Source: 0.59.id.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: https://doclinere.info/vn/re.htm... High-risk script using multiple suspicious patterns: 1) Uses eval with obfuscated code (+3), 2) Sets suspicious cookie with encoded value (+2), 3) Contains bot/automation detection logic (+1), 4) Uses heavily encoded/escaped strings (+3). Appears to be attempting to evade detection while performing potentially malicious actions. |
Source: 0.64.i.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: https://doclinere.info/vn/re.htm... High-risk script due to multiple concerning factors: 1) Uses eval() with obfuscated code (+3), 2) Contains encoded/obfuscated content that requires decoding (+3), 3) Manipulates cookies with suspicious values (+2). The script also appears to include anti-automation checks, which combined with obfuscation suggests potential malicious intent. |
Source: 0.65.id.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: https://doclinere.info/vn/re.htm... Script performs direct location redirection (+3) to a suspicious R2.dev domain (+2). The URL pattern and domain suggest potential malicious intent (+2). The use of HTML comments to hide the redirect is a suspicious obfuscation technique. R2.dev, while a legitimate Cloudflare service, is commonly abused for malware distribution when used with random subdomains. |
Source: 0.74.i.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pub-28cbd5bc68cb4c26b93f263849a029cc.r2.de... Script demonstrates suspicious behavior: uses atob() for base64 decoding of potentially obfuscated content, extracts URL parameters in an obfuscated way, and uses meaningless variable names (rh13z8jemt, pozzy). The code appears to be intentionally obscured with irrelevant comments about meat. Parameter extraction combined with base64 decoding is often associated with malicious payload delivery. |
Source: 0.68.id.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pub-28cbd5bc68cb4c26b93f263849a029cc.r2.de... High-risk script using multiple dangerous patterns: Base64 encoding to obfuscate code, dynamic code execution via 'new Function', cryptographic operations potentially for data exfiltration, document.write for DOM manipulation, and fetch requests with encoded payloads. The code is intentionally obfuscated and uses CryptoJS, possibly for malicious encryption/decryption of data. |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.218.208.109 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.10 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.32.238.18 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.32.238.18 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.32.238.18 |
Source: unknown | TCP traffic detected without corresponding DNS query: 23.32.238.18 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.221.95 |
Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.221.95 |
Source: unknown | UDP traffic detected without corresponding DNS query: 1.1.1.1 |
Source: unknown | UDP traffic detected without corresponding DNS query: 1.1.1.1 |
Source: unknown | UDP traffic detected without corresponding DNS query: 1.1.1.1 |
Source: global traffic | HTTP traffic detected: GET /document/801519291/Advice-Notification HTTP/1.1Host: www.scribd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /options/exposed_to_client.js HTTP/1.1Host: www.scribd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/document/801519291/Advice-NotificationAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scribd_ubtc=u%3D77eabba7-56db-4263-a995-14e083c9866b%26h%3Diejk%2BJo6XzI9RrFNqEFB%2Bbr3ZZhyUFte3fWlOGmg%2B7s%3D |
Source: global traffic | HTTP traffic detected: GET /webpack/assets/fonts/source_sans_pro/regular/source_sans_pro_regular.latin.e8ecbdac.woff2 HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/assets/fonts/source_sans_pro/semibold/source_sans_pro_600.latin.76017e81.woff2 HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/monolith/105.02924deb17e63c446344.css HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /options/exposed_to_client.js HTTP/1.1Host: www.scribd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scribd_ubtc=u%3D77eabba7-56db-4263-a995-14e083c9866b%26h%3Diejk%2BJo6XzI9RrFNqEFB%2Bbr3ZZhyUFte3fWlOGmg%2B7s%3D |
Source: global traffic | HTTP traffic detected: GET /AzZdHGSGtpxCq1Cpt/4e10b135-d113-4574-a477-270ace40bba7/osano.js?language=en HTTP/1.1Host: cmp.osano.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /975ow02iyodmurb1/images/1-4596bc3e1d.jpg HTTP/1.1Host: html.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/assets/fonts/icons/icons.d2ecf18b.woff2 HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/assets/fonts/source_serif_pro/semibold/source_serif_pro_semibold.latin.f74d6620.woff2 HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/doc_page/245.799c3a.js HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/doc_page/app.d6ad9e.js HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /975ow02iyodmurb1/images/1-4596bc3e1d.jpg HTTP/1.1Host: html.scribdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com |
Source: global traffic | HTTP traffic detected: GET /AzZdHGSGtpxCq1Cpt/4e10b135-d113-4574-a477-270ace40bba7/osano.js?language=en HTTP/1.1Host: cmp.osano.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET / HTTP/1.1Host: cmp.osano.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NsFdCpOb8MEGFPx&MD=+MfZCRKU HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com |
Source: global traffic | HTTP traffic detected: GET /webpack/assets/images/shared/gr_table_reading.9f6101a1.png HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /975ow02iyodmurb1/fonts/0000.woff2 HTTP/1.1Host: html.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.scribd.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/doc_page/app.d6ad9e.js HTTP/1.1Host: s-f.scribdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/assets/images/shared/gr_table_reading.9f6101a1.png HTTP/1.1Host: s-f.scribdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /a-05td.min.js HTTP/1.1Host: b-code.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /webpack/doc_page/245.799c3a.js HTTP/1.1Host: s-f.scribdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /doc-page/recommenders/801519291?recs_veils_of_discoverability=undefined&recs_embedding_reranking_docpage=undefined&recs_explore_rerank_scribd=undefined&doc_page_pmp_boosting=control HTTP/1.1Host: www.scribd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.scribd.com/document/801519291/Advice-NotificationAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scribd_ubtc=u%3D77eabba7-56db-4263-a995-14e083c9866b%26h%3Diejk%2BJo6XzI9RrFNqEFB%2Bbr3ZZhyUFte3fWlOGmg%2B7s%3D; osano_consentmanager_uuid=89feed45-6ae7-4319-8c64-0d02839e7716; osano_consentmanager=aXQ2i6CFyu9Ya2Fk9ae1hPJ_A1-fw0x1B_hOIQoAsIBuZhlIHC_A3_sTr7tDq4esf_tDOU-z2kkOOveE3pH_Skvf1x9kVRgn24HjyyFYOyEaLiCxeSsuo281Gqknb0KvJd3JwI6kifAGRELM58SFYbf1IsKt5Liv3nGSbycLsHUSz8ldug_rVMVBEkR7rnSACz1CxtzXVmKYTd-W8WSK_GgqdST_sRn0dUGk0hult4aO24tAJGFIKOyIcutba1UepHRMjVoibRgn8V4WmdU7MJyysuJree9mUa4ufNyQGwokGlGnbB0WCkldrzJ9XCIBAytBvM_awxHImjUGPtM454ardQVFauGTgauP6U4duNCXj2nM-OOJIWwNu40f7VK5ppywZ3_ueMRbBB_qcBmQr2UHoWbNnUSZgS6RmQVdoF7MHo3SDSfez_dzy2wNVUik19LNngI4p9qmvzrib5GRXX386JangWeGRpC6hoyrF-CyA-co2ce_Bm2Rm2Hbae5zIsoXXt8_-VFpP7M17OibOKmcKV2KkYWChyOG0la1vcAis306oDJjmDJ1iOpMYBaO-1LddLBuCWpiO2zm89d1oHYE8R1bNRtp; _gcl_au=1.1.1182281480.1733522361; _fs_sample_user=false; _dd_s=rum=0&expire=1733523263684; __CJ_nwt=%7B%22nw2868%22%3A7327%7D |
Source: global traffic | HTTP traffic detected: GET /images/scribd_logo_horiz_small_slate.svg HTTP/1.1Host: s-f.scribdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /workspaces/7de87bc73aff1974945059e230fb953d/web_surveys.js HTTP/1.1Host: survey.survicate.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /wi/config/10143699.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.scribd.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.scribd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /csrf_token HTTP/1.1Host: www.scribd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scribd_ubtc=u%3D77eabba7-56db-4263-a995-14e083c9866b%26h%3Diejk%2BJo6XzI9RrFNqEFB%2Bbr3ZZhyUFte3fWlOGmg%2B7s%3D; osano_consentmanager_uuid=89feed45-6ae7-4319-8c64-0d02839e7716; osano_consentmanager=aXQ2i6CFyu9Ya2Fk9ae1hPJ_A1-fw0x1B_hOIQoAsIBuZhlIHC_A3_sTr7tDq4esf_tDOU-z2kkOOveE3pH_Skvf1x9kVRgn24HjyyFYOyEaLiCxeSsuo281Gqknb0KvJd3JwI6kifAGRELM58SFYbf1IsKt5Liv3nGSbycLsHUSz8ldug_rVMVBEkR7rnSACz1CxtzXVmKYTd-W8WSK_GgqdST_sRn0dUGk0hult4aO24tAJGFIKOyIcutba1UepHRMjVoibRgn8V4WmdU7MJyysuJree9mUa4ufNyQGwokGlGnbB0WCkldrzJ9XCIBAytBvM_awxHImjUGPtM454ardQVFauGTgauP6U4duNCXj2nM-OOJIWwNu40f7VK5ppywZ3_ueMRbBB_qcBmQr2UHoWbNnUSZgS6RmQVdoF7MHo3SDSfez_dzy2wNVUik19LNngI4p9qmvzrib5GRXX386JangWeGRpC6hoyrF-CyA-co2ce_Bm2Rm2Hbae5zIsoXXt8_-VFpP7M17OibOKmcKV2KkYWChyOG0la1vcAis306oDJjmDJ1iOpMYBaO-1LddLBuCWpiO2zm89d1oHYE8R1bNRtp; _gcl_au=1.1.1182281480.1733522361; _fs_sample_user=false; __CJ_nwt=%7B%22nw2868%22%3A7327%7D; __CJ_parchive_offer=%7B%22avail_height%22%3A984%2C%22avail_width%22%3A1280%2C%22color_depth%22%3A24%2C%22cookie_uuid%22%3A%22b23932ab-7f91-47ab-8dba-9f2882b68d4f%22%2C%22cookies_enabled%22%3Atrue%2C%22hardware_concurrency%22%3A4%2C%22height%22%3A1024%2C%22java_enabled%22%3Afalse%2C%22left%22%3A0%2C%22max_touch_points%22%3A0%2C%22orientation%22%3A%22landscape-primary%22%2C%22pixel_depth%22%3A24%2C%22platform%22%3A%22Win32%22%2C%22referrer%22%3A%22%22%2C%22time_zone%22%3A%22America%2FNew_York%22%2C%22top%22%3A0%2C%22width%22%3A1280%7D; _dd_s=rum=0&expire=1733523263684; _li_dcdm_c=.scribd.com; _scribd_session=UlVnZzY0RlR0NVF3UmNaZmRmN3ZFUENkeTRERFQ2UzlnOFB4NmxkZFo4RDMzMVdrWjdJWlZZdHhkNVZEbGx0ZG5xRFBWSnpJOGxIYkgwcjl3SHlSZG5SKzhmRG03M2MzUUFBdEVNZ3RNbkpkcGdRMFgzSHQzcU1RUGtQZldweUtZOEt5OW1OWS9TNnlFSlliWkdBUWF4V1dVUytsWFdSaHdjSURhaEQ0d3NVL3RTTUNyK0JhZU1ZSE40R2xQa0h2cUxwaExacDd1eWovR09ZV2dsd3kwZEtzWmFld1Q4eW9qc0tSM3pWNmxHdzk5ZHRWZFVqdGloZEdDRjIxVGx2TXpHU25PbGhKRURKUDg4ank2ckxiT3BDTUdIM0U1MHFwOUV4UHJSSkVzbFdQdStyMGgxQzQyTXpkUU9QSWhrcFQtLVVvYklTUjZmYWJqSThGbzdVUlRTN2c9PQ%3D%3D--a57245b927d8f6e851d3853f71018b5eeaa4013c |
Source: global traffic | HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /images/scribd_logo_horiz_small_slate.svg HTTP/1.1Host: s-f.scribdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /a-05td.min.js HTTP/1.1Host: b-code.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
Source: global traffic | HTTP traffic detected: GET /log/dd HTTP/1.1Host: wa.scribd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scribd_ubtc=u%3D77eabba7-56db-4263-a995-14e083c9866b%26h%3Diejk%2BJo6XzI9RrFNqEFB%2Bbr3ZZhyUFte3fWlOGmg%2B7s%3D; osano_consentmanager_uuid=89feed45-6ae7-4319-8c64-0d02839e7716; osano_consentmanager=aXQ2i6CFyu9Ya2Fk9ae1hPJ_A1-fw0x1B_hOIQoAsIBuZhlIHC_A3_sTr7tDq4esf_tDOU-z2kkOOveE3pH_Skvf1x9kVRgn24HjyyFYOyEaLiCxeSsuo281Gqknb0KvJd3JwI6kifAGRELM58SFYbf1IsKt5Liv3nGSbycLsHUSz8ldug_rVMVBEkR7rnSACz1CxtzXVmKYTd-W8WSK_GgqdST_sRn0dUGk0hult4aO24tAJGFIKOyIcutba1UepHRMjVoibRgn8V4WmdU7MJyysuJree9mUa4ufNyQGwokGlGnbB0WCkldrzJ9XCIBAytBvM_awxHImjUGPtM454ardQVFauGTgauP6U4duNCXj2nM-OOJIWwNu40f7VK5ppywZ3_ueMRbBB_qcBmQr2UHoWbNnUSZgS6RmQVdoF7MHo3SDSfez_dzy2wNVUik19LNngI4p9qmvzrib5GRXX386JangWeGRpC6hoyrF-CyA-co2ce_Bm2Rm2Hbae5zIsoXXt8_-VFpP7M17OibOKmcKV2KkYWChyOG0la1vcAis306oDJjmDJ1iOpMYBaO-1LddLBuCWpiO2zm89d1oHYE8R1bNRtp; _gcl_au=1.1.1182281480.1733522361; __CJ_nwt=%7B%22nw2868%22%3A7327%7D; __CJ_parchive_offer=%7B%22avail_height%22%3A984%2C%22avail_width%22%3A1280%2C%22color_depth%22%3A24%2C%22cookie_uuid%22%3A%22b23932ab-7f91-47ab-8dba-9f2882b68d4f%22%2C%22cookies_enabled%22%3Atrue%2C%22hardware_concurrency%22%3A4%2C%22height%22%3A1024%2C%22java_enabled%22%3Afalse%2C%22left%22%3A0%2C%22max_touch_points%22%3A0%2C%22orientation%22%3A%22landscape-primary%22%2C%22pixel_depth%22%3A24%2C%22platform%22%3A%22Win32%22%2C%22referrer%22%3A%22%22%2C%22time_zone%22%3A%22America%2FNew_York%22%2C%22top%22%3A0%2C%22width%22%3A1280%7D; _li_dcdm_c=.scribd.com; _scribd_session=UlVnZzY0RlR0NVF3UmNaZmRmN3ZFUENkeTRERFQ2UzlnOFB4NmxkZFo4RDMzMVdrWjdJWlZZdHhkNVZEbGx0ZG5xRFBWSnpJOGxIYkgwcjl3SHlSZG5SKzhmRG03M2MzUUFBdEVNZ3RNbkpkcGdRMFgzSHQzcU1RUGtQZldweUtZOEt5OW1OWS9TNnlFSlliWkdBUWF4V1dVUytsWFdSaHdjSURhaEQ0d3NVL3RTTUNyK0JhZU1ZSE40R2xQa0h2cUxwaExacDd1eWovR09ZV2dsd3kwZEtzWmFld1Q4eW9qc0tSM3pWNmxHdzk5ZHRWZFVqdGloZEdDRjIxVGx2TXpHU25PbGhKRURKUDg4ank2ckxiT3BDTUdIM0U1MHFwOUV4UHJSSkVzbFdQdStyMGgxQzQyTXpkUU9QSWhrcFQtLVVvYklTUjZmYWJqSThGbzdVUlRTN2c9PQ%3D%3D--a57245b927d8f6e851d3853f71018b5eeaa4013c; _lc2_fpi=4b59e25de34b--01jeezr76nste791ys80m8qnan |
Source: global traffic | HTTP traffic detected: GET /doc-page/recommenders/801519291?recs_veils_of_discoverability=undefined&recs_embedding_reranking_docpage=undefined&recs_explore_rerank_scribd=undefined&doc_page_pmp_boosting=control HTTP/1.1Host: www.scribd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scribd_ubtc=u%3D77eabba7-56db-4263-a995-14e083c9866b%26h%3Diejk%2BJo6XzI9RrFNqEFB%2Bbr3ZZhyUFte3fWlOGmg%2B7s%3D; osano_consentmanager_uuid=89feed45-6ae7-4319-8c64-0d02839e7716; osano_consentmanager=aXQ2i6CFyu9Ya2Fk9ae1hPJ_A1-fw0x1B_hOIQoAsIBuZhlIHC_A3_sTr7tDq4esf_tDOU-z2kkOOveE3pH_Skvf1x9kVRgn24HjyyFYOyEaLiCxeSsuo281Gqknb0KvJd3JwI6kifAGRELM58SFYbf1IsKt5Liv3nGSbycLsHUSz8ldug_rVMVBEkR7rnSACz1CxtzXVmKYTd-W8WSK_GgqdST_sRn0dUGk0hult4aO24tAJGFIKOyIcutba1UepHRMjVoibRgn8V4WmdU7MJyysuJree9mUa4ufNyQGwokGlGnbB0WCkldrzJ9XCIBAytBvM_awxHImjUGPtM454ardQVFauGTgauP6U4duNCXj2nM-OOJIWwNu40f7VK5ppywZ3_ueMRbBB_qcBmQr2UHoWbNnUSZgS6RmQVdoF7MHo3SDSfez_dzy2wNVUik19LNngI4p9qmvzrib5GRXX386JangWeGRpC6hoyrF-CyA-co2ce_Bm2Rm2Hbae5zIsoXXt8_-VFpP7M17OibOKmcKV2KkYWChyOG0la1vcAis306oDJjmDJ1iOpMYBaO-1LddLBuCWpiO2zm89d1oHYE8R1bNRtp; _gcl_au=1.1.1182281480.1733522361; _fs_sample_user=false; __CJ_nwt=%7B%22nw2868%22%3A7327%7D; __CJ_parchive_offer=%7B%22avail_height%22%3A984%2C%22avail_width%22%3A1280%2C%22color_depth%22%3A24%2C%22cookie_uuid%22%3A%22b23932ab-7f91-47ab-8dba-9f2882b68d4f%22%2C%22cookies_enabled%22%3Atrue%2C%22hardware_concurrency%22%3A4%2C%22height%22%3A1024%2C%22java_enabled%22%3Afalse%2C%22left%22%3A0%2C%22max_touch_points%22%3A0%2C%22orientation%22%3A%22landscape-primary%22%2C%22pixel_depth%22%3A24%2C%22platform%22%3A%22Win32%22%2C%22referrer%22%3A%22%22%2C%22time_zone%22%3A%22America%2FNew_York%22%2C%22top%22%3A0%2C%22width%22%3A1280%7D; _li_dcdm_c=.scribd.com; _scribd_session=UlVnZzY0RlR0NVF3UmNaZmRmN3ZFUENkeTRERFQ2UzlnOFB4NmxkZFo4RDMzMVdrWjdJWlZZdHhkNVZEbGx0ZG5xRFBWSnpJOGxIYkgwcjl3SHlSZG5SKzhmRG03M2MzUUFBdEVNZ3RNbkpkcGdRMFgzSHQzcU1RUGtQZldweUtZOEt5OW1OWS9TNnlFSlliWkdBUWF4V1dVUytsWFdSaHdjSURhaEQ0d3NVL3RTTUNyK0JhZU1ZSE40R2xQa0h2cUxwaExacDd1eWovR09ZV2dsd3kwZEtzWmFld1Q4eW9qc0tSM3pWNmxHdzk5ZHRWZFVqdGloZEdDRjIxVGx2TXpHU25PbGhKRURKUDg4ank2ckxiT3BDTUdIM0U1MHFwOUV4UHJSSkVzbFdQdStyMGgxQzQyTXpkUU9QSWhrcFQtLVVvYklTUjZmYWJqSThGbzdVUlRTN2c9PQ%3D%3D--a57245b927d8f |