSnjGZijChu4twgtMECHyQ3dQBkB6GAaO6w8yX7tibvi36hvHpEQnd0CxaZ7m9NG6VxxqI7pUOUQ3wq3pzo91srKGdl	false	Avira URL Cloud: safe	unknown
https://tsdtocl.com/	false		unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODYzMjEwNTU0OTkyMzg5OTQxOA&google_push=AXcoOmRR0ff_2f93k8Jhy0vXFWIVW8hhVagJp5ORPtpyKQwp97gAm2oE0EQYOuswOSOrZ7ItbhIZMNmcQBqoNHQCeWpf4b2Usebw4Q	false	Avira URL Cloud: safe	unknown
https://ep2.adtrafficquality.google/sodar/sodar2.js	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=735214815312712&correlator=923626503393033&eid=31079956%2C31086204&output=ldjh&gdfp_req=1&vrg=202408150101&ptt=17&impl=fif&iu_parts=42115163%3A22569761985%2CIP_MSN_msn.com_300x250_US_Dec2023_1_D2&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&sfv=1-0-40&eri=4&sc=1&cookie=ID%3D8938cb547e5922df%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZxEspi5ZGNCsXiJsTfkRSjGXQlMQ&gpic=UID%3D00000e988aab2fe8%3AT%3D1723983678%3ART%3D1723983678%3AS%3DALNI_MZnniOqme0Rygx2x48bSiBVvoZKqQ&cdm=www.msn.com&abxe=1&dt=1723983690611&adxs=935&adys=426&biw=1263&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=uu4m5cu9mcod&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=2&url=https%3A%2F%2Fwww.msn.com%2F&loc=https%3A%2F%2Fwww.msn.com%2Fen-us%2Fnews%2Fpolitics%2Finside-the-fast-moving-launch-of-kamala-harris-for-president%2Far-AA1oZEfb%3Focid%3DBingNewsBrowse&top=www.msn.com&vis=2&psz=300x0&msz=300x0&fws=256&ohw=0&td=1&egid=23209&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1723983678143&idt=12451&adks=3902610557&frm=23&eo_id_str=ID%3Da042ca18b7000012%3AT%3D1723983678%3ART%3D1723983678%3AS%3DAA-AfjY_uLUBf9LdX6rNOQt6SklX	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.msn.com/en-us/news/politics/mark-robinson-who-often-calls-abortion-murder-we-had-an-abor	chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/money/markets/trump-mercilessly-mocked-over-frighteningly-false-tariffs-cl	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
http://s0.2mdn.net/ads/studio/close.png	chromecache_706.1.dr, chromecache_1077.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/overstock-com-founder-byrne-s-trump-aligned-lawyer-disqualif	chromecache_1193.1.dr, chromecache_971.1.dr	false	Avira URL Cloud: safe	unknown
https://www.womansday.com/life/a39152674/monday-motivation-quotes/	chromecache_840.1.dr	false	Avira URL Cloud: safe	unknown
https://www.womansday.com/life/a39501588/buddha-quotes/	chromecache_840.1.dr	false	Avira URL Cloud: safe	unknown
https://go.redirectingat.com?id=74968X1553576&url=https%3A%2F%2Fwww.hulu.com%2Fwatch%2Fe30177ce-5201	chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/community/poll-icon.svg	chromecache_1058.1.dr, chromecache_1388.1.dr	false	Avira URL Cloud: safe	unknown
https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327	chromecache_1055.1.dr, chromecache_825.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/as-his-standing-in-the-polls-slides-trump-ramps-up-false-att	chromecache_834.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyvW-dark	chromecache_1193.1.dr, chromecache_971.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/shaka-project/shaka-packager	chromecache_751.1.dr, chromecache_1209.1.dr, chromecache_621.1.dr, chromecache_861.1.dr, chromecache_560.1.dr, chromecache_879.1.dr, chromecache_1042.1.dr, chromecache_1248.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationN	chromecache_1051.1.dr, chromecache_1497.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/$	chromecache_1099.1.dr, chromecache_959.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/how-will-voters-react-to-moms-for-liberty-candidates-in-the-	chromecache_834.1.dr	false	Avira URL Cloud: safe	unknown
https://abcnews.go.com/US/live-updates/george-santos-court-appearance/?id=99214419	chromecache_459.1.dr, chromecache_1144.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/pr-4021755/icons-wc/icons/notification-bell-wc/NotificationO	chromecache_1051.1.dr, chromecache_1497.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/lifestyle/lifestyle-buzz/dog-making-himself-sick-from-stress-of-shelter-li	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
http://ad.doubleclick.net/viewad/817-grey.gif	chromecache_1114.1.dr, chromecache_1231.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/world/ukraine-destroys-key-russian-stronghold-as-putin-makes-terrifyi	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyc7-dark	chromecache_840.1.dr	false	Avira URL Cloud: safe	unknown
https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803	chromecache_1099.1.dr, chromecache_959.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/movies/news/how-sing-sing-s-real-life-theater-prison-program-is-building-c	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
http://www.contoso.com/specificpage.html)	chromecache_860.1.dr, chromecache_1190.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/georgia-election-board-member-denies-asking-for-trump-white-	chromecache_834.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_1237.1.dr, chromecache_1083.1.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/common/discovery/v2.0/keys	chromecache_849.1.dr, chromecache_951.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/other/cas-makes-bold-statement-about-claims-of-corruption-in-jordan	chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js	chromecache_1114.1.dr, chromecache_1231.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glmx-dark	chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/crime/matthew-perry-s-last-words-to-assistant-revealed-following-arre	chromecache_1193.1.dr, chromecache_971.1.dr	false	Avira URL Cloud: safe	unknown
https://msn.yidianzixun.com/zh-cn	chromecache_886.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cosmopolitan.com/sex-love/g37092671/sexy-movies-on-hulu/	chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/world/vladimir-putin-faces-coup-over-ukraine-failure-as-russia-teeter	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2C0	chromecache_638.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/nfl/police-believe-nfl-player-air-mcnair-was-murdered-by-his-girlfr	chromecache_1193.1.dr, chromecache_971.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/boxing/trump-again-decries-two-gold-medalist-olympic-athletes-false	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cnn.com/2024/07/23/politics/harris-immigration-work-gop-attacks/index.html?cid=external-	chromecache_456.1.dr, chromecache_472.1.dr	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_742.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/	chromecache_603.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cosmopolitan.com/lifestyle/g38677270/best-place-to-buy-a-couch/	chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/world/russian-supply-bridges-destroyed-by-ukraine-amid-kursk-incursio	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://protected-by.clarium.io/pixel?tag=wt_	chromecache_1239.1.dr, chromecache_1171.1.dr	false	Avira URL Cloud: safe	unknown
https://greensock.com/standard-license	chromecache_1289.1.dr, chromecache_506.1.dr	false	URL Reputation: safe	unknown
https://www.msn.com/en-us/news/world/alain-delon-french-movie-legend-dies-at-88/ar-AA1oZv1u?ocid=Bin	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://abcnews.go.com/	chromecache_965.1.dr, chromecache_1202.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/harris-flipped-the-script-of-the-campaign-but-there-s-much-s	chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/music/news/splash-house-alanis-morissette-and-more10-things-to-do-in-the-c	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/latest/views/icons/right-rail-provider-carousel/content-prov	chromecache_1490.1.dr, chromecache_1316.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/latest/views/icons/fluent/pause_20_filled.svg	chromecache_1290.1.dr, chromecache_843.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKBA	chromecache_840.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/randy-mastro-talks-corporation-counsel-nomination/vi-BB1qY8C	chromecache_1193.1.dr, chromecache_971.1.dr	false	Avira URL Cloud: safe	unknown
https://acdn.adnxs.com/video/player/vastPlayer/XandrVastPlayer.js	chromecache_578.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13eNIw	chromecache_638.1.dr, chromecache_840.1.dr, chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/health/other/the-best-inspirational-quotes-to-motivate-and-uplift-you-out-	chromecache_840.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA12PNdd	chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/politics/kamala-harris-and-nancy-pelosi-how-america-s-most-powerful-w	chromecache_1522.1.dr	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/health/other/military-mental-health-is-focus-as-ai-training-simulates-real	chromecache_1249.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/staticsb/statics/latest/views/icons/right-rail-provider-carousel/GoToPartnerS	chromecache_1490.1.dr, chromecache_1316.1.dr	false	Avira URL Cloud: safe	unknown
https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title=	chromecache_1052.1.dr, chromecache_636.1.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
185.89.210.153	unknown	Germany	29990	ASN-APPNEXUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
68.67.161.182	unknown	United States	29990	ASN-APPNEXUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
35.213.89.133	trace.popin.cc	United States	19527	GOOGLE-2US	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
151.101.1.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
23.212.88.20	hbx.media.net	United States	16625	AKAMAI-ASUS	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
54.194.12.48	protected-by.clarium.io	United States	16509	AMAZON-02US	false
54.78.225.93	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
104.26.3.70	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
51.21.54.173	unknown	United States	2686	ATGS-MMD-ASUS	false
185.255.84.152	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
185.255.84.153	unknown	France	200271	IGUANE-FR	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
142.250.185.166	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
37.252.172.123	fra1-ib.adnxs.com	European Union	29990	ASN-APPNEXUS	false
142.250.185.161	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
185.64.190.78	pugm-lhrc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
104.19.130.76	cm.mgid.com	United States	13335	CLOUDFLARENETUS	false
172.67.41.60	unknown	United States	13335	CLOUDFLARENETUS	false
35.214.168.80	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
142.250.181.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
20.190.159.0	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.22.74.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.25.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
151.101.193.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
54.154.158.35	unknown	United States	16509	AMAZON-02US	false
142.250.184.225	pagead-googlehosted.l.google.com	United States	15169	GOOGLEUS	false
68.67.160.186	nym1-ib.adnxs.com	United States	29990	ASN-APPNEXUS	false
174.137.133.49	dsp.adkernel.com	United States	27257	WEBAIR-INTERNETUS	false
142.250.184.230	s0.2mdn.net	United States	15169	GOOGLEUS	false
142.250.184.198	unknown	United States	15169	GOOGLEUS	false
185.89.210.244	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
18.244.18.32	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
142.250.184.194	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
185.89.210.122	unknown	Germany	29990	ASN-APPNEXUS	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
188.114.97.3	nxejt.polluxcastor.top	European Union	13335	CLOUDFLARENETUS	false
64.202.112.223	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
37.252.171.85	unknown	European Union	29990	ASN-APPNEXUS	false
172.217.16.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
35.204.74.118	um.simpli.fi	United States	15169	GOOGLEUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.129.108	unknown	United States	54113	FASTLYUS	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.61	s-part-0033.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.214.149.91	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
95.101.111.136	sync.im-apps.net	European Union	12956	TELEFONICATELXIUSES	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
216.58.212.130	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
151.101.1.108	unknown	United States	54113	FASTLYUS	false
172.67.69.19	unknown	United States	13335	CLOUDFLARENETUS	false
185.89.210.90	m.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
202.89.233.100	cn-0001.cn-msedge.net	China	59067	MMAISNETMicrosoftMobileAllianceInternetServicesCoLt	false
40.126.32.68	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.166	unknown	United States	15169	GOOGLEUS	false
172.241.51.68	lb-sin.mgid.com	Netherlands	394380	LEASEWEB-USA-DAL-10US	false
70.42.32.63	unknown	United States	22075	AS-OUTBRAINUS	false
172.241.51.69	unknown	Netherlands	394380	LEASEWEB-USA-DAL-10US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1494472
Start date and time:	2024-08-18 14:19:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://nxejt.polluxcastor.top
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@38/1570@282/77
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Aug 18 11:19:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9751838966379895
Encrypted:	false
SSDEEP:	48:8vdWTSuvHVidAKZdA1FehwiZUklqehHy+3:8Iv3Ay
MD5:	D7B96DA4DCCE3DFAAE55CEC3290CB74E
SHA1:	89402D769058C65863B1A0ED9D3064FC2DBABD79
SHA-256:	897947BA065BAA0F2CDEACD99D05FB7E659D13EB35519DE364C1D40F2D4E61B9
SHA-512:	E4D8392AFCD341BDF6C7B245CC16028342BC85F30E0C23FFD997931B145F874B751410D1C3A96BD89CFD32C7A8432B89D7F96030FB9BA6959C3D326F84E01E60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......g.h...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Ymb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Ytb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Ytb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Ytb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yub...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............[.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:41 UTC	665	OUT	GET / HTTP/1.1 Host: nxejt.polluxcastor.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:19:41 UTC	769	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 18 Aug 2024 12:19:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close location: https://bing.com/news cache-control: max-age=0, no-cache, no-store, must-revalidate accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hi6Q65kg%2F65PFlst%2BQPB%2BgbPKkGUKnZFhNeuY1PBEZkQCJ%2F%2B4N%2Bz9wP6LyaYliVuNes3E7FDdpypMT5WoBOsWVpY9pgQlwzceNQqRKOh4D6d0xcuCanBYnW7iAI8RRMx1uUZurs8YSUh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b51da880d464358-EWR alt-svc: h3=":443"; ma=86400
2024-08-18 12:19:41 UTC	144	IN	Data Raw: 38 61 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 8a<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>
2024-08-18 12:19:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:49 UTC	521	OUT	GET /tag/yktrlw8 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:19:49 UTC	528	IN	HTTP/1.1 200 OK Date: Sun, 18 Aug 2024 12:19:49 GMT Content-Type: application/x-javascript Content-Length: 885 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818; expires=Mon, 18 Aug 2025 12:19:49 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78 x-azure-ref: 20240818T121949Z-15c77d89844n8m75vqkmf3rwqs00000004hg000000007cqf X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-08-18 12:19:49 UTC	885	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:50 UTC	4855	OUT	GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_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 [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:19:50 UTC	940	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sun, 18 Aug 2024 12:19:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d09f1b0b-570e-4bb9-b409-ea6d65d28eb1 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 06-Aug-2034 12:19:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:50 UTC	2432	OUT	GET /ot?ps=7935dc7bb90d0afd87f6b33edd2845c6ed98be95&pe=wqT_3QLFAfBJxQAAAAMA6gAFAQjizYe2BhAFGZvIzAUuj4U_IWCLgoU4e4Q_KJgCMLhoOI_DcUDfyNkJSAJQAlgAYAF5AAAAAAAA8D-CAQkJAAAFDaAAiAEAkAG8l44BmAEAqgFmCJgCELhoGI_DcSDfyNkJKMvbhLIBMAU5mw1kAEERZBhIAFAAWg0JCUUcAAAQABgAYhIVDwARERgAakoUAARwAA..&pp=0.01&an_audit=0&urlenc=https%3A%2F%2Ftrace.mediago.io%2Fju%2Fic%3Ftn%3Dbc0f43524da56011e1041475ad061e34%26trackingid%3D370a60796b15ab9f380c2ccb3eb902c0%26acid%3D699%26data%3DzQaO1iI5PE3wBOil9pC4FkGtxe4mmLHuqnNk6lfLy81PRPvi3n_fMnRswZtZGMtKMLwi2mYdEf_ciUYr8V2COSsXwOXyikjrWJgc0E7Yw5_dJ6rzk4uBWUKfdOn66e3MNk_aYJ504Euve_Y5HAFE6iPvWwGfoV1esP9w-4sXE-wVq_VWY0Z02qrtNQMWaeZGRmW6kvVAfnYTFEZ6orObRzA855ATKNdgXPBjErfLGO4vOTuGgeN8G-9agmIeTaFrwHYN6TK-NcMiui9nTf2DD-p29_dPSvWncXazMIVvUg8cbN1nyBEZ-7P-Dy45AiB_fu56RxTJq3bTxhNf46T7VEluF19b37Cu0K5Ebim-Wgd8BNydrhvYYUbEza8oTuPFkL5zNdedL6qh8rIOl1aoX0a4BF-sbI1GRnl7xR1y__p9GaqCCSLPo0_cdLXS_yiLi2kLXZe8F1r9fkywnLVFpv_nuelagZb8dIAfzHOcm0-WXRxqKEBcrp0bGsVdJHBUYECke1I7nuH5VVhtpSbbtd838gj4NEycaYDxnGI3i5729_ymkTztoVq [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:19:50 UTC	2463	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sun, 18 Aug 2024 12:19:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://trace.mediago.io/ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=370a60796b15ab9f380c2ccb3eb902c0&acid=699&data=zQaO1iI5PE3wBOil9pC4FkGtxe4mmLHuqnNk6lfLy81PRPvi3n_fMnRswZtZGMtKMLwi2mYdEf_ciUYr8V2COSsXwOXyikjrWJgc0E7Yw5_dJ6rzk4uBWUKfdOn66e3MNk_aYJ504Euve_Y5HAFE6iPvWwGfoV1esP9w-4sXE-wVq_VWY0Z02qrtNQMWaeZGRmW6kvVAfnYTFEZ6orObRzA855ATKNdgXPBjErfLGO4vOTuGgeN8G-9agmIeTaFrwHYN6TK-NcMiui9nTf2DD-p29_dPSvWncXazMIVvUg8cbN1nyBEZ-7P-Dy45AiB_fu56RxTJq3bTxhNf46T7VEluF19b37Cu0K5Ebim-Wgd8BNydrhvYYUbEza8oTuPFkL5zNdedL6qh8rIOl1aoX0a4BF-sbI1GRnl7xR1y__p9GaqCCSLPo0_cdLXS_yiLi2kLXZe8F1r9fkywnLVFpv_nuelagZb8dIAfzHOcm0-WXRxqKEBcrp0bGsVdJHBUYECke1I7nuH5VVhtpSbbtd838gj4NEycaYDxnGI3i5729_ymkTztoVqsBwiAjllrIlbNhZLOn1ehUY7kI0tyHzUfks96cMQWSqSgcb6wCrmt2JypuJ-6QJCmf0o91cteNiDBkowzuPH5t7rIe35bt2kNHT_EwIsXaQXHpCB1LsQhaMWS6T_2iXPlMT2FCygpQVcQ_heL9lP1HbKFDYUOFhrRy-wkNjbIOSSmrS5Hiuw94EeUa3GsCYOrf4_V9QBA446v290fKmrnOsPYrUiTey47OfrYC3IKokGOlv1aTtgG32ng2j1aPg7is5Wo520tFBXseXjbG5Hippa2zRZhsF6FFEyqggmYIXfQ0AWVndCFL0rJTkErDpbLB [TRUNCATED] AN-X-Request-Uuid: b1e61fd3-1608-4bef-b2c8-e7c0ddd0c160 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 06-Aug-2034 12:19:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:51 UTC	4623	OUT	GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_cTCssTaHR0cAEv8LB0cmFjZS5tZWRpYWdvLmlvL2FwaS9sb2cvd2lubm90aWNlP3RuPWJjMGY0MzUyNGRhNTYwMTFlMTA0MTQ3NWFkMDYxZTM0Jndpbmxvc3M9MSZpZD1jYWRkYjhjZmMwMzE1Y2QyYzIxYTZmM2ExMjM4MGM3NiZzZWF0X2lkPSR7QVVDVElPTl9TRUFUX0lEfSZjdXJyZW5jeT0ke0FVQ1RJT05fQ1VSUkVOQ1l9JmJpZF8yNwAMQklEXwE2CGFkXzIYAABBCRcFkwwmaW1wAR5oMzY1MjI4MjQ5NjE3MzMxNzA3MCZwcmljZT0kFYfwT1BSSUNFfSZ0ZXN0PTAmdGltZT0xNzIzOTgzNTg2JmRwPTVGdVFJZ1BUNjhHcFh2RXdYcmV1UW8zdVFvWDA2cmplMjBab2JDUGsyMmMmZHNwAXj0PQgyMiZ1cmw9T09NSEg0Rl82eVpla01EaUdzUVo0RHBoS1FRcTFBWnNveTJNaXlsZWluOFhvYmYzazlmbUNLUlpiV0dmdngxbkVKb1hLajNyVnJlRDAzMWlHYUJXSWtZY3FHZlF3akk2UGNpNzFKZmZVRGN3ckJ3 [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:19:51 UTC	940	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sun, 18 Aug 2024 12:19:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 2b87e11d-ba21-4f2d-87d3-d5527a6e8e97 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 06-Aug-2034 12:19:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:51 UTC	2055	OUT	GET /ju/ic?tn=bc0f43524da56011e1041475ad061e34&trackingid=370a60796b15ab9f380c2ccb3eb902c0&acid=699&data=zQaO1iI5PE3wBOil9pC4FkGtxe4mmLHuqnNk6lfLy81PRPvi3n_fMnRswZtZGMtKMLwi2mYdEf_ciUYr8V2COSsXwOXyikjrWJgc0E7Yw5_dJ6rzk4uBWUKfdOn66e3MNk_aYJ504Euve_Y5HAFE6iPvWwGfoV1esP9w-4sXE-wVq_VWY0Z02qrtNQMWaeZGRmW6kvVAfnYTFEZ6orObRzA855ATKNdgXPBjErfLGO4vOTuGgeN8G-9agmIeTaFrwHYN6TK-NcMiui9nTf2DD-p29_dPSvWncXazMIVvUg8cbN1nyBEZ-7P-Dy45AiB_fu56RxTJq3bTxhNf46T7VEluF19b37Cu0K5Ebim-Wgd8BNydrhvYYUbEza8oTuPFkL5zNdedL6qh8rIOl1aoX0a4BF-sbI1GRnl7xR1y__p9GaqCCSLPo0_cdLXS_yiLi2kLXZe8F1r9fkywnLVFpv_nuelagZb8dIAfzHOcm0-WXRxqKEBcrp0bGsVdJHBUYECke1I7nuH5VVhtpSbbtd838gj4NEycaYDxnGI3i5729_ymkTztoVqsBwiAjllrIlbNhZLOn1ehUY7kI0tyHzUfks96cMQWSqSgcb6wCrmt2JypuJ-6QJCmf0o91cteNiDBkowzuPH5t7rIe35bt2kNHT_EwIsXaQXHpCB1LsQhaMWS6T_2iXPlMT2FCygpQVcQ_heL9lP1HbKFDYUOFhrRy-wkNjbIOSSmrS5Hiuw94EeUa3GsCYOrf4_V9QBA446v290fKmrnOsPYrUiTey47OfrYC3IKokGOlv1aTtgG32ng2j1aPg7is5Wo520tFBXseXjbG5Hippa2zRZhsF6FFEyqggmYIXfQ0AWVndCFL0rJTkErDpbLBebVmJXfNL3OANlvwDEuPbD4OagoISY [TRUNCATED] Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:19:51 UTC	320	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Set-Cookie: __mguid_=22210ca76ce6179a2j9wvk00lzzjbgl7; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Sun, 18 Aug 2024 12:19:51 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:51 UTC	4927	OUT	GET /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_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 [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-08-18 12:19:52 UTC	940	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sun, 18 Aug 2024 12:19:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c48e7f99-d5d8-46a5-b2d4-9f714771a020 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 06-Aug-2034 12:19:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:52 UTC	4695	OUT	GET /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.bing.com%2Fnews&e=wqT_3QKWGfBMlgwAAAMA1gAFAQjizYe2BhDOt6aexvLg1zIYp8bb_azHnfogKjYJm8jMBS6PhT8RYIuChTh7hD8ZAAAAoEfh9j8hYIuChTh7hD8pm8gJJAAxARu4mZnJPzDfyNkJOJgCQLhoSJEEUMvbhLIBWLyXjgFgAGjuAngAgAEBigEDVVNEkgEBBvCBmAEBoAEBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAsgIgMzNFNTc3RTRCNDRCNjVBNzNERTE2MzNCQjU4MjY0RTnYAgHgAsXmXuoCGWh0dHBzOi8vd3d3LmJpbmcuY29tL25ld3OAAwCIAwGQAwCYAxSgAwGqA_cTCssTaHR0cAEv8LB0cmFjZS5tZWRpYWdvLmlvL2FwaS9sb2cvd2lubm90aWNlP3RuPWJjMGY0MzUyNGRhNTYwMTFlMTA0MTQ3NWFkMDYxZTM0Jndpbmxvc3M9MSZpZD1jYWRkYjhjZmMwMzE1Y2QyYzIxYTZmM2ExMjM4MGM3NiZzZWF0X2lkPSR7QVVDVElPTl9TRUFUX0lEfSZjdXJyZW5jeT0ke0FVQ1RJT05fQ1VSUkVOQ1l9JmJpZF8yNwAMQklEXwE2CGFkXzIYAABBCRcFkwwmaW1wAR5oMzY1MjI4MjQ5NjE3MzMxNzA3MCZwcmljZT0kFYfwT1BSSUNFfSZ0ZXN0PTAmdGltZT0xNzIzOTgzNTg2JmRwPTVGdVFJZ1BUNjhHcFh2RXdYcmV1UW8zdVFvWDA2cmplMjBab2JDUGsyMmMmZHNwAXj0PQgyMiZ1cmw9T09NSEg0Rl82eVpla01EaUdzUVo0RHBoS1FRcTFBWnNveTJNaXlsZWluOFhvYmYzazlmbUNLUlpiV0dmdngxbkVKb1hLajNyVnJlRDAzMWlHYUJXSWtZY3FHZlF3akk2UGNpNzFKZmZVRGN3 [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-08-18 12:19:52 UTC	940	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sun, 18 Aug 2024 12:19:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 7e2f0084-b412-4495-a113-238861a2063e Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 06-Aug-2034 12:19:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-18 12:19:52 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=92255 Date: Sun, 18 Aug 2024 12:19:52 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:52 UTC	594	OUT	GET /s/0.7.44/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=d4bf51e2c061454093f4a86a5aaabc92.20240818.20250818
2024-08-18 12:19:52 UTC	619	IN	HTTP/1.1 200 OK Date: Sun, 18 Aug 2024 12:19:52 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 65276 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 18 Aug 2024 06:43:59 GMT ETag: "0x8DCBF51240602D7" x-ms-request-id: 534b2be1-601e-007f-353f-f1e140000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240818T121952Z-15c77d89844mr5m2v1r4mgrp0n00000002c0000000007v27 Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-18 12:19:52 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 34 34 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 73 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 63 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 6c 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.44: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__pro
2024-08-18 12:19:52 UTC	16384	IN	Data Raw: 6c 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 66 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 64 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 64 61 74 61 2c 72 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 72 2e 70 72 69 76 61 63 79 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 2c 6c 3d 5b 22 63 6c 61 73 73 22 2c 22 73 74 79 6c 65 22 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: l,metadata:{active:!0,suspend:!1,privacy:f,position:null,fraud:d,size:null}},function(t,e,n){var a=e.data,r=e.metadata,i=r.privacy,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="",l=["class","style"];Object.keys(
2024-08-18 12:19:52 UTC	16384	IN	Data Raw: 21 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4b 6e 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 29 2c 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 74 29 7b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2a 65 29 3b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 72 65 70 6c 61 63 65 28 47 6e 2c 22 22 29 29 2a 65 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 51 6e 3d 5b 22 74 69 74 6c 65 22 2c 22 61 6c 74 22 2c 22 6f 6e 6c 6f 61 64 22 2c 22 6f 6e 66 6f 63 75 73 22 2c 22 6f 6e 65 72 72 Data Ascii: !==r&&"object"==typeof r&&Kn(r)}}function Zn(t,e){if(void 0===e&&(e=1),null!==t)switch(typeof t){case"number":return Math.round(te);case"string":return Math.round(parseFloat(t.replace(Gn,""))e)}return null}var Qn=["title","alt","onload","onfocus","onerr
2024-08-18 12:19:52 UTC	16384	IN	Data Raw: 28 6e 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 22 22 3b 74 20 69 6e 20 77 72 26 26 77 72 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 7c 7c 28 62 72 3d 7b 63 6f 64 65 3a 74 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 61 2c 73 74 61 63 6b 3a 72 2c 73 65 76 65 72 69 74 79 3a 65 7d 2c 74 20 69 6e 20 77 72 3f 77 72 5b 74 5d 2e 70 75 73 68 28 69 29 3a 77 72 5b 74 5d 3d 5b 69 5d 2c 79 72 28 33 33 29 29 7d 76 61 72 20 53 72 2c 45 72 3d 7b 7d 2c 4f 72 3d 6e 65 77 20 53 65 74 2c 4e 72 3d 7b 7d 2c 54 72 3d 7b 7d 2c 4d 72 3d 7b 7d 2c 78 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 72 28 29 7b 6a 72 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 73 70 6c 69 74 28 2f Data Ascii: (n,"\|").concat(a):"";t in wr&&wr[t].indexOf(i)>=0\|\|(br={code:t,name:n,message:a,stack:r,severity:e},t in wr?wr[t].push(i):wr[t]=[i],yr(33))}var Sr,Er={},Or=new Set,Nr={},Tr={},Mr={},xr={};function _r(){jr()}function Ir(t){try{var e=t&&t.length>0?t.split(/
2024-08-18 12:19:52 UTC	359	IN	Data Raw: 67 72 61 64 65 3a 65 74 2c 76 65 72 73 69 6f 6e 3a 6c 7d 29 2c 61 6f 3d 77 69 6e 64 6f 77 2c 72 6f 3d 22 63 6c 61 72 69 74 79 22 3b 66 75 6e 63 74 69 6f 6e 20 69 6f 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 6f 29 7b 69 66 28 61 6f 5b 72 6f 5d 26 26 61 6f 5b 72 6f 5d 2e 76 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 45 72 72 6f 72 20 43 4c 30 30 31 3a 20 4d 75 6c 74 69 70 6c 65 20 43 6c 61 72 69 74 79 20 74 61 67 73 20 64 65 74 65 63 74 65 64 2e 22 29 3b 76 61 72 20 74 3d 61 6f 5b 72 6f 5d 26 26 61 6f 5b 72 6f 5d 2e 71 7c 7c 5b 5d 3b 66 6f 72 28 61 6f 5b 72 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e Data Ascii: grade:et,version:l}),ao=window,ro="clarity";function io(){if(void 0!==ao){if(ao[ro]&&ao[ro].v)return console.warn("Error CL001: Multiple Clarity tags detected.");var t=ao[ro]&&ao[ro].q\|\|[];for(ao[ro]=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://nxejt.polluxcastor.top

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Windows Analysis Report
http://nxejt.polluxcastor.top

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-18 12:19:53 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=102303 Date: Sun, 18 Aug 2024 12:19:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-18 12:19:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:19:55 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9sVEHeyg2Wn+bpF&MD=CZn5OTbn HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-18 12:19:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8617683e-0bbd-435a-87c9-284d99994810 MS-RequestId: 4ea1c1f1-5d82-489f-af17-1550d12b1958 MS-CV: /cv5IwDFakqOltmz.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 18 Aug 2024 12:19:55 GMT Connection: close Content-Length: 24490
2024-08-18 12:19:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-18 12:19:55 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:01 UTC	1131	OUT	GET /th?id=OPN.RTNews_FnPeWo4oIQBL868PlLV-0Q&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
2024-08-18 12:20:02 UTC	857	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 3247 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 4264FF4F66534AACA3398FB487594EA0 Ref B: BJ1EDGE1119 Ref C: 2024-08-18T12:20:01Z Date: Sun, 18 Aug 2024 12:20:01 GMT Connection: close
2024-08-18 12:20:02 UTC	3247	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:01 UTC	1131	OUT	GET /th?id=OPN.RTNews_G4dHnaRwklKRYDkRFglI5Q&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
2024-08-18 12:20:02 UTC	669	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 5324 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-MSEdge-Ref: Ref A: FC26112EF1F64771A8D7F9AEFC7AC244 Ref B: BJ1EDGE0821 Ref C: 2024-08-18T12:20:01Z Date: Sun, 18 Aug 2024 12:20:01 GMT Connection: close
2024-08-18 12:20:02 UTC	5324	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:02 UTC	1131	OUT	GET /th?id=OPN.RTNews_Y3S0CmJGEtC6lhOdAIefTg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
2024-08-18 12:20:03 UTC	675	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 2135 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F8699F265ED346D7888C86B2E374A2E0 Ref B: BJ1EDGE0521 Ref C: 2024-08-18T12:20:02Z Date: Sun, 18 Aug 2024 12:20:02 GMT Connection: close
2024-08-18 12:20:03 UTC	2135	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:02 UTC	1131	OUT	GET /th?id=OPN.RTNews_mE4vUYULW6c9haXp2MK_-g&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
2024-08-18 12:20:04 UTC	851	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 5317 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 11B7A18D2C734EFFB0CEED36033DD0CB Ref B: BJ1EDGE1222 Ref C: 2024-08-18T12:20:03Z Date: Sun, 18 Aug 2024 12:20:03 GMT Connection: close
2024-08-18 12:20:04 UTC	5317	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:02 UTC	1131	OUT	GET /th?id=OPN.RTNews_HXuNEnm5ROTyHSXJ0EZyUg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
2024-08-18 12:20:03 UTC	857	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 3167 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AF911043CABE476997B40D400010F406 Ref B: BJ1EDGE1016 Ref C: 2024-08-18T12:20:03Z Date: Sun, 18 Aug 2024 12:20:02 GMT Connection: close
2024-08-18 12:20:03 UTC	3167	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:02 UTC	1131	OUT	GET /th?id=OPN.RTNews_MJAHq_sJxCORtl9aXHfw_A&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; SRCHUSR=DOB=20240818; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect
2024-08-18 12:20:04 UTC	857	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 3271 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 968D0514B5B747CFA6664539BA9DCDFE Ref B: BJ1EDGE1013 Ref C: 2024-08-18T12:20:03Z Date: Sun, 18 Aug 2024 12:20:03 GMT Connection: close
2024-08-18 12:20:04 UTC	3271	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:03 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_ytodI-e_ZTezA62QNJxXMw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-18 12:20:04 UTC	798	IN	HTTP/1.1 200 OK Date: Sun, 18 Aug 2024 12:20:04 GMT Content-Type: application/x-javascript Content-Length: 49716 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 04 Jul 2024 00:13:56 GMT ETag: 0x8DC9BBE31D9F678 x-ms-request-id: b0f1776c-501e-002b-0d68-f1439a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240818T122003Z-15c77d89844mr5m2v1r4mgrp0n00000002eg000000004pwt x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-08-18 12:20:04 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-08-18 12:20:04 UTC	16384	IN	Data Raw: ae a2 6c 52 cd 4f cd cb 30 0a e8 f7 a5 1b 51 41 2a 69 5f c0 e6 0a 0f b9 dc da ff d8 3f 47 28 0e cf 26 91 a2 26 a1 54 37 04 65 8d db 2c 85 fb 76 23 93 e9 db 4d f2 e3 d0 a1 30 d4 59 e0 8d c8 e5 0d 99 9a d8 b6 0d 91 bd b0 65 64 d3 e9 45 86 45 82 d1 c0 4b ad 8c 95 07 c8 26 d5 96 d9 09 ea 74 d6 d4 45 00 06 89 07 23 72 f8 84 a7 7a 00 6c 1f ac e3 3f 99 d4 73 e7 87 8a 4b 83 4e 2f 32 ae ab 25 e7 4f 8a 0e 5e 1f 09 98 04 a3 24 9c f0 d1 6c 74 70 bf 76 50 5b fa ad 8a 3c af b6 12 a9 2f d9 15 a3 86 87 3c c6 42 29 30 da 47 cc 17 79 2c d6 c2 b4 1a 74 13 03 a0 a6 f4 f6 bd a5 b3 ee b4 cb d5 22 ad c6 d0 f2 f1 22 88 f4 4e bd aa 69 d6 51 b2 52 c6 aa 46 84 78 59 81 89 77 17 99 e6 1b b8 dd 36 2d 3a e8 a5 81 67 a8 e3 d1 67 96 cb 18 cf 0e ce 4c d1 86 c7 a8 e3 29 30 73 c7 c7 43 69 Data Ascii: lRO0QA*i_?G(&&T7e,v#M0YedEEK&tE#rzl?sKN/2%O^$ltpvP[</<B)0Gy,t""NiQRFxYw6-:ggL)0sCi
2024-08-18 12:20:04 UTC	16384	IN	Data Raw: 25 e5 9f b6 a8 49 3b af b4 48 6b 0d d1 9b fd f0 4a 88 b7 91 4c 03 1c 9e 89 da 3c 82 a8 3a d2 3a 00 64 0e 19 e1 a8 7a 85 93 ca e7 f5 e8 af da 42 c6 a7 51 3e 93 bd f6 5e bd c7 5b 2d 6b 6d b5 c8 54 1b 82 cd 50 bb 3b 48 a1 46 e7 8a ab ed 15 ff aa db d0 5f f3 f1 ec a4 5d 67 cb f2 d6 1f ad a4 12 7b 05 96 ba 16 d9 38 d9 b5 45 4c c5 8e 56 8d 74 0b 89 6f b0 2e a5 3a 1e 30 b8 ad 62 de 32 e3 e8 c4 6f 1d 44 f5 83 be 54 a1 75 19 eb 59 af 59 b0 1c e9 4c 9b 3a 57 e6 a4 a1 5b 6a 3f 0d 38 09 6d 83 55 6c 98 15 65 81 74 fc a6 81 be f5 cf 55 5a 24 13 8e 74 d0 17 ae 7d e5 b9 c7 a6 58 6b 5a 92 1e bd 00 e7 7c fe 3d 86 53 b1 a3 4c ee ce 89 c4 d8 58 37 48 16 16 f2 1f 24 ae f3 a1 24 ba a2 be e0 0f a6 2b f0 f9 83 27 af 9e 29 c2 85 3c 51 20 78 a0 f0 20 8d 55 d3 b2 d9 35 93 64 5a 87 Data Ascii: %I;HkJL<::dzBQ>^[-kmTP;HF_]g{8ELVto.:0b2oDTuYYL:W[j?8mUletUZ$t}XkZ\|=SLX7H$$+')<Q x U5dZ
2024-08-18 12:20:04 UTC	1362	IN	Data Raw: eb ba 36 d6 51 fe b6 11 f3 04 02 99 36 83 26 94 67 8b 1a 14 12 c5 eb f1 08 86 c3 a9 8f c1 08 12 62 fe e1 c4 20 a1 1c 62 4c 0b 33 cf a7 b6 59 e3 77 42 93 d7 ec ee 51 c2 31 46 fd bd 75 95 de 57 6e 80 5b c4 81 02 47 76 fd 7e c1 de 4f c6 05 a0 2f e6 55 8b 64 96 89 60 92 a2 4d f9 e2 4a 99 07 56 0b 86 fb f4 82 d4 76 08 89 95 43 88 b8 e4 12 37 26 68 5a 6c 93 f1 d9 89 d7 6b ba dd be af e9 ca c1 ed ad 1b f5 1c e5 dd 7b 00 de e3 be 38 38 40 9b 83 c3 8b 08 a3 a3 bc d6 c5 80 7e 80 84 a5 2a 47 1d 9c 47 0f c2 b7 ee 5a 86 28 e8 5d 77 66 c2 02 93 12 49 0f ca 66 a3 46 ee 09 9d 3b 07 75 57 9e b8 92 61 42 39 b9 73 62 d2 f0 66 34 4f 8b b2 e2 d8 ae 71 36 f6 c0 7b c6 a2 8e 07 51 b9 7f df 59 2e b3 69 b6 4c f2 c5 d9 45 3a 3b 4b ce 2e a6 17 d3 4f 97 e7 0b 6a 4b be 4c 3f a5 0e 3b Data Ascii: 6Q6&gb bL3YwBQ1FuWn[Gv~O/Ud`MJVvC7&hZlk{88@~*GGZ(]wfIfF;uWaB9sbf4Oq6{QY.iLE:;K.OjKL?;

Timestamp	Bytes transferred	Direction	Data
2024-08-18 12:20:04 UTC	1157	OUT	GET /th?id=OPN.RTNews_odHXKuV2MJFbEkJn9GHocg&rs=2&qlt=80&pid=1.11&w=154&h=77&c=7&rs=2 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=33E577E4B44B65A73DE1633BB58264E9; _EDGE_S=F=1&SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5D58B7EA72274195BB7B8E52A638DC98&dmnchg=1; _SS=SID=12CC3F0AEC9C6E882CDD2BD5ED556F3A; SRCHHPGUSR=SRCHLANG=en&IG=41A39A44E3A34612A1432E62363B6EC9&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1263&SCH=1674&DPR=1.0&UTC=-240&PV=10.0.0; _clck=yhuneu%7C2%7Cfof%7C0%7C1691; _clsk=1no8lhc%7C1723983593258%7C1%7C0%7Ct.clarity.ms%2Fcollect; SRCHUSR=DOB=20240818&T=1723983583000; _C_ETH=1
2024-08-18 12:20:04 UTC	669	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 2432 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-MSEdge-Ref: Ref A: BE5B081F3236434C86C40FACB4EE75E2 Ref B: BJ1EDGE0511 Ref C: 2024-08-18T12:20:04Z Date: Sun, 18 Aug 2024 12:20:04 GMT Connection: close
2024-08-18 12:20:04 UTC	2432	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 05 05 06 05 04 07 06 05 06 08 07 07 08 0a 11 0b 0a 09 09 0a 15 0f 10 0c 11 18 15 1a 19 18 15 18 17 1b 1e 27 21 1b 1d 25 1d 17 18 22 2e 22 25 28 29 2b 2c 2b 1a 20 2f 33 2f 2a 32 27 2a 2b 2a ff db 00 43 01 07 08 08 0a 09 0a 14 0b 0b 14 2a 1c 18 1c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a ff c0 00 11 08 00 4d 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C'!%"."%()+,+ /3/2'+C**************************************************M"}!1AQa"q2