Edit tour

Windows Analysis Report
https://microsoft-visio.en.softonic.com/

Overview

General Information

Sample URL:	https://microsoft-visio.en.softonic.com/
Analysis ID:	1591063
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8964 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=13704 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://microsoft-visio.en.softonic.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-14T17:01:28.682795+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49848	216.239.32.181	443	TCP
2025-01-14T17:01:37.320561+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50150	47.253.61.56	443	TCP
2025-01-14T17:01:37.736409+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50184	34.1.230.247	443	TCP
2025-01-14T17:01:39.582879+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50325	34.111.113.62	443	TCP
2025-01-14T17:02:01.859069+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	51347	108.128.46.55	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	Joe Sandbox AI: Page contains button: 'Download' Source: '1.0.pages.csv'
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	Joe Sandbox AI: Page contains button: 'Download' Source: '1.1.pages.csv'
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	Joe Sandbox AI: Page contains button: 'Download' Source: '1.4.pages.csv'

AI detected suspicious Javascript

Source: 0.40.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://199ea5c655fdf4e4c85644e6b591b788.safeframe... The provided JavaScript snippet exhibits several high-risk behaviors, including the use of obfuscated URLs and potential data exfiltration. The script appears to be redirecting the user to a suspicious domain (microsoft-visio.en.softonic.com) and collecting various parameters, which could be indicative of malicious activity. While the intent is not entirely clear, the overall behavior of the script raises significant security concerns and warrants further investigation.

Source: https://get4.protectonow.com/install/?mid=d08a0d2d-d290-11ef-8516-d2ade0767875&rpclid=d08a0d2d-d290-11ef-8516-d2ade0767875&utm_source=adx_ext_download_prot_smrtsp___c8e82221&uq=v9eWLFE890lbhKB559X3eKvr-yI59HIQuLF6MYoH2JKsmgzdq8aqf99kYM-P_6sgtwoPhVAAqQsoiiQFBe0RZ-mAdn0LB0Cw1KLTbf8FlJmL8WtWCay-wjJUPzSzBEUDqbCNE1mg7l8ZBboxbeohrqBDwIBgOTGlnQunlf87ABNwELtFNb5pjxhjXx-0SMX74vcmKwodrwaQtDzp_0S5FNSOnyNv26vdCCTuBRueB03pyOBJ3MvDi_LX_P2JWgL1cS6Duwu997tXX3Cge06mLw&params=JASSPPwpXnOq_0vuz2PB9xuGScHywQQ4qIcLWkbQ7gPKXXs1hpNLnmUGw1m9hiZagx4ciHC-wVzOfMX2nmzfiqZ8ZzyGpOYeGwzn4klN3mbODhoDTOQ6WZSaLhob4SmeQU6Pj87iNSowYsML2COyz8Kyg0nlhhA6K0IDin5WOxM2Nv1GbxijfC4G3A1ooyMxyx8lftqO_yfjs3Jc4pkb8AJMHEzLo9PqFRtPaesvweXuUiow5iInOUWr9TOdR0GUC6Q_6xH5mZz-9bm8YBrQbgLN6rX65xs57JTD8R8lvaWMQ40vnCmGZxVQlqdiFJnDvVp_aRdY1liMmrNT5_mH-r6FimHeHhcx9H4UjiKWN4VbUix9b7pFe8DmZX3QhAyjV6dPxc4bUJhmyTLd8HrKEw

HTTP Parser: Total embedded SVG size: 116368

Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1

HTTP Parser: Base64 decoded: ai=BshXJWIqGZ6iXIsiyiM0P9IuOqAWy77qFRwAAABABIIvmohw4AViopfL7gwRgyZbLi8Sk_A-yAR9taWNyb3NvZnQtdmlzaW8uZW4uc29mdG9uaWMuY29tugEJZ2ZwX2ltYWdlyAEJ2gE3aHR0cHM6Ly9taWNyb3NvZnQtdmlzaW8uZW4uc29mdG9uaWMuY29tLz9leD1SQU1QLTI2MzkuMakCDsHimv81sT7AAgLgAgDqAkEvNTMwMi9kZXN...

Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	HTTP Parser: No favicon
Source: https://get4.protectonow.com/install/?mid=d08a0d2d-d290-11ef-8516-d2ade0767875&rpclid=d08a0d2d-d290-11ef-8516-d2ade0767875&utm_source=adx_ext_download_prot_smrtsp___c8e82221&uq=v9eWLFE890lbhKB559X3eKvr-yI59HIQuLF6MYoH2JKsmgzdq8aqf99kYM-P_6sgtwoPhVAAqQsoiiQFBe0RZ-mAdn0LB0Cw1KLTbf8FlJmL8WtWCay-wjJUPzSzBEUDqbCNE1mg7l8ZBboxbeohrqBDwIBgOTGlnQunlf87ABNwELtFNb5pjxhjXx-0SMX74vcmKwodrwaQtDzp_0S5FNSOnyNv26vdCCTuBRueB03pyOBJ3MvDi_LX_P2JWgL1cS6Duwu997tXX3Cge06mLw&params=JASSPPwpXnOq_0vuz2PB9xuGScHywQQ4qIcLWkbQ7gPKXXs1hpNLnmUGw1m9hiZagx4ciHC-wVzOfMX2nmzfiqZ8ZzyGpOYeGwzn4klN3mbODhoDTOQ6WZSaLhob4SmeQU6Pj87iNSowYsML2COyz8Kyg0nlhhA6K0IDin5WOxM2Nv1GbxijfC4G3A1ooyMxyx8lftqO_yfjs3Jc4pkb8AJMHEzLo9PqFRtPaesvweXuUiow5iInOUWr9TOdR0GUC6Q_6xH5mZz-9bm8YBrQbgLN6rX65xs57JTD8R8lvaWMQ40vnCmGZxVQlqdiFJnDvVp_aRdY1liMmrNT5_mH-r6FimHeHhcx9H4UjiKWN4VbUix9b7pFe8DmZX3QhAyjV6dPxc4bUJhmyTLd8HrKEw	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49742 version: TLS 1.0

Source: global traffic

TCP traffic: 192.168.2.4:52017 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 259

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49848 -> 216.239.32.181:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50184 -> 34.1.230.247:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50325 -> 34.111.113.62:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50150 -> 47.253.61.56:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:51347 -> 108.128.46.55:443

Source: unknown

HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49742 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.154
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.55.170

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: microsoft-visio.en.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ex=RAMP-2639.1 HTTP/1.1Host: microsoft-visio.en.softonic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usr_orgn=direct; _swo_vis=RAMP-2639.1; _swo_pos=298
Source: global traffic	HTTP traffic detected: GET /scripts/72c3f-0f5a1.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/b123c50c-96d0-11e6-98a2-00163ec9f5fa/3355942234/microsoft-visio-logo.png HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/23986-ee935.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/5bba3-e5711.woff2 HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /publishers/softonic.js?modern=1 HTTP/1.1Host: rv-assets.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/585ea-68c47.woff2 HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a8ff32f4-78c7-4428-825d-0badb488b68b/loader.js?target=en.softonic.com HTTP/1.1Host: sdk.privacy-center.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/b123c50c-96d0-11e6-98a2-00163ec9f5fa/3355942234/microsoft-visio-logo.png HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-cover-s,f_auto/p/b123c50c-96d0-11e6-98a2-00163ec9f5fa/1577596571/microsoft-visio-screenshot.png HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/72c3f-0f5a1.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_avatar-48/editor-profiles/dinkar-kamat/profile HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/softonic/prebid-client.js HTTP/1.1Host: rv-assets.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/23986-ee935.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/search/ads.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/n22abp4c18 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/e1d66-87b79.css HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/40150-755d3.css HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-cover-s,f_auto/p/b123c50c-96d0-11e6-98a2-00163ec9f5fa/1577596571/microsoft-visio-screenshot.png HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_avatar-48/editor-profiles/dinkar-kamat/profile HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /publishers/softonic.js?modern=1 HTTP/1.1Host: rv-assets.softonic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a8ff32f4-78c7-4428-825d-0badb488b68b/loader.js?target=en.softonic.com HTTP/1.1Host: sdk.privacy-center.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/n22abp4c18 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=4115c716fcfb4c8fa3386f3f23f52b45.20250114.20260114
Source: global traffic	HTTP traffic detected: GET /prebid/softonic/prebid-client.js HTTP/1.1Host: rv-assets.softonic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/cb75f-83e1c.woff2 HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/5bb6cf2e-96d0-11e6-a753-00163ec9f5fa/3678845012/picasa-Download-Picasa.jpg HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/bbdedd58-96bf-11e6-ab2f-00163ed833e7/2782924292/adobe-photoshop-icon.png HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/b7dd5b8a-96bf-11e6-8e97-00163ec9f5fa/1433485623/photoscape-10570914526_37f2e9e142_o.jpg HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/0ed4aefb-530c-4e36-ad05-e5afe68b1706/3533367320/camera-icon.jpg HTTP/1.1Host: images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/b94b1-2e9b4.css HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.62/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=4115c716fcfb4c8fa3386f3f23f52b45.20250114.20260114
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202501070101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/448368701978882?v=2.9.179&r=stable&domain=microsoft-visio.en.softonic.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /best-recommended-apps?appId=b123c50c-96d0-11e6-98a2-00163ec9f5fa&categoryId=photography&pageId=app&developerSlug=microsoft&platformId=windows&locale=en-US&programName=Microsoft+Visio&browserName=chrome&browserVersion=117.0.0.0&countryCode=US&deviceType=desktop&isEU=false&isCalifornia=false&region=NY&userPlatformId=windows&userPlatformVersion=10&placementId=popup&position=46 HTTP/1.1Host: microsoft-visio.en.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usr_orgn=direct; _swo_vis=RAMP-2639.1; _swo_pos=298; rv_prebid_position=2; rv_test_position=497; rv_fp_ad_session_id=6eeaff33-ffd3-4b18-960c-7086551d8442; rv_fp_pv=1; rv_rh_position=0.09; rv_google_ppid=ecdb9ef1-e17e-4bf3-b460-7e850348cbb6
Source: global traffic	HTTP traffic detected: GET /sdk/687db2b129cc2ae4234462cde75e53d4bc51af5c/modern/sdk.687db2b129cc2ae4234462cde75e53d4bc51af5c.js HTTP/1.1Host: sdk.privacy-center.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/search/ads.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5633429348548608&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/chunk6-1fb966.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/softonic/opera/Opera_trans.png HTTP/1.1Host: di-images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/26115935 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=4115c716fcfb4c8fa3386f3f23f52b45.20250114.20260114
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/templates/opera-norway-as/opera/opera-feature-a HTTP/1.1Host: di-images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0013300001kQj1aAAC&gdpr=0&src=pbjs&ver=8.39.0&coppa=0 HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=3177&u=https%3A%2F%2Fmicrosoft-visio.en.softonic.com HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/templates/opera-norway-as/opera/opera-feature-b HTTP/1.1Host: di-images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/templates/opera-norway-as/opera/opera-feature-c HTTP/1.1Host: di-images.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif HTTP/1.1Host: bt.dns-finder.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3177&u=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&pid=mHT8wb5UFoP7a&cb=0&ws=1280x907&v=24.1212.711&t=1000&slots=%5B%7B%22sd%22%3A%22top-mpu-1__ad%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%2C%22300x180%22%2C%22300x150%22%2C%22250x250%22%2C%22200x200%22%2C%22180x150%22%2C%22160x600%22%2C%22120x600%22%5D%2C%22sn%22%3A%22%2F5302%2Fdesktop%2Fdesktop-Web-en%2FApps%2FProgrampage%2FATF_MPU_First%22%7D%2C%7B%22sd%22%3A%22top-leaderboard-1__ad%22%2C%22s%22%3A%5B%221x1%22%2C%22970x250%22%2C%22970x90%22%2C%22960x90%22%2C%22950x90%22%2C%22728x90%22%2C%22500x90%22%2C%22468x90%22%2C%22468x60%22%5D%2C%22sn%22%3A%22%2F5302%2Fdesktop%2Fdesktop-Web-en%2FApps%2FProgrampage%2FATF_Leaderboard_First%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&sm=e4d9352e-ffac-48ba-953e-029c8dfb3a23&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.5224749604754737 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?gdpr_applies=false&c=17748 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1817022305882925&correlator=3927614938878763&eid=31088845%2C31085777%2C83321072%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&trt=2&iu_parts=5302%2Cdesktop%2Cdesktop-Web-en%2CApps%2CProgrampage%2CATF_OOP_Interstitial&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&fsapi=1&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1736870486737&lmt=1736870486&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&url=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYyMWxrMYySABSAghkEhsKDDMzYWNyb3NzLmNvbRjIxbGsxjJIAFICCGQ.&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736870482239&idt=4150&prev_scp=pos%3Dtop%26countryCluster%3DA1%26td-slot%3Dgpt-interstitial%26hvi%3Dfalse%26type%3DOOP_Display_Interstitial%26rh_group%3D1%26rh_per%3D0%26rh_active%3Dfalse&cust_params=medium%3Dorganic%26campaign%3D%26source%3Dnone%26medium_campaign%3Dorganic%26medium_source%3Dorganic-none%26country%3DUS%26hosted%3Dfalse%26recat%3Dmultimedia%252Cphotography%26platformId%3Dwindows%26locale%3Den-US%26file%3Db123c50c-96d0-11e6-98a2-00163ec9f5fa%26content%3Drich%26author%3Dmicrosoft%26ab_medium%3DRAMP-2639-1_organic%26compliant%3D1%26ab%3DRAMP-2639-1%26reviewvecna%3Dfalse%26region%3DA%26devel%3D0%26ad_session_id%3D6eeaff33-ffd3-4b18-960c-7086551d8442%26pv%3D1%26ab_upr%3D9%26personalized%3D1&adks=600548030&frm=20&eoidce=1&td=1&egid=37620 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://microsoft-visio.en.softonic.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wct.js?type=session HTTP/1.1Host: wct.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rv_prebid_position=2; rv_test_position=497; rv_fp_ad_session_id=6eeaff33-ffd3-4b18-960c-7086551d8442; rv_fp_pv=1; rv_rh_position=0.09; rv_google_ppid=ecdb9ef1-e17e-4bf3-b460-7e850348cbb6; session.pv=1; persistent.fpmUserId=74bfbdce-3f3f-4ad1-bff5-b85b5bf0b15a; session.fpmSessionId=6cbccd48-f075-494a-82ee-f026798b6e66; _gcl_au=1.1.1177779158.1736870485; _uetsid=cea01ce0d29011ef9d48cd33f559269b; _uetvid=cea030c0d29011ef8798b5849c742d93; _clck=sp2jro%7C2%7Cfsk%7C0%7C1840; __gsas=ID=ca29258f2c8b1aff:T=1736870487:RT=1736870487:S=ALNI_MafGKSYBtcx0e-ppXCsQjyzfLJvuA; AMP_TOKEN=%24RETRIEVING
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1817022305882925&correlator=502248896471337&eid=31088845%2C31085777%2C83321072%2C31089253&output=ldjh&gdfp_req=1&vrg=202501070101&ptt=17&impl=fifs&gdpr=0&trt=2&iu_parts=5302%2Cdesktop%2Cdesktop-Web-en%2CApps%2CProgrampage%2CATF_MPU_First%2CATF_Notificationbar%2CATF_Leaderboard_First&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7&prev_iu_szs=300x600%7C300x250%7C300x180%7C300x150%7C250x250%7C200x200%7C180x150%7C160x600%7C120x600%2C320x50%2C1x1%7C970x250%7C970x90%7C960x90%7C950x90%7C728x90%7C500x90%7C468x90%7C468x60&fluid=0%2Cheight%2C0&ifi=2&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1736870486748&lmt=1736870486&adxs=939%2C0%2C147&adys=424%2C0%2C258&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C0%7C0&ucis=2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-300&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&url=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&vis=1&psz=300x0%7C1263x0%7C970x0&msz=300x0%7C1263x0%7C970x0&fws=512%2C4%2C4&ohw=0%2C1263%2C970&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYyMWxrMYySABSAghkEhsKDDMzYWNyb3NzLmNvbRjIxbGsxjJIAFICCGQ.&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1736870482239&idt=4150&prev_scp=pos%3Dtop%26countryCluster%3DA1%26td-slot%3Dtop-mpu-1%26hvi%3Dfalse%26type%3Dtop_display_mpu%26afcSlotId%3D2833355604%26rh_group%3D1%26rh_per%3D0%26rh_active%3Dfalse%7Cpos%3Dtop%26countryCluster%3DA1%26td-slot%3Dnative-notificationbar%26hvi%3Dfalse%26type%3Dnative_notificationbar%26devicePlatformId%3Dwindows%26rh_group%3D1%26rh_per%3D0%26rh_active%3Dfalse%7Cpos%3Dtop%26countryCluster%3DA1%26td-slot%3Dtop-leaderboard-1%26hvi%3Dfalse%26type%3Dtop_display_leaderboard%26rh_group%3D1%26rh_per%3D0%26rh_active%3Dfalse&cust_params=medium%3Dorganic%26campaign%3D%26source%3Dnone%26medium_campaign%3Dorganic%26medium_source%3Dorganic-none%26country%3DUS%26hosted%3Dfalse%26recat%3Dmultimedia%252Cphotography%26platformId%3Dwindows%26locale%3Den-US%26file%3Db123c50c-96d0-11e6-98a2-00163ec9f5fa%26content%3Drich%26author%3Dmicrosoft%26ab_medium%3DRAMP-2639-1_organic%26compliant%3D1%26ab%3DRAMP-2639-1%26reviewvecna%3Dfalse%26region%3DA%26devel%3D0%26ad_session_id%3D6eeaff33-ffd3-4b18-960c-7086551d8442%26pv%3D1%26ab_upr%3D9%26personalized%3D1&adks=1913829646%2C3361850746%2C3361797518&frm=20&eoidce=1&td=1&egid=37620 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://microsoft-visio.en.softonic.comX-Client-Data: CKq1y
Source: global traffic	HTTP traffic detected: GET /td/rul/631321069?random=1736870486877&cv=11&fst=1736870486877&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be51d0za200zb6335967&gcd=13t3t3t3t5l1&dma=0&tcfd=1000g&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&hn=www.googleadservices.com&frm=0&tiba=Microsoft%20Visio%20-%20Download&npa=0&us_privacy=1---&pscdl=noapi&auid=1177779158.1736870485&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/3177 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0013300001kQj1aAAC&gdpr=0&src=pbjs&ver=8.39.0&coppa=0&b=1&tp=RnzF%2FThyHgeWnc%2FkaSjQYEzvht57NvhSpqbB7KjXJ0w%3D HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-R5K71YRXMV&gacid=1462287897.1736870487&gtm=45je51d0v877889940z86335967za200zb6335967&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1835569765 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/5bb6cf2e-96d0-11e6-a753-00163ec9f5fa/3678845012/picasa-Download-Picasa.jpg HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/bbdedd58-96bf-11e6-ab2f-00163ed833e7/2782924292/adobe-photoshop-icon.png HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202501070101/pubads_impl_page_level_ads.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/b7dd5b8a-96bf-11e6-8e97-00163ec9f5fa/1433485623/photoscape-10570914526_37f2e9e142_o.jpg HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/t_app-icon-s/p/0ed4aefb-530c-4e36-ad05-e5afe68b1706/3533367320/camera-icon.jpg HTTP/1.1Host: images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16589/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/631321069/?random=1736870486877&cv=11&fst=1736870486877&bg=ffffff&guid=ON&async=1&gtm=45be51d0za200zb6335967&gcd=13t3t3t3t5l1&dma=0&tcfd=1000g&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&hn=www.googleadservices.com&frm=0&tiba=Microsoft%20Visio%20-%20Download&npa=0&us_privacy=1---&pscdl=noapi&auid=1177779158.1736870485&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=6W7G35Y37M-sN9tGwIe3-94658c60da&w=5299385968099328&o=5633429348548608&cv=2.1.69&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&sid=VLb6SUwCR-nMewDt5brW-94658c60da&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-onetag_pm-db5_rbd_smrt_sovrn_3lift HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country?o=5633429348548608 HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script/rlink.js?o=5633429348548608&bt_env=prod HTTP/1.1Host: cdn.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsoft-visio.en.softonic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0013300001kQj1aAAC&src=esp&ver=1.14.0&us_privacy=1--- HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /svg/more_vert.svg?c=%2370757A HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/left_chevron_icon.svg?c=%23757575 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/session?data=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 HTTP/1.1Host: wct.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/chunk0-3bc558.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/chunk1-dd5ca8.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-onetag_pm-db5_rbd_smrt_sovrn_3lift&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4\|t
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=COyoJWIqGZ9j0I8iyiM0P9IuOqAW9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTgxMzI4NDQ5NDk0MjE5MzbIAQngAgCoAwHIAwKqBMECT9BMfBljVK_50lSTBPxhG-RjamJLkkheh_igmGhRSywlD5hi_WvFSG_URXxwn1Cy9KBy4uWRkD94WOFlGvX38rV8CTc6dO0BbeUv3OsnyLiqjH0K3XkEmZpk-hPYsv-CxtCmPzx645q7bIEOoqr3glG5GMVNuI2nRijr_dRaRrGNYz8KuSathTpy0DZAlvkBqjNFULgBJPbKFfXWLiAeEcR0TqQJLC2Hh3IFlaqPncgG8V0uNkqECem6mJPObVVBxs5cN1KK5jyNvFWH8FOjpz7ye6Ewe5xgVWGtMCUOCcR7-KIexF2W_UGq7Gm5DG43haDHJdO8LdCk04pPtIiWSFy4P7lmBQ1dNAOcR5AhZDFba1iJRAU91Wr-PCr9L1D6pWKo3zCUbk2xFP6w1Muli0FqYT7-RW-u64q1gTgAZidj4AQBgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOli6v_bjyvWKA4AKA_oLAggBgAwB4g0TCKmj9-PK9YoDFUgZogMd9IUDVeoNEwigpfjjyvWKAxVIGaIDHfSFA1XQFQGAFwGyFx4KGhIUcHViLTgxMzI4NDQ5NDk0MjE5MzYYk9gOGAw&sigh=uw4CMfOp3yc&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7d3dIpqApM0tIyAkwr2yFlIEIsvxGDgI1tLbVYYmGwarCuHwz_4Cw98cp6bruyPBcJnDFn7BkAzALU1qyf0xtByAPAcUCCXCOMoBgB HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET //log/error?p=pixel&v=2.9.179&e=Error%3A%20Removed%20parameters%20from%20custom%20data%20due%20to%20potential%20violations.%20Go%20to%20Events%20Manager%20to%20learn%20more.&s=Error%3A%20Removed%20parameters%20from%20custom%20data%20due%20to%20potential%20violations.%20Go%20to%20Events%20Manager%20to%20learn%20more.%0A%20%20%20%20at%20Object.E%20%5Bas%20logUserError%5D%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A134%3A5094)%0A%20%20%20%20at%20Object.%3Canonymous%3E%20(https%3A%2F%2Fconnect.facebook.net%2Fsignals%2Fconfig%2F448368701978882%3Fv%3D2.9.179%26r%3Dstable%26domain%3Dmicrosoft-visio.en.softonic.com%26hme%3Db8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce%26ex_m%3D70%252C122%252C107%252C111%252C61%252C4%252C100%252C69%252C16%252C97%252C89%252C51%252C54%252C173%252C176%252C188%252C184%252C185%252C187%252C29%252C101%252C53%252C77%252C186%252C168%252C171%252C181%252C182%252C189%252C132%252C41%252C191%252C192%252C34%252C144%252C15%252C50%252C197%252C196%252C134%252C18%252C40%252C1%252C43%252C65%252C66%252C67%252C71%252C93%252C17%252C14%252C96%252C92%252C91%252C108%252C52%252C110%252C39%252C109%252C30%252C94%252C26%252C169%252C172%252C141%252C86%252C56%252C84%252C33%252C73%252C0%252C95%252C32%252C28%252C82%252C83%252C88%252C47%252C46%252C87%252C37%252C11%252C12%252C13%252C6%252C7%252C25%252C22%252C23%252C57%252C62%252C64%252C75%252C102%252C27%252C76%252C9%252C8%252C80%252C48%252C21%252C104%252C103%252C105%252C98%252C10%252C20%252C3%252C38%252C74%252C19%252C5%252C90%252C81%252C44%252C35%252C85%252C2%252C36%252C63%252C42%252C106%252C45%252C79%252C68%252C112%252C60%252C59%252C31%252C99%252C58%252C55%252C49%252C78%252C72%252C24%252C113%3A75%3A1334)%0A%20%20%20%20at%20https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A34%3A769%0A%20%20%20%20at%20v%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A240%3A1773)%0A%20%20%20%20at%20a.value%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A34%3A643)%0A%20%20%20%20at%20za%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A313%3A11471)%0A%20%20%20%20at%20Function.sa%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A313%3A8885)%0A%20%20%20%20at%20Function.ra%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A313%3A8657)%0A%20%20%20%20at%20Function.Z%20%5Bas%20callMethod%5D%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A313%3A2651)%0A%20%20%20%20at%20Aa%20(https%3A%2F%2Fconnect.facebook.net%2Fen_US%2Ffbevents.js%3A313%3A11867)&ue=1&rs=stable&rqm=FGET HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-F
Source: global traffic	HTTP traffic detected: GET /tr/?id=448368701978882&ev=PageView&dl=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&rl=&if=false&ts=1736870487033&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4126&fbp=fb.1.1736870487031.244389979589788213&cs_est=true&ler=empty&cdl=API_unavailable&it=1736870484907&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=448368701978882&ev=PageView&dl=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&rl=&if=false&ts=1736870487033&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4126&fbp=fb.1.1736870487031.244389979589788213&cs_est=true&ler=empty&cdl=API_unavailable&it=1736870484907&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=448368701978882&ev=ViewContent&dl=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&rl=&if=false&ts=1736870487039&cd[content_type]=App&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4126&fbp=fb.1.1736870487031.244389979589788213&ler=empty&cdl=API_unavailable&it=1736870484907&coo=false&rp=65ea0f29b7d62709eafaa8f6640b2cd99bcf6d040f8506aac596ccece081147d&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=448368701978882&ev=ViewContent&dl=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&rl=&if=false&ts=1736870487039&cd[content_type]=App&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4126&fbp=fb.1.1736870487031.244389979589788213&ler=empty&cdl=API_unavailable&it=1736870484907&coo=false&rp=65ea0f29b7d62709eafaa8f6640b2cd99bcf6d040f8506aac596ccece081147d&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/chunk4-8baadb.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websiteconfig?bt_env=prod&o=5633429348548608&w=microsoft-visio.en.softonic.com&l=EN HTTP/1.1Host: api.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /scripts/chunk18-dbd347.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5633429348548608&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/right_chevron_icon.svg?c=%23757575 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/448368701978882?v=2.9.179&r=stable&domain=microsoft-visio.en.softonic.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/softonic/opera/Opera_trans.png HTTP/1.1Host: di-images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /best-recommended-apps?appId=b123c50c-96d0-11e6-98a2-00163ec9f5fa&categoryId=photography&pageId=app&developerSlug=microsoft&platformId=windows&locale=en-US&programName=Microsoft+Visio&browserName=chrome&browserVersion=117.0.0.0&countryCode=US&deviceType=desktop&isEU=false&isCalifornia=false&region=NY&userPlatformId=windows&userPlatformVersion=10&placementId=popup&position=46 HTTP/1.1Host: microsoft-visio.en.softonic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usr_orgn=direct; _swo_vis=RAMP-2639.1; _swo_pos=298; rv_prebid_position=2; rv_test_position=497; rv_fp_ad_session_id=6eeaff33-ffd3-4b18-960c-7086551d8442; rv_fp_pv=1; rv_rh_position=0.09; rv_google_ppid=ecdb9ef1-e17e-4bf3-b460-7e850348cbb6; session.pv=1; persistent.fpmUserId=74bfbdce-3f3f-4ad1-bff5-b85b5bf0b15a; session.fpmSessionId=6cbccd48-f075-494a-82ee-f026798b6e66; gtm_session_start=1736870485147; _gcl_au=1.1.1177779158.1736870485; _uetsid=cea01ce0d29011ef9d48cd33f559269b; _uetvid=cea030c0d29011ef8798b5849c742d93; _clck=sp2jro%7C2%7Cfsk%7C0%7C1840; __gsas=ID=ca29258f2c8b1aff:T=1736870487:RT=1736870487:S=ALNI_MafGKSYBtcx0e-ppXCsQjyzfLJvuA; _fbp=fb.1.1736870487031.244389979589788213; _clsk=b16f9%7C1736870487051%7C1%7C0%7Cz.clarity.ms%2Fcollect; _ga_R5K71YRXMV=GS1.1.1736870487.1.0.1736870487.60.0.0; _adbs=JTdCJTIyaW5zdGFsbGVkJTIyJTNBZmFsc2UlMkMlMjJhY3RpdmUlMjIlM0FmYWxzZSUyQyUyMmxhc3RTdGF0ZSUyMiUzQWZhbHNlJTdE; panoramaId_expiry=1737475288450; _cc_id=e2384b2e484aea8bbda3f3763ec93a08; panoramaId=f12134443c665d08de78ec793d9316d53938751b3fec53dcd3ef9cafb83e45ca; AMP_TOKEN=%24NOT_FOUND; _ga=GA1.2.1462287897.1736870487; _gid=GA1.2.1546400747.1736870488; _dc_gtm_UA-152357-1=1; _ga=GA1.4.1462287897.1736870487; _gid=GA1.4.1546400747.1736870488; __gads=ID=79f6fc30f99b0468:T=1736870488:RT=1736870488:S=ALNI_MbngNAcA0dCGooc8ZgvizomjlobOQ; __gpi=UID=00000fb92fe0849f:T=1736870488:RT=1736870488:S=ALNI_Mb14RKHGPLUQgStQLGUBgn4nC28gg; __eoi=ID=6141d4946900ce6e:T=1736870488:RT=1736870488:S=AA-AfjaEYhDowhz0zrtQhIFYvytD
Source: global traffic	HTTP traffic detected: GET /scripts/chunk6-1fb966.mjs HTTP/1.1Host: sc.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wct.js?type=auto-tagging HTTP/1.1Host: wct.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rv_prebid_position=2; rv_test_position=497; rv_fp_ad_session_id=6eeaff33-ffd3-4b18-960c-7086551d8442; rv_fp_pv=1; rv_rh_position=0.09; rv_google_ppid=ecdb9ef1-e17e-4bf3-b460-7e850348cbb6; session.pv=1; persistent.fpmUserId=74bfbdce-3f3f-4ad1-bff5-b85b5bf0b15a; session.fpmSessionId=6cbccd48-f075-494a-82ee-f026798b6e66; _gcl_au=1.1.1177779158.1736870485; _uetsid=cea01ce0d29011ef9d48cd33f559269b; _uetvid=cea030c0d29011ef8798b5849c742d93; _clck=sp2jro%7C2%7Cfsk%7C0%7C1840; __gsas=ID=ca29258f2c8b1aff:T=1736870487:RT=1736870487:S=ALNI_MafGKSYBtcx0e-ppXCsQjyzfLJvuA; _fbp=fb.1.1736870487031.244389979589788213; _clsk=b16f9%7C1736870487051%7C1%7C0%7Cz.clarity.ms%2Fcollect; _ga_R5K71YRXMV=GS1.1.1736870487.1.0.1736870487.60.0.0; _adbs=JTdCJTIyaW5zdGFsbGVkJTIyJTNBZmFsc2UlMkMlMjJhY3RpdmUlMjIlM0FmYWxzZSUyQyUyMmxhc3RTdGF0ZSUyMiUzQWZhbHNlJTdE; panoramaId_expiry=1737475288450; _cc_id=e2384b2e484aea8bbda3f3763ec93a08; panoramaId=f12134443c665d08de78ec793d9316d53938751b3fec53dcd3ef9cafb83e45ca; AMP_TOKEN=%24NOT_FOUND; _ga=GA1.2.1462287897.1736870487; _gid=GA1.2.1546400747.1736870488; _dc_gtm_UA-152357-1=1; __gads=ID=79f6fc30f99b0468:T=1736870488:RT=1736870488:S=ALNI_MbngNAcA0dCGooc8ZgvizomjlobOQ; __gpi=UID=00000fb92fe0849f:T=1736870488:RT=1736870488:S=ALNI_Mb14RKHGPLUQgStQLGUBgn4nC28gg; __eoi=ID=6141d4946900ce6e:T=1736870488:RT=1736870488:S=AA-AfjaEYhDowhz0zrtQhIFYvytD; _wctrck=1736870487921.0Ni2mJl3mtnVKMCHzwytbcmUaJlW4YnXeZlL12BYH2qGKYBRnwzhbszRLgBGWctnrfslHci2mJl3mtnVqxAljwzxvgBWbxqGKcn2Ghi7qJnUL2vGSdmUatmGqLtGm3DVrMBPDfkGaJl18sySXwA69wtIOJiHvNiSismYKZn4qdm3GJnZCtmIOJiKL2CIWIi3GdnWCdo2mZnX4Yn5GZn4iJm2qtmIOJiKL2yNjYE
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/templates/opera-norway-as/opera/opera-feature-a HTTP/1.1Host: di-images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202501070101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /s/0.7.62/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=4115c716fcfb4c8fa3386f3f23f52b45.20250114.20260114
Source: global traffic	HTTP traffic detected: GET /images/afs/sr-star-on.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4\|t
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-127e2d55.css HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=microsoft-visio.en.softonic.com&gid=&im=JASSPPwpXnOq_0vuz2PB9xuGScHywQQ4qIcLWkbQ7gPKXXs1hpNLnmUGw1m9hiZagx4ciHC-wVzOfMX2nmzfiqZ8ZzyGpOYeGwzn4klN3mbODhoDTOQ6WZSaLhob4SmeQU6Pj87iNSowYsML2COyz8Kyg0nlhhA6K0IDin5WOxM2Nv1GbxijfC4G3A1ooyMxyx8lftqO_yfjs3Jc4pkb8AJMHEzLo9PqFRtPaesvweXuUiow5iInOUWr9TOdR0GUC6Q_6xH5mZz-9bm8YBrQbgLN6rX65xs57JTD8R8lvaWMQ40vnCmGZxVQlqdiFJnDvVp_aRdY1liMmrNT5_mH-r6FimHeHhcx9H4UjiKWN4VbUix9b7pFe8DmZX3QhAyjV6dPxc4bUJhmyTLd8HrKEw&p=Z4aKWAAI-lgDohlIAAOF9G-9GVYStrUQfA2EJA&sid=d08a0d2d-d290-11ef-8516-d2ade0767875 HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=d08a0d2d-d290-11ef-8516-d2ade0767875&params=JASSPPwpXnOq_0vuz2PB9xuGScHywQQ4qIcLWkbQ7gPKXXs1hpNLnmUGw1m9hiZagx4ciHC-wVzOfMX2nmzfiqZ8ZzyGpOYeGwzn4klN3mbODhoDTOQ6WZSaLhob4SmeQU6Pj87iNSowYsML2COyz8Kyg0nlhhA6K0IDin5WOxM2Nv1GbxijfC4G3A1ooyMxyx8lftqO_yfjs3Jc4pkb8AJMHEzLo9PqFRtPaesvweXuUiow5iInOUWr9TOdR0GUC6Q_6xH5mZz-9bm8YBrQbgLN6rX65xs57JTD8R8lvaWMQ40vnCmGZxVQlqdiFJnDvVp_aRdY1liMmrNT5_mH-r6FimHeHhcx9H4UjiKWN4VbUix9b7pFe8DmZX3QhAyjV6dPxc4bUJhmyTLd8HrKEw HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1.0/id5-api.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=d08e068e-d290-11ef-b10b-7e892647f4b2&params=t45d0ZBmgGk2qhkp8NHP1CUJmQngvLflcW8PexS-uoeIsuAr9xNHZMXPNAPLVE07zTJZptQCLwR3HlYaBvkfWePm3aEoz4rO6O-gCj8IrSNoErhSyV8WFNtoUmfV2jWR2M4CQ-QS-F1adaq9xt-xbdR-3n7NwtUUKH-syG9BYTZRpY_b7B-MGn0CNzeM28AbE2EQh36RQeemsMOwbLjdQQBMjKMBs0vXCqErb6HS61QPxnBYJHDFeTU2WMRuQFqsue4M9VPY7pmoxtlnfLlt1wD4KmMFi64GSe5e3azr8FOF3_P8W4Fi3t45xuPvQrhIsbpGG5n7wftJhF2w0p6kkyz0zkvX1EGEJDI-XJVAr9x0uM2rrWg3ZJ0Vhe-EmEgnbMkg1Mjnc5YYww2ph-leNQ HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websiteconfig?bt_env=prod&o=5633429348548608&w=en.softonic.com&l=EN HTTP/1.1Host: api.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/687db2b129cc2ae4234462cde75e53d4bc51af5c/modern/sdk.687db2b129cc2ae4234462cde75e53d4bc51af5c.js HTTP/1.1Host: sdk.privacy-center.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/631321069/?random=1736870486877&cv=11&fst=1736870400000&bg=ffffff&guid=ON&async=1&gtm=45be51d0za200zb6335967&gcd=13t3t3t3t5l1&dma=0&tcfd=1000g&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmicrosoft-visio.en.softonic.com%2F%3Fex%3DRAMP-2639.1&hn=www.googleadservices.com&frm=0&tiba=Microsoft%20Visio%20-%20Download&npa=0&us_privacy=1---&pscdl=noapi&auid=1177779158.1736870485&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7d_jhoLYhN2ors7fpw4EQpfIyEyw3FyA&random=673251559&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/v3/pr?exlist=gg_n-index_n-onetag_pm-db5_rbd_smrt_sovrn_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-onetag_pm-db5_rbd_smrt_sovrn_3lift&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /tag/uet/26115935 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=4115c716fcfb4c8fa3386f3f23f52b45.20250114.20260114
Source: global traffic	HTTP traffic detected: GET /err/?ec=6&ev=1000&pla=0Zj2kxl3u3&int=PREBID&pltfm=&node=&dm=microsoft-visio.en.softonic.com HTTP/1.1Host: s.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0013300001kQj1aAAC&src=aps&ver=1.14.0&us_privacy=1--- HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstDM4aaEuo1rE5CjRedB_v7VjGVVitZSqb2XNH8YMNO1NGYCE1MlgB78yU6oCmmc9qXeoe3n8n_BHSO4J-iCFde3HCZziNdCEvirpgV5Hw1x_QNpH8h4mBmUoUpdWP4Tsfn7Y41pYJlMO3QNW5_01X3MHoL6I6f3_fvT4EYdoaHOdT_zlDsaFUeYSHxZnQtxPpMOXiJ2h998UmA1b7d7EMJXBKeFN1OJXOK4qE2rqt5nSxr-gD2wAlU4ASMEDH-vi141ABYELAYcekcktuPI1PHt0RbnM18xn5V1oSs9zEFNQ71uAGlH2PHvFXNvljjlwv7k2tB1264zCeHzpLOyNEhvYsL8yeIDM4sCJFaS0lUerpwEyoydgivrQtfbmRn9XD-E3yOt-GOgylkWAuK6jtVYrcc-6w-dZb0tdOah25AbdmOqla5pIfy8bOPnqS6vIN0T5i9HNkT72hRb8qrlYe8XURarTC2htSFFxKsuVgSbOelRtb2TITS4oUznlV2&sai=AMfl-YRBoJrGNr1lVa-tyumaQV2FlQfDhyDDtdCgs1HAwILQSbs2A_xHLeNjNbhLMQ9C7C_TULqoszNftFnYEVnmda1Y4SOZlwy6OSxlmJ34P-p_19UgZ8MeN-4I_8P5K46WMgYRyOi90GVDyQtjRQ2t&sig=Cg0ArKJSzHP8SwrzGf_rEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvDw05Mq4Jncv4NHNPuehuVNnIha3AFbvMpC6tbE79iBFQxTsckL7uBLEPDNNlPiHryGjKgDop_bll_xIaxhbV44u42M_KWc8z4g93xJkZlKM3pPpjYYUnL8SDa8ydcrT7Uoe_quG8_YI-SKTLVpEMslsvlmyuLU7DDlaCBmm2c8e0ZeTi817Qf-Nb3_wblVrunBzQ-zch-otBOGNfXCfpYYbj6mh2v7Kiug0WLck4DbPGET4iuwO8EgkmjgkNT-fcS3V3wq-FejaovvcvAq1PRnnTFyoYuPsJnIRh9-eptGg3An4rBR0q5eNwD5Ygo2Y5uBsbzy-Mk7tz-SUFmIQlsYVfxbrcXMmUMoW33tsXrA3ZBfQ4mfomButgHl90y_tyOplCWSERt5bl7PUbXeh9VLkR0Q4Pq4AnJ6xHfm6fu92oLNbY9tFPNOzTPmHUJpxLwdSHt--s4AVJl7qsLe2L2MRezs8xAsjpXTWSlp23B7Nj5Rdswww&sai=AMfl-YSrsdUDmqeR70OU8uPwd8bjw3BZui8aPBWCbz9WbKMBmO3ekw443TwSfijqz6WNIxNzllZiEMcF57RGm2icaZ-VJ5IOh5dxl4MFRUUADlcsiI0BOJwusr1CSux5KH_mNU2uJN6kBEK433nP6b37&sig=Cg0ArKJSzCMYDUcLXi3hEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /websiteconfig?bt_env=prod&o=5633429348548608&w=softonic.com&l=EN HTTP/1.1Host: api.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wct.js?type=pattern&uid=s3czDT HTTP/1.1Host: wct.softonic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=softonic&output=uds_ads_only&zx=5yoz86931t7u&aqid=WIqGZ9_jIbinxdwPtO2agAk&psid=5593628202&pbt=bs&adbx=625&adby=1604.953125&adbh=222&adbw=290&adbah=50%2C50%2C50%2C50&adbn=master-2&eawp=partner-softonic&errv=712519386&csala=3%7C184%7C1336%7C1332%7C32&lle=1&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ9KO7A&prvid=2034%2C2033%2C2110%2C2030%2C590%2C273%2C233%2C2028%2C2027%2C236%2C313%2C2025%2C237%2C117%2C636%2C319%2C97%2C55%2C99%2C3012%2C3011%2C3010%2C122%2C201%2C3007%2C246%2C126%2C203%2C404%2C2011%2C2055%2C3022%2C3020%2C251%2C175%2C450%2C2009%2C331%2C178%2C255%2C3018%2C3017%2C214%2C3014%2C77%2C20000%2C38%2C182%2C261%2C141%2C460%2C462%2C222%2C301%2C345%2C225%2C468%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=f2203b41-15c8-728d-bbc1-fc7c5964f340#1736870490690#1
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=softonic&output=uds_ads_only&zx=vt1lc53y0m5s&aqid=WIqGZ_auGYPWjuwPspycqAE&psid=7097078552&pbt=bs&adbx=24&adby=1612.25&adbh=211&adbw=585&adbah=211&adbn=master-1&eawp=partner-softonic&errv=712519386&csala=26%7C56%7C1376%7C1447%7C284&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=softonic&output=uds_ads_only&zx=rfo1rrn6q1o6&aqid=WIqGZ_auGYPWjuwPspycqAE&psid=7097078552&pbt=bs&adbx=24&adby=1272.25&adbh=340&adbw=585&adbah=278%2C278%2C278%2C278%2C278%2C278%2C278%2C278&adbn=master-a-1&eawp=partner-softonic&errv=712519386&csala=5%7C77%7C1376%7C1447%7C284&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=softonic&output=uds_ads_only&zx=1bbnk0kba1sj&aqid=WIqGZ_auGYPWjuwPspycqAE&psid=7097078552&pbt=bv&adbx=24&adby=1612.25&adbh=211&adbw=585&adbah=211&adbn=master-1&eawp=partner-softonic&errv=712519386&csala=26%7C56%7C1376%7C1447%7C284&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=softonic&output=uds_ads_only&zx=199nbtpjvhrd&aqid=WIqGZ9_jIbinxdwPtO2agAk&psid=5593628202&pbt=bv&adbx=625&adby=1604.953125&adbh=222&adbw=290&adbah=50%2C50%2C50%2C50&adbn=master-2&eawp=partner-softonic&errv=712519386&csala=3%7C184%7C1336%7C1332%7C32&lle=1&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=softonic&output=uds_ads_only&zx=8o8ksk9ttsd&aqid=WIqGZ_auGYPWjuwPspycqAE&psid=7097078552&pbt=bv&adbx=24&adby=1272.25&adbh=340&adbw=585&adbah=278%2C278%2C278%2C278%2C278%2C278%2C278%2C278&adbn=master-a-1&eawp=partner-softonic&errv=712519386&csala=5%7C77%7C1376%7C1447%7C284&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcf3528a0b8aa83634892d50e91c306e/?ord=5586992632 HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/sign_pbm?w=5299385968099328&bt_env=prod HTTP/1.1Host: api.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=d213107e-d290-11ef-aa50-eabb524ca9d3; sid_cross=d08e068e-d290-11ef-b10b-7e892647f4b2
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=d213107e-d290-11ef-aa50-eabb524ca9d3; sid_cross=d08e068e-d290-11ef-b10b-7e892647f4b2
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvDaN5d1bdWhCbpYDxeFadrRYJknQbOluBEEPcwNH78JwstIXjJdhjSPyZGCKwm09HVZwa36qLs_kG1TCMCSK23tZ_ar8wRAAfSx7ENpx117rgFXoqfXrgL29CRTB-VMDOEslP1XWTZw1S_ZYkgOEnJRDiD0RwTFqQGT8fsw4h-Rhhxr8lgI5D0omnCyzj7KbPHYYDRNUoRbu2Ug_P4jZVxzEsXR85JGhR1XuBAUXR8O6TQoXxpc5DjnkUZ3irs1yl3il6AzKGJ4GKiVxX4TfHYoeNzQrIugYSzUBhQCSMz2RGDpFtCnUxT_bPflKpC6mgNDmAb6Jukd6Xt9K2QsxXNYSqNUNUC_aYvDZZAy4-NPLNVg2Zw69ro_96nX3BGqzsfUeCI7RRW0GhoBZm1Q2d2ybbupk68Azw_bUNEVjexsw6vzQkCu4tsB0F90xfoNYXaZLJficXLme_vt-AzPSYB4UCMwtFX6KFed45x9pmWk_ZW4CouclOf&sai=AMfl-YRHuc4Fe4aZeHTodIy90jbAmWcCASsIcXUUzok1GQbVme0vpntqAKVZ2asCbtDDlrihlaiYOntUw1a0BoHOn7bBqSKHLL4pvUuy0uttsKpQ26Nx12MxnGxA3ySH0-pacHnfx8Opdb_EuYIPGBwv&sig=Cg0ArKJSzAZHSECusp45EAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=d213107e-d290-11ef-aa50-eabb524ca9d3; sid_cross=d08e068e-d290-11ef-b10b-7e892647f4b2
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvXwmdiq44bZ081ysFTmk-6XXUI-0P3rHKbtLLeOL30kv4qm6c1PdjU_PAInEjIPMSNH-I_jwknihp96G936VZMFV1Jd6vkwLSmd2EkT8yQVtSe3Bm1A4B50eP9FZXZ6e6IL-rvrmowC9nCNh81Ld6-B7RvjPMJE69wHX14Fg7isJNQuRhYatqw_3wvW5kTlQIwx5r1hxGB0-rBUwXN8M-M_UBQGwwf3MSD1I0p7TQaGrINiV1Rbu7TSnLtcbiw0yJcI-yEfpVXbYNm8_CwWk58Me4Qug6PL3Wjvp9FQCfsSYzVgtwkuTrUulw2wDHW00tAzN7lcirDkF9IaiOOViFqMPWhGgLTH4lLcLnlVdivYUNWvmsSk0J52sWsWN_AMgnICtYKYfJMOn3HpQ5CnSKbcQDfKD105f6GUSBzcWtJ4V-A9dESaxrsYVUd-w0xcDuAyB4PU0zY76rIAGmS7RZUkiXw125gpB-4yWSMYUU6wQ6i&sai=AMfl-YSUUHHV7LedqchJhBRddsA4RwA6Qn-bRFdFK609wOqudfBmApCiZVwr5IyS5ui_-zOTkna3_AjaUPABdGxzBF9BBLhhTQYgY1JwZYQnS0JqqoHAat6JX2VCwtQpwDHPVMheMVlqkAG9bHgvGczG&sig=Cg0ArKJSzMdjH8_AqrJaEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=192259&cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=d213107e-d290-11ef-aa50-eabb524ca9d3; sid_cross=d08e068e-d290-11ef-b10b-7e892647f4b2
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoBold.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=2&gdpr=0 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/amzns2s?r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=19028673&p=159047&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/ayl_pixel?ayl_id=948a2f4f9c5b70d31ad859ee2dc15ce9 HTTP/1.1Host: api-2-0.spot.imConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ortb_sync?gdpr={GDPR}&consent={GDPR_CONSENT}&us_privacy={US_PRIVACY}&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DAIDEM%26ttl%3D720%26uid%3Db2f604635d0b9abde52139fc8a8034be%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: gum.aidemsrv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DOPENWEB%26ttl%3D720%26uid%3D9f93135e824096b627ff609f5cdee636%26visitor%3D%7BpartnerId%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: eu-west-1-cs-rtb.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2BOPENWEB%26ttl%3D720%26uid%3Dfc1c60cd86bc9d21889d1f9cc47ab50f%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%2B-%2BBanner%26ttl%3D720%26uid%3D75d56568a11564bfb79a01d2fa9fdb29%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505b2d944b6%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=d08e068e-d290-11ef-b10b-7e892647f4b2&d=microsoft-visio.en.softonic.com&cr=ext_download_prot_smrtsp&gid=&im=t45d0ZBmgGk2qhkp8NHP1CUJmQngvLflcW8PexS-uoeIsuAr9xNHZMXPNAPLVE07zTJZptQCLwR3HlYaBvkfWePm3aEoz4rO6O-gCj8IrSNoErhSyV8WFNtoUmfV2jWR2M4CQ-QS-F1adaq9xt-xbdR-3n7NwtUUKH-syG9BYTZRpY_b7B-MGn0CNzeM28AbE2EQh36RQeemsMOwbLjdQQBMjKMBs0vXCqErb6HS61QPxnBYJHDFeTU2WMRuQFqsue4M9VPY7pmoxtlnfLlt1wD4KmMFi64GSe5e3azr8FOF3_P8W4Fi3t45xuPvQrhIsbpGG5n7wftJhF2w0p6kkyz0zkvX1EGEJDI-XJVAr9x0uM2rrWg3ZJ0Vhe-EmEgnbMkg1Mjnc5YYww2ph-leNQ&p=Z4aKWAAJcHoCO_K4AB3co43qLy6iAbwtIcx_6w&r=1917548616&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736870493.478&cto=1944&edx=8&furl=https%3A%2F%2F199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=d213107e-d290-11ef-aa50-eabb524ca9d3; sid_cross=d08a0d2d-d290-11ef-8516-d2ade0767875
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smart.com&id=2220161779591397862&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=d08a0d2d-d290-11ef-8516-d2ade0767875&d=microsoft-visio.en.softonic.com&cr=ext_download_prot_smrtsp&gid=&im=JASSPPwpXnOq_0vuz2PB9xuGScHywQQ4qIcLWkbQ7gPKXXs1hpNLnmUGw1m9hiZagx4ciHC-wVzOfMX2nmzfiqZ8ZzyGpOYeGwzn4klN3mbODhoDTOQ6WZSaLhob4SmeQU6Pj87iNSowYsML2COyz8Kyg0nlhhA6K0IDin5WOxM2Nv1GbxijfC4G3A1ooyMxyx8lftqO_yfjs3Jc4pkb8AJMHEzLo9PqFRtPaesvweXuUiow5iInOUWr9TOdR0GUC6Q_6xH5mZz-9bm8YBrQbgLN6rX65xs57JTD8R8lvaWMQ40vnCmGZxVQlqdiFJnDvVp_aRdY1liMmrNT5_mH-r6FimHeHhcx9H4UjiKWN4VbUix9b7pFe8DmZX3QhAyjV6dPxc4bUJhmyTLd8HrKEw&p=Z4aKWAAI-lgDohlIAAOF9G-9GVYStrUQfA2EJA&r=2095106943&a=ipv4&ow=1280&oh=984&iw=970&ih=250&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736870493.55&cto=1974&edx=10&furl=https%3A%2F%2F199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://199ea5c655fdf4e4c85644e6b591b788.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=d213107e-d290-11ef-aa50-eabb524ca9d3; sid_cross=d08a0d2d-d290-11ef-8516-d2ade0767875
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_NATIVE_1_2%26ttl%3D720%26uid%3Df2d9136cf53dede7f83ba16171a37fdd%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2156636976006220502544; tluid=2156636976006220502544
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&s=2 HTTP/1.1Host: b1sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webfonts43j533.js HTTP/1.1Host: cdn.btmessage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.18443595936746937 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAEYBSgCMgsIxJi1te6v2j0QBTgB
Source: global traffic	HTTP traffic detected: GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/691/8.gif?o=api&id5id=ID5RJ-aJUBg96hjmRHKEIAvd9W3OpefaVVdX0wlpV5SCIPtsEgU8YefIMEuKEdyk9TU&gdpr_consent=undefined&gdpr=false HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=f2203b41-15c8-728d-bbc1-fc7c5964f340#1736870490690#2
Source: global traffic	HTTP traffic detected: GET /cookie-sync/aidem?buyer_user_id=7be677d6-21e8-422b-ac32-c2dab17da55f&fdest=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DAIDEM%26ttl%3D720%26uid%3Db2f604635d0b9abde52139fc8a8034be%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=3lift.com&id=2156636976006220502544 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=e_33c42140-717c-478c-b5d2-55b417259425&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=CSElKZr8coKuv1wYG-csgQEdJ508g30lBEnmBadVoz-v9zPruZdKMYSeQCfbGYDWt4WuaU6209WOJVHZRo6LbqYnDT3qyjpaMdjUS2ElHE0.; uuid2=63268115443532841
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_33c42140-717c-478c-b5d2-55b417259425&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870494
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAEYBSABKAIyCwjEmLW17q_aPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=752EF183-2EFE-4640-8487-1A2E07ED43A9 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV8zM2M0MjE0MC03MTdjLTQ3OGMtYjVkMi01NWI0MTcyNTk0MjU=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=752EF183-2EFE-4640-8487-1A2E07ED43A9&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=NzUyRUYxODMtMkVGRS00NjQwLTg0ODctMUEyRTA3RUQ0M0E5&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=dS7xgy7-RkCEhxouB-1DqQ%3D%3D&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=EmUa319lTVQ4WiUyQnVqZFJucUprU2ZvbEg0SkdhV3RvYjIwSDg1cEU1TXNJa2p5c3hHcTZsNEtGSGNic01aQXI4NEwxVXJsMTZwcTZRODE1eVdXdmhwJTJGQlM1bmlkRlVjdFhudjdXYTlzaEEzV1ZJUGMlM0Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /?partner=214&mapped=752EF183-2EFE-4640-8487-1A2E07ED43A9&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F691%2F434%2F7%2F2.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent= HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=752EF183-2EFE-4640-8487-1A2E07ED43A9&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=752EF183-2EFE-4640-8487-1A2E07ED43A9&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/aidem?buyer_user_id=7be677d6-21e8-422b-ac32-c2dab17da55f&fdest=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DAIDEM%26ttl%3D720%26uid%3Db2f604635d0b9abde52139fc8a8034be%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAEYBSABKAIyCwjEmLW17q_aPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_NATIVE_1_2%26ttl%3D720%26uid%3Df2d9136cf53dede7f83ba16171a37fdd%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&s=2 HTTP/1.1Host: b1sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=2764915e-09ac-424e-848a-69ae041aeca6
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Jk3fx57ITBkqyKGnJETk_1736870494712; ts=1736870494
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?gdpr=0&gdpr_consent=&id=5c25ba01-8014-471d-b115-9488b0bab07b&ph=bb3dfa1e-28f2-4379-aa01-73e27cdce2ee&r=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40019%26id%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f916f29b-2afe-4e6a-82ea-5c73ed5d83f2\|1736870496
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&obuid=2764915e-09ac-424e-848a-69ae041aeca6&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40025%26id%3D&gdpr=0&gdpr_consent=&s=190532 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /3ccb4268afab0c2b1373a8a8fdc5011f.gif?coppa=%5BCOPPA%5D&gdpr=0&gdpr_consent=%5BGDPR_CONSENT%5D&gpp=%5BGPP%5D&gpp_sid=%5BGPP_SID%5D&redir=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40040%26puid%3D%5BUID%5D HTTP/1.1Host: csync.copper6.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=0&gdpr_consent=&puid=e_33c42140-717c-478c-b5d2-55b417259425&s=2&us_privacy= HTTP/1.1Host: b1sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=2764915e-09ac-424e-848a-69ae041aeca6
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870494
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40028%26id%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=2156636976006220502544; tluid=2156636976006220502544
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adyoulike&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Jk3fx57ITBkqyKGnJETk_1736870494712; ts=1736870494
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=c05b2355-de57-4855-be98-dd0694efbd0a&name=THE_TRADE_DESK HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fvisitor.omnitagjs.com%252Fvisitor%252Fsync%253Fname%253DXandr%252BOPENWEB%2526ttl%253D720%2526uid%253Dfc1c60cd86bc9d21889d1f9cc47ab50f%2526visitor%253D%2524UID%2526gdpr%253D0%2526gdpr_consent%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fvisitor.omnitagjs.com%252Fvisitor%252Fsync%253Fname%253DXandr%252B%2525E2%252580%252593%252BInvest%252BDSP%252B-%252BBanner%2526ttl%253D720%2526uid%253D75d56568a11564bfb79a01d2fa9fdb29%2526visitor%253D%2524UID%2526gdpr%253D0%2526gdpr_consent%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fvisitor.omnitagjs.com%252Fvisitor%252Fsync%253Fname%253DXandr%252B%2525E2%252580%252593%252BInvest%252BDSP%2526ttl%253D720%2526uid%253D48d5713d5c563cba2049f505b2d944b6%2526visitor%253D%2524UID%2526gdpr%253D0%2526gdpr_consent%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=gg.com&id=e_33c42140-717c-478c-b5d2-55b417259425 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?gdpr=0&gdpr_consent=&name=Openweb_SSP&uid=ee7f7070fcde32ab0ae4be25799fd7f5&url=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40035%26id%3D%7BuserId%7D HTTP/1.1Host: visitor-ow.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&p=156758&pu=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; chkChromeAb67Sec=1; pi=159047:2; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A201_251_56_54_71_220_21_13%7C1737417600%3A223%7C1738108800%3A35
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f916f29b-2afe-4e6a-82ea-5c73ed5d83f2\|1736870496
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3798720936406173000V10&type=rkt&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=5141210833809075817 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&redir=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40017%26id%3D%5BRX_UUID%5D&sub=rise HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%2C%22zdxidn%22%3A%222069.103%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40026%26id%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40021%26id%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=c05b2355-de57-4855-be98-dd0694efbd0a HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&pi=gumgum HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=lrhR-Xu2Vn5xeulD3h3wrAgue70 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=EmUa319lTVQ4WiUyQnVqZFJucUprU2ZvbEg0SkdhV3RvYjIwSDg1cEU1TXNJa2p5c3hHcTZsNEtGSGNic01aQXI4NEwxVXJsMTZwcTZRODE1eVdXdmhwJTJGQlM1bmlkRlVjdFhudjdXYTlzaEEzV1ZJUGMlM0Q
Source: global traffic	HTTP traffic detected: GET /cchain/0?cb=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40018%26uid%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/691/434/7/2.gif?puid=5688e494-508c-4738-b73e-b65747a6da2a&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=f2203b41-15c8-728d-bbc1-fc7c5964f340#1736870490690#3; 3pi=
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dopx%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f916f29b-2afe-4e6a-82ea-5c73ed5d83f2\|1736870496
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=adyoulike&zcc=1&cb=1736870495028 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%2C%22zdxidn%22%3A%222069.103%22%7D
Source: global traffic	HTTP traffic detected: GET /i/ck/mnet?cid=3798720936406173000V10&gdpr=0&gdpr_consent=&gpp_string=&gpp_sid=&redirect=https%3A%2F%2Fcs.media.net%2Fcksync%3Fcs%3D3%26type%3Diqm%26ovsid%3D%7B%24PARTNER_UID%7D&cs=8 HTTP/1.1Host: pxl.iqm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3798720936406173000V10&type=son&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=[UID] HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=5688e494-508c-4738-b73e-b65747a6da2a; HAPLB8G=s86217\|Z4aKY
Source: global traffic	HTTP traffic detected: GET /adx/user/sync?pubid=eWg=&gdpr=0&gdpr_consent=&us_privacy=&bidswitch_ssp_id=gumgum2&bsw_custom_parameter=3c5f3066-31a8-44db-9ce2-78819c7eca24&callback=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D257 HTTP/1.1Host: gw-iad-bid.ymmobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=3Wp8ezqxc1OH&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=Z4aKYcCo8XgAAESmNVwAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=726cb1bf-9fd3-ca67-1832-160ce1497bef HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=63268115443532841 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync/113 HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_ad40f182bf984771a82a3; CDIPARTNERS=%7B%221%22%3A%2220250114%22%7D
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=EmUa319lTVQ4WiUyQnVqZFJucUprU2ZvbEg0SkdhV3RvYjIwSDg1cEU1TXNJa2p5c3hHcTZsNEtGSGNic01aQXI4NEwxVXJsMTZwcTZRODE1eVdXdmhwJTJGQlM1bmlkRlVjdFhudjdXYTlzaEEzV1ZJUGMlM0Q
Source: global traffic	HTTP traffic detected: GET /sync/iponweb?bidswitch_ssp_id=adyoulike&ssp_user_id=3c5f3066-31a8-44db-9ce2-78819c7eca24&gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGCKhmcCEBcjFNyHmivPASpB5lrTTuwFEgEBAQHbh2eQZwAAAAAA_eMAAA&S=AQAAAiAtg7y-sqX4rpkrtppct6g
Source: global traffic	HTTP traffic detected: GET /sync?nid=68 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDglJq8BjABOgT87-jmQgS_qvgc.e1bBO75EXGFAVgG%2FS6thbZOCnFY8vJ%2BD8NTw%2BOZ54Mo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDglJq8BjABOgT87-jmQgS_qvgc.e1bBO75EXGFAVgG%2FS6thbZOCnFY8vJ%2BD8NTw%2BOZ54Mo
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=560210&ev=1&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dppt%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=3Wp8ezqxc1OH; VP=part_3Wp8ezqxc1OH; pb_rtb_ev=3-1vwb\|7bq.0.1; pb_rtb_ev_part=3-1vwb\|7bq.0.1; INGRESSCOOKIE=f683a8172522b280
Source: global traffic	HTTP traffic detected: GET /beeswax_sync?beeswax_id=AAFyw07PDRUAABW6tGVPVA&buyer_user_id=7be677d6-21e8-422b-ac32-c2dab17da55f&fdest=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DAIDEM%26ttl%3D720%26uid%3Db2f604635d0b9abde52139fc8a8034be%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: gum.aidemsrv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ZeF5sIBxJJMmkh1kXZqD4Qhce6VjnHsjMcCml9UsCOc-1736870494-1.0.1.1-HDN5OmoK9By1kvoQmP1AsGadOb1CEWKopwtiMBgLgT9RXGg.fUQhDvdRa5N9dhCDyt56UvUVpnLt.HUdnloNtQ
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870494
Source: global traffic	HTTP traffic detected: GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=Mzc5ODcyMDkzNjQwNjE3MzAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=2abacdc2-8379-719d-d83c-949b897ab00f&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFGAEgASgCMgsI_qDKyO6v2j0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Ddxu%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_NATIVE_1_2%26ttl%3D720%26uid%3Df2d9136cf53dede7f83ba16171a37fdd%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&obuid=2764915e-09ac-424e-848a-69ae041aeca6&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFGAEgASgCMgsI_qDKyO6v2j0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=index.com&id=Z4aKXdHM50oAACSqBWeJWwAABWcAAAAB HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cmi?cm_callback_url=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D%24%7BIndexCmID%7D%26external_user_id%3D%24%7BUUID%7D&userId=Z4aKXdHM50oAACSqBWeJWwAA%261383&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: ads.creative-serving.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFGAEgASgCMgsI_qDKyO6v2j0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=Z4aKXdHM50oAACSqBWeJWwAA%261383&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=Xandr+OPENWEB&ttl=720&uid=fc1c60cd86bc9d21889d1f9cc47ab50f&visitor=5083389559600441842&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dr1%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%2C%22zdxidn%22%3A%222069.103%22%7D
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DRISE_CODES%26ttl%3D720%26uid%3D48b439bcf2930e6408d6e795f7f1cdd2%26visitor%3D%7BpartnerId%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-HNcCDaVE2pecft_glgvkRD.tIhpqjYTAbk0f~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=0&gdpr_consent=&obuid=2764915e-09ac-424e-848a-69ae041aeca6&puid=e_33c42140-717c-478c-b5d2-55b417259425&s=2&us_privacy= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=22&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=YmM5N2ZiM2IwNzFiZDZlNDliYWE1NDJlZjA2ZTFkYjlmMWViZDFmZg&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=Z4aKXdHM50oAACSqBWeJWwAABWcAAAAB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync/openx/be7dab86-13d5-e3d4-e9eb-826e762d7d46?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGCKhmcCEBcjFNyHmivPASpB5lrTTuwFEgEBAQHbh2eQZwAAAAAA_eMAAA&S=AQAAAiAtg7y-sqX4rpkrtppct6g
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFGAEgASgCMgsI_qDKyO6v2j0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=AIDEM&ttl=720&visitor=&gdpr=0&gdpr_consent=&uid=AAFyw07PDRUAABW6tGVPVA HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MDZkNTFlMDgtNGEwZS0yZjM5LWNkZGMtY2UyMjQzOTg3ZTZm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/752EF183-2EFE-4640-8487-1A2E07ED43A9?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?id=KAFBABZHifxgcsEFSaqmP500&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40025&id=Z4aKXdHM50oAACSqBWeJWwAA%261383 HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40040&puid=bc687de1-8740-43b2-8611-7ef46259b97d HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159706&pu=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DPUBMATIC%26ttl%3D720%26uid%3D2fe1084ffe44c28350116ec0a0a1c2d1%26visitor%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; pi=156758:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFGAEgASgCMgsI_qDKyO6v2j0QBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Jk3fx57ITBkqyKGnJETk_1736870494712; ts=1736870494
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40028&id=2156636976006220502544 HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003&rndcb=6621038063 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3798720936406173000V10&type=ppt&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=3Wp8ezqxc1OH&ev=1&pid=560210 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=Xandr+%E2%80%93+Invest+DSP+-+Banner&ttl=720&uid=75d56568a11564bfb79a01d2fa9fdb29&visitor=5083389559600441842&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/dv?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=5083389559600441842&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=ZEMANTA_BANNER&ttl=720&uid=bdef6bd95b7450b4e62a32db8c7d8c9d&visitor=2764915e-09ac-424e-848a-69ae041aeca6&gdpr=0&gdpr_consent=&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=6871813547619617838&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEGxg0mRTDJPdEqwhnIuCb9Y&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; pi=156758:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /cs?aid=40030&id=3f4865721eb6e7ec7f8086d7aed1db52&_fw_gdpr=0&_fw_gdpr_consent= HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40019&id=c651c1a0-13e4-47d2-a4f4-8bef5b29c323 HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TTVXTlVLOTctMTctRVlZTg==&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=185&cm=KAFBABZHifxgcsEFSaqmP500&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40035&id=948a2f4f9c5b70d31ad859ee2dc15ce9 HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3798720936406173000V10&type=opx&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=e296a45d-2879-4b7d-bb73-eaf53b9522d3 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFyw07PDRUAABW6tGVPVA; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=dd8769b2-ab6c-49cb-bf47-8476412ab149 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=9771090a-e9be-4c9e-ab30-7a2cc1a2cf2b HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=p7fwLGeGimEnE9noMPCgDg==
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3798720936406173000V10&type=son&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=5688e494-508c-4738-b73e-b65747a6da2a HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=094e13e3a08b6f25e4d4f7b1fba0b26b&visitor=1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&name=RTB_HOUSE&pi=adyoulike&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/id5?us_privacy= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFyw07PDRUAABW6tGVPVA; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=2220161779591397862 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /ecm3?id=M5WNUK97-17-EYYN&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=EmUa319lTVQ4WiUyQnVqZFJucUprU2ZvbEg0SkdhV3RvYjIwSDg1cEU1TXNJa2p5c3hHcTZsNEtGSGNic01aQXI4NEwxVXJsMTZwcTZRODE1eVdXdmhwJTJGQlM1bmlkRlVjdFhudjdXYTlzaEEzV1ZJUGMlM0Q
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=c05b2355-de57-4855-be98-dd0694efbd0a&ttd_puid=2abacdc2-8379-719d-d83c-949b897ab00f&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f916f29b-2afe-4e6a-82ea-5c73ed5d83f2\|1736870496; pd=v2\|1736870496\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/TqWnzQ8hVGjNht_DMA507Mn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGCKhmcCEBcjFNyHmivPASpB5lrTTuwFEgEBAQHbh2eQZwAAAAAA_eMAAA&S=AQAAAiAtg7y-sqX4rpkrtppct6g
Source: global traffic	HTTP traffic detected: GET /s/ecm3?id=M5WNUK97-17-EYYN&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9a5RYLm_k32pbPtf_apSf4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /?gdpr=0&gdpr_consent=&pubid=11362&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11571%26id%3D%7Bdevice_id%7D HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=medianet&bsw_param=3c5f3066-31a8-44db-9ce2-78819c7eca24&google_hm=M2M1ZjMwNjYtMzFhOC00NGRiLTljZTItNzg4MTljN2VjYTI0&gdpr_consent=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003&rndcb=6628443996 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0 HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=9771090a-e9be-4c9e-ab30-7a2cc1a2cf2b\|1736870496258
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Ddxu%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=Xb5LBvBx1TxJmh5
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=3798720936406173000V10&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=257&ssp=gumgum2&user_id=ym_user_df28c623-c661-49df-91ad-347bcd2878af&bsw_param=3c5f3066-31a8-44db-9ce2-78819c7eca24 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; pi=159706:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=9276a8c8d010b77af50144c60047b781&visitor=2220161779591397862&name=SMARTADSERVER&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /k/155.gif?puid=AAFyw07PDRUAABW6tGVPVA&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=f2203b41-15c8-728d-bbc1-fc7c5964f340#1736870490690#3; 3pi=434#1736870497340#183441888; cf=gif; cip=691; cnac=6; car=3; gdpr=0\|
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40021&id=KAFBABZHifxgcsEFSaqmP500 HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=176&external_user_id=di_ad40f182bf984771a82a3 HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=123&external_user_id=lrhR-Xu2Vn5xeulD3h3wrAgue70 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40026&id=5083389559600441842&gdpr=0&gdpr_consent= HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=c05b2355-de57-4855-be98-dd0694efbd0a&expiration=1739462498&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=2764915e-09ac-424e-848a-69ae041aeca6&gdpr=0 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFEhUKBmNhc2FsZRILCMDbj6vYr9o9EAUYASACKAIyCwj-oMrI7q_aPRAFOAFaCHB1Ym1hdGljYAI.
Source: global traffic	HTTP traffic detected: GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=Z4aKXdHM50oAACSqBWeJWwAA%261383&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=6c61eedb932240b0a23788441236285d HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=6c61eedb-9322-40b0-a237-88441236285d
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEGxg0mRTDJPdEqwhnIuCb9Y&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; pi=159706:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=c05b2355-de57-4855-be98-dd0694efbd0a&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; pi=159706:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /us?consent_string=&gdpr=0&loc=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D115667%26uid%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=5688e494-508c-4738-b73e-b65747a6da2a; HAPLB8G=s86217\|Z4aKZ
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=752EF183-2EFE-4640-8487-1A2E07ED43A9&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync.html?pubid=197&pubuid=${UID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.contextualadv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDglJq8BjABOgT87-jmQgS_qvgc.e1bBO75EXGFAVgG%2FS6thbZOCnFY8vJ%2BD8NTw%2BOZ54Mo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDglJq8BjABOgT87-jmQgS_qvgc.e1bBO75EXGFAVgG%2FS6thbZOCnFY8vJ%2BD8NTw%2BOZ54Mo
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEDzHm0qOR-QkyQsvxikU8n8&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f916f29b-2afe-4e6a-82ea-5c73ed5d83f2\|1736870496; pd=v2\|1736870496\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=OPENWEB&ttl=720&uid=9f93135e824096b627ff609f5cdee636&visitor=A7cp2Xn9kp_ow&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=752EF183-2EFE-4640-8487-1A2E07ED43A9&redir=true&gdpr=0&gdpr_consent=&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGKKhmcCEN_yRMIeyNRQJuHyBCFKTHYFEgEBAQHbh2eQZwAAAAAA_eMAAA&S=AQAAAoBP2rSvRzwgecCXS7vKHpI
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&ssp_user_id=3798720936406173000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lijit_dbm&google_hm=S0FGQkFCWkhpZnhnY3NFRlNhcW1QNTAw&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003&rndcb=7924896676 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3305930306969528712
Source: global traffic	HTTP traffic detected: GET /?pubid=11480&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D68c72dd412a8d0f3f6d2276db2509939%26name%3DLOOPME%26visitor%3D%7Bdevice_id%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=rise HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Jk3fx57ITBkqyKGnJETk_1736870494712; ts=1736870494
Source: global traffic	HTTP traffic detected: GET /usersync/turn/3305930306969528712?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dr1%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=Z4aKXdHM50oAACSqBWeJWwAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /merge?pid=27&3pid=c05b2355-de57-4855-be98-dd0694efbd0a&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=84&3pid=Z4aKYgqcWDMo8GdUeYuEG550 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=M5WNUKFW-10-J3IA&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=83&3pid=M5WNUKFW-10-J3IA&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /ul_cb/cmi?cm_callback_url=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D%24%7BIndexCmID%7D%26external_user_id%3D%24%7BUUID%7D&userId=Z4aKXdHM50oAACSqBWeJWwAA%261383&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: ads.creative-serving.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=70c0f315-62e9-48f4-9467-83fff3310871; c=1736870497; tuuid_lu=1736870497
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr=0&gdpr_consent=&gdpr_consent=&p=160295&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11576%26id%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; pi=159706:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=74&&user_id=y-50Zruw5E2pnYfnqDrwrOniDyEQBU01xF_kdSxg--~A&expires=5&ssp=adyoulike HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11596%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BUSER_CONSENT%5D%26id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862
Source: global traffic	HTTP traffic detected: GET /usync/?gdpr=0&gdpr_consent=&pubId=69f48c2160c8113 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?name=risecode&uid=40a3c28f9ffc73ee86df2bac2d2bb390&url=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11609%26id%3D%5BBUYER_ID%5D%0A HTTP/1.1Host: visitor-risecode.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=160&partneruserid=1&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=2764915e-09ac-424e-848a-69ae041aeca6&gdpr=0&gdpr_consent=&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ssync?pid=62f53b2c7850d0786f227f64&r=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DANIVIEW%26ttl%3D720%26uid%3De8ecb87ff2ef3a3b16ba16c51e7986ac%26visitor%3D%5BAV_UID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3355&partner_device_id=M5WNUKFW-10-J3IA&gdpr=0 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; pi=159706:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=PUBMATIC&ttl=720&uid=2fe1084ffe44c28350116ec0a0a1c2d1&visitor=752EF183-2EFE-4640-8487-1A2E07ED43A9&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=52438238&p=159047&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=rise&gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11574%26id%3D%24UID HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=64278545&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; chkChromeAb67Sec=3; KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=159047&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; PugT=1736870496; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1736870498345.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212956891363675%3As1%3D1736870496838%3Ats%3D1736870496838
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=5b07aa10-bd03-49c4-9e28-e57f0a499e2c&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent=&puid=3798720936406173000V10&s=2&us_privacy= HTTP/1.1Host: b1sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=2764915e-09ac-424e-848a-69ae041aeca6
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=3496f2c9155784213a7b528f78bb441a&visitor=M5WNUKFW-10-J3IA&name=RUBICON&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=2a62ca3297af454b8f19eb7922ed945f&visitor=3c5f3066-31a8-44db-9ce2-78819c7eca24&name=BIDSWITCH&gdpr=&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /ps/?_=1736870498345.&ri=0015a00003HljHyAAJ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212956891363675%3As1%3D1736870496838%3Ats%3D1736870496838
Source: global traffic	HTTP traffic detected: GET /ps/?ts=1736870498345.6&ri=129&us_privacy=&gpp_sid=&gpp=&ru=https%3A%2F%2Ft.adx.opera.com%2Fpub%2Fsync%3Fpubid%3Dpub11169426274368%26coppa%3D%26us_privacy%3D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212956891363675%3As1%3D1736870496838%3Ats%3D1736870496838
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11571&id=df651337-8111-42ba-a513-b7a37e637129&gdpr_consent=null&gdpr=0 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11607%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /cs?aid=40023&id=M5WNUK97-17-EYYN&gdpr=0&gdpr_consent=undefined HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=M5WNUK97-17-EYYN&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=smart_adserver_eb&google_hm=MjIyMDE2MTc3OTU5MTM5Nzg2Mg==&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /sync?ssp=the33across&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGCKhmcCEBcjFNyHmivPASpB5lrTTuwFEgEBAQHbh2eQZwAAAAAA_eMAAA&S=AQAAAiAtg7y-sqX4rpkrtppct6g
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3798720936406173000V10&type=con&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=AQAJjlaI5E_qUAJsovnaAQEBAQEBAQCVZI2SAQEBAJVkjZIB&expiration=1736956899&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8
Source: global traffic	HTTP traffic detected: GET /cs?aid=11576&fwrd=1&id=752EF183-2EFE-4640-8487-1A2E07ED43A9 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z4aKYQASauuJYgAZ&_test=Z4aKYQASauuJYgAZ HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=16&user_id=CAESEOKgrxLWoBGWCwOGGPCaMro&google_cver=1&ssp=medianet&bsw_param=3c5f3066-31a8-44db-9ce2-78819c7eca24&gdpr_consent=&gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=752EF183-2EFE-4640-8487-1A2E07ED43A9&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=AF8E01081D9C7B7D
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3798720936406173000V10&type=dxu&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=Xb5LBvBx1TxJmh5 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8
Source: global traffic	HTTP traffic detected: GET /usersync/turn/2578970798499441495?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dr1%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; chkChromeAb67Sec=3; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; PugT=1736870498
Source: global traffic	HTTP traffic detected: GET /?partner=147&mapped=c05b2355-de57-4855-be98-dd0694efbd0a&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=bf09e427fab9b034; done_redirects147=1
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DSOVRN_APP%26ttl%3D720%26uid%3Dcf7670e1d20b737804cf859fa1318914%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c05b2355-de57-4855-be98-dd0694efbd0a; TDCPM=CAESFwoIcHVibWF0aWMSCwjqqseb2K_aPRAFEhUKBmNhc2FsZRILCMDbj6vYr9o9EAUYASABKAIyCwiM85vh7q_aPRAFOAFaB3hrc3c5bGFgAg..
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=6c61eedb-9322-40b0-a237-88441236285d&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=bsw&i=3c5f3066-31a8-44db-9ce2-78819c7eca24&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=cf4ed03e-b226-41a7-b41c-4edb7617b904 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=117&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D72%26pid%3D62f53b2c7850d0786f227f64%26key%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3355&partner_device_id=M5WNUKFW-10-J3IA&gdpr=0 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1736870499527; TapAd_DID=792a0125-3133-473b-8373-5aaa95574be0
Source: global traffic	HTTP traffic detected: GET /crumhttps://dsum-sec.casalemedia.com/crum?cm_dsp_id=235&external_user_id=70c0f315-62e9-48f4-9467-83fff3310871&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=45&external_user_id=CAESEEh6oB0XXE-fKYqr6R2OHxM&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /live/liveCS.php?source=external&advId=100&advUuid=M5WNUK97-17-EYYN&gdpr=0 HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11607&uid=KAFBABZHifxgcsEFSaqmP500 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D55%26key%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=115667&uid=5688e494-508c-4738-b73e-b65747a6da2a HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/templates/opera-norway-as/opera/opera-feature-b HTTP/1.1Host: di-images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/cookiesyncredir?rurl=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D204%26pid%3D62f53b2c7850d0786f227f64%26key%3D%7Bglobalid%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /usersync?b=mag&i=M5WNUK97-17-EYYN&gdpr=0&gdpr_consent=undefined HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_33c42140-717c-478c-b5d2-55b417259425
Source: global traffic	HTTP traffic detected: GET /t_auto/download_intent/templates/opera-norway-as/opera/opera-feature-c HTTP/1.1Host: di-images.sftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=50a8b71bce09185338b804811fc96dd2&visitor=M5WNUKFW-10-J3IA&name=RUBICON&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11609&id=948a2f4f9c5b70d31ad859ee2dc15ce9 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /sync?ssp=&user_id=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-db.rIg5E2uVROY1kxiND30LFObRl6XM-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; chkChromeAb67Sec=3; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; PugT=1736870498
Source: global traffic	HTTP traffic detected: GET /usersync/turn/3305930306969528712?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dr1%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /d00044ac-a097-4f82-8dd0-d396cf336696-trk.js HTTP/1.1Host: wt.rqtrk.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=805152 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent=&obuid=2764915e-09ac-424e-848a-69ae041aeca6&puid=3798720936406173000V10&s=2&us_privacy= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=7MfMZm79CA1Jgx2U_0iy
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=117&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D72%26pid%3D62f53b2c7850d0786f227f64%26key%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=cb9d40e9-20aa-46a9-84f0-18e0926a4330#1736870500061
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=5339454043937287521 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; PugT=1736870498; pi=160295:3; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=MjIyMDE2MTc3OTU5MTM5Nzg2Mg==&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /pixel?us_privacy=&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D18%26key%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TTVXTlVLOTctMTctRVlZTg==&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl7RhMarmQRdqESXYwIrDTo7WhCn6Pd1gxFO2OqZcF64FvN1mZmY7Is0ZIYGCU
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=49&partneruserid=7459801990627391854&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862; csync=160:1
Source: global traffic	HTTP traffic detected: GET /rrum?cm_dsp_id=178&external_user_id=66a0233d-032d-42f9-995b-276ff3dfeb7c&cb=https://pxl.iqm.com/i/ck/indexch?cmid= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; chkChromeAb67Sec=3; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; PugT=1736870498
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=rbcn&ovsid=M5WNUK97-17-EYYN&gdpr=0&gdpr_consent=undefined HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8; data-ttd=c05b2355-de57-4855-be98-dd0694efbd0a~~1; data-g=CAESEIs549-zLj_XxlAU4nhfC8E~~8
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=40018&uid=fef12232-5f79-444b-bd75-f4d22476fca4 HTTP/1.1Host: cs.openwebmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=A7cp2Xn9kp_ow
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=74a1ec3b61e72925193cfceeea1b0608&visitor=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&name=STACKADAPT&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=f2203b41-15c8-728d-bbc1-fc7c5964f340#1736870490690#3; cf=gif; cip=691; gdpr=0\|; 3pi=434#1736870497340#183441888\|155#1736870499255#846735255#AAFyw07PDRUAABW6tGVPVA; cnac=5; car=4
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=wt6eOQ7lVDcdWg6e2dbl7579bL44dqBi0NsvFO5OmX0Hbel_S1e9Y2wqwcqlKK5MkYmUAjpkh9NzdQCp8b_gLF9yDC0DLqnOi-a_CtvkaVU.; uuid2=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11596&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&id=5083389559600441842 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /csync/RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3798720936406173000V10%26type%3Dr1%26refUrl%3D%26vid%3D68704944103798720936406173000V10%26axid_e%3D%26ovsid%3DRX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?aid=11610&id=1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&pi=rise HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /cs?aid=11601&id=3f4865721eb6e7ec7f8086d7aed1db52&gdpr_consent=&gdpr=0 HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=ANIVIEW&ttl=720&uid=e8ecb87ff2ef3a3b16ba16c51e7986ac&visitor=25cae47c-5a3d-4afc-8a27-3205ebca22c7&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=68c72dd412a8d0f3f6d2276db2509939&name=LOOPME&visitor=b6002bdc-58ba-4998-80ab-569be163d69d&gdpr_consent=null&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D24%26pid%3D62f53b2c7850d0786f227f64%26key%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr={GDPR_APPLIES}&gdpr_consent={TCF_CONSENT_STRING}&us_privacy={US_PRIVACY}&cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D642b2fc65afcd5ddddcf2d0e96254052%26visitor%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=fef12232-5f79-444b-bd75-f4d22476fca4; pamuid2=fef12232-5f79-444b-bd75-f4d22476fca4; psd_amuid2=fef12232-5f79-444b-bd75-f4d22476fca4; sd_amuid2=fef12232-5f79-444b-bd75-f4d22476fca4
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=1&gdpr=0&gdpr_consent=&pid=562615&rurl=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11592%26uid%3D%25%25VGUID%25%25&us_privacy=%5BUS_PRIVACY%5D HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=3Wp8ezqxc1OH; VP=part_3Wp8ezqxc1OH; pb_rtb_ev=3-1vwb\|7bq.0.1; pb_rtb_ev_part=3-1vwb\|7bq.0.1; INGRESSCOOKIE=f683a8172522b280
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DSOVRN%26ttl%3D720%26uid%3D4b30a0b1f289a261ab592e1e53c126eb%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=KAFBABZHifxgcsEFSaqmP500; ljtrtbexp=eJyrVrIwULIyNDe2MLAwMLA01VGyMEbjm6DyjdDkjczBfHMTc1MjS9NaAJsHEGI%3D; _ljtrtb_27=c05b2355-de57-4855-be98-dd0694efbd0a; _ljtrtb_84=Z4aKYgqcWDMo8GdUeYuEG550; _ljtrtb_83=M5WNUKFW-10-J3IA; _ljtrtb_80=M5WNUKFW-10-J3IA
Source: global traffic	HTTP traffic detected: GET /px.gif HTTP/1.1Host: bt.dns-finder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /k/264.gif?puid=c05b2355-de57-4855-be98-dd0694efbd0a&ttl=%%TTL%% HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=f2203b41-15c8-728d-bbc1-fc7c5964f340#1736870490690#3; cf=gif; cip=691; gdpr=0\|; 3pi=434#1736870497340#183441888\|155#1736870499255#846735255#AAFyw07PDRUAABW6tGVPVA; cnac=5; car=4
Source: global traffic	HTTP traffic detected: GET /pbsync?gdpr=0&gdpr_consent=&is=rise&redirectUri=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11584%26uid%3D%24UID&us_privacy= HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UserID1=7459801990627391854
Source: global traffic	HTTP traffic detected: GET /sync?pid=191&uid=66a0233d-032d-42f9-995b-276ff3dfeb7c HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11603%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BUSER_CONSENT%5D%26uid%3D$%7BBSW_UUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3c5f3066-31a8-44db-9ce2-78819c7eca24; c=1736870494; tuuid_lu=1736870496
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=&biddername=55&key=5083389559600441842 HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7
Source: global traffic	HTTP traffic detected: GET /pixel/cookiesync?source=6b2595d5-cf4e-4298-a4ac-bcc34433eaad&secure=1&gdpr=0&gdpr_consent= HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnJ37DYeaAfAsBXy_4DHU45Xe0Irt2RDtsCPW8rvnL5WTXnfdTJWr2LGh-sJQC4TM1
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=cb9d40e9-20aa-46a9-84f0-18e0926a4330#1736870500061; _ssuma=eyIzOSI6MTczNjg3MDUwMDI5NywiNyI6MTczNjg3MDUwMDI5NywiNzQiOjE3MzY4NzA1MDAyOTd9
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=6c61eedb-9322-40b0-a237-88441236285d&vxii_pid=12&vxii_pid1=7006&vxii_rcid=d8d5b165-4b62-44f9-ae2c-dd30daa4fba9&vxii_rmax=3 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImQ4ZDViMTY1LTRiNjItNDRmOS1hZTJjLWRkMzBkYWE0ZmJhOSIsImwiOjE3MzY4NzA1MDAwMTAsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /sync?UIIQ=66a0233d-032d-42f9-995b-276ff3dfeb7c HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11606&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&uid=5339454043937287521 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /ps/?xi=99&us_privacy=&xu=y-mvNHmXZE2uH0J_7IGJWG3rGmALfe9LrR~A HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212956891363675%3As1%3D1736870496838%3Ats%3D1736870496838
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=M5WNUK97-17-EYYN HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11574&id=d427e8457a HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=77&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862; csync=152:cf4ed03e-b226-41a7-b41c-4edb7617b904
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&sub=typeaholdings HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003%22%7D
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=CAESEO7tMJpfFoPAp_cn31eWwTY&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2220161779591397862; csync=49:7459801990627391854\|160:1
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; DPSync4=1738022400%3A226_227_197_219; SyncRTB4=1738022400%3A266_251_54_71_220_13_201_56_21%7C1737417600%3A223%7C1738108800%3A35; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^2^0; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; chkChromeAb67Sec=3; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; PugT=1736870498
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=cb9d40e9-20aa-46a9-84f0-18e0926a4330-67868a64-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3Dcb9d40e9-20aa-46a9-84f0-18e0926a4330-67868a64-5553%26partner_url%3Dhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fauid%253D%2526biddername%253D72%2526pid%253D62f53b2c7850d0786f227f64%2526key%253Dcb9d40e9-20aa-46a9-84f0-18e0926a4330-67868a64-5553 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=e2384b2e484aea8bbda3f3763ec93a08; _cc_cc="ACZ4nGNQSDUytjBJMko1sTBJTE20SEpKSTROMzY3M05NtjRONLBgAIL0tq4IBgQAAGOvCxA%3D"; _cc_aud="ABR4nGNgYGBIb%2BuKYIADABbCAdA%3D"
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDglJq8BjABOgT87-jmQgS_qvgc.e1bBO75EXGFAVgG%2FS6thbZOCnFY8vJ%2BD8NTw%2BOZ54Mo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDglJq8BjABOgT87-jmQgS_qvgc.e1bBO75EXGFAVgG%2FS6thbZOCnFY8vJ%2BD8NTw%2BOZ54Mo
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=cb9d40e9-20aa-46a9-84f0-18e0926a4330#1736870500061; _ssuma=eyIzOSI6MTczNjg3MDUwMDI5NywiNyI6MTczNjg3MDUwMDI5NywiNzQiOjE3MzY4NzA1MDAyOTd9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=33ACROSS&ttl=720&uid=2f9442d7df2189f76c8b593d5f54ce95&visitor=212956891363675&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /711333.gif?&gdpr=0&gdpr_consent= HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3501&partner_device_id=3798720936406173000V10 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1736870499527; TapAd_DID=792a0125-3133-473b-8373-5aaa95574be0; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=5083389559600441842&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; chkChromeAb67Sec=4; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^1^0; DPSync4=1738022400%3A245_226_227_197_219; pi=156758:3; SPugT=1736870499; KRTBCOOKIE_391=22924-5339454043937287521&KRTB&23231-5339454043937287521&KRTB&23263-5339454043937287521&KRTB&23481-5339454043937287521; PugT=1736870499; SyncRTB4=1738022400%3A220_13_56_21_266_54_55_201_251_71%7C1737417600%3A223%7C1738108800%3A35
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3798720936406173000V10&type=r1&refUrl=&vid=68704944103798720936406173000V10&axid_e=&ovsid=RX-9f486e50-b136-4bf2-9461-ec8db9c275e7-003 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-west-1-cs-rtb.openwebmp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8; data-ttd=c05b2355-de57-4855-be98-dd0694efbd0a~~1; data-g=CAESEIs549-zLj_XxlAU4nhfC8E~~8; data-c=5b07aa10-bd03-49c4-9e28-e57f0a499e2c~~1; data-c-ts=1736870499; data-co=AQAJjlaI5E_qUAJsovnaAQEBAQEBAQCVZI2SAQEBAJVkjZIB~~8; data-xu=Xb5LBvBx1TxJmh5~~8; data-exp=setstatuscode~~1; data-r=M5WNUK97-17-EYYN~~1
Source: global traffic	HTTP traffic detected: GET /i/ck/indexch?cmid=Z4aKXdHM50oAACSqBWeJWwAA HTTP/1.1Host: pxl.iqm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mnet=MTczODA4MDA5NzI0MA==; iqm.retarget.uid=66a0233d-032d-42f9-995b-276ff3dfeb7c; roqad=MTczODA4MDA5NzI0MA==; liveramp=MTczODA4MDA5NzI0MA==; semcasting=MTczODA4MDA5NzI0MA==
Source: global traffic	HTTP traffic detected: GET /?pid=1&uid=bf09e427fab9b034&gdpr=0 HTTP/1.1Host: pixel.nordicdataresources.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync?p=iqm&uid=66a0233d-032d-42f9-995b-276ff3dfeb7c&initiator=partner&obUid=&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=2764915e-09ac-424e-848a-69ae041aeca6
Source: global traffic	HTTP traffic detected: GET /pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent} HTTP/1.1Host: dsp-ap.eskimi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPUd71716752e4447e29d03eac18931ce02
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11592&uid=3Wp8ezqxc1OH&ev=1&us_privacy=[US_PRIVACY]&gdpr_consent=&pid=562615&gdpr=0 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11584&uid=xEiICaa11Sad3KsYQs7x&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=GuHKvhS3xLwBtJbrSeLf6hjklrgBs8vpHrR_NGiK HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; chkChromeAb67Sec=4; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^1^0; DPSync4=1738022400%3A245_226_227_197_219; pi=156758:3; SPugT=1736870499; KRTBCOOKIE_391=22924-5339454043937287521&KRTB&23231-5339454043937287521&KRTB&23263-5339454043937287521&KRTB&23481-5339454043937287521; PugT=1736870499; SyncRTB4=1738022400%3A220_13_56_21_266_54_55_201_251_71%7C1737417600%3A223%7C1738108800%3A35
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ssuma=eyIzOSI6MTczNjg3MDUwMDI5NywiNyI6MTczNjg3MDUwMDI5NywiNzQiOjE3MzY4NzA1MDAyOTd9; ssi=7e68de1a-e247-4305-8467-62734dde3aaa#1736870500639
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?biddername=212&key=66a0233d-032d-42f9-995b-276ff3dfeb7c HTTP/1.1Host: sync.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; 1_C_55=5083389559600441842; 1_C_55=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=&biddername=18&key=KAFBABZHifxgcsEFSaqmP500 HTTP/1.1Host: sync.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; 1_C_55=5083389559600441842; 1_C_55=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=&biddername=24&pid=62f53b2c7850d0786f227f64&key=3c5f3066-31a8-44db-9ce2-78819c7eca24 HTTP/1.1Host: sync.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.aniview.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; aniC=25cae47c-5a3d-4afc-8a27-3205ebca22c7; 1_C_55=5083389559600441842; 1_C_55=5083389559600441842
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUd71716752e4447e29d03eac18931ce02 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; chkChromeAb67Sec=4; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^1^0; DPSync4=1738022400%3A245_226_227_197_219; pi=156758:3; SPugT=1736870499; KRTBCOOKIE_391=22924-5339454043937287521&KRTB&23231-5339454043937287521&KRTB&23263-5339454043937287521&KRTB&23481-5339454043937287521; PugT=1736870499; SyncRTB4=1738022400%3A220_13_56_21_266_54_55_201_251_71%7C1737417600%3A223%7C1738108800%3A35
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=SOVRN_APP&ttl=720&uid=cf7670e1d20b737804cf859fa1318914&visitor=KAFBABZHifxgcsEFSaqmP500&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=948a2f4f9c5b70d31ad859ee2dc15ce9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=752EF183-2EFE-4640-8487-1A2E07ED43A9&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=e2384b2e484aea8bbda3f3763ec93a08; _cc_cc="ACZ4nGNQSDUytjBJMko1sTBJTE20SEpKSTROMzY3M05NtjRONLBgAIL0tq4IBgQAAGOvCxA%3D"; _cc_aud="ABR4nGNgYGBIb%2BuKYIADABbCAdA%3D"
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=25&gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11585%26id%3D%3Cvsid%3E&type=ris HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8; data-ttd=c05b2355-de57-4855-be98-dd0694efbd0a~~1; data-g=CAESEIs549-zLj_XxlAU4nhfC8E~~8; data-c=5b07aa10-bd03-49c4-9e28-e57f0a499e2c~~1; data-c-ts=1736870499; data-co=AQAJjlaI5E_qUAJsovnaAQEBAQEBAQCVZI2SAQEBAJVkjZIB~~8; data-xu=Xb5LBvBx1TxJmh5~~8; data-exp=setstatuscode~~1; data-r=M5WNUK97-17-EYYN~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=bs&ovsid=3c5f3066-31a8-44db-9ce2-78819c7eca24&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3798720936406173000V10; data-rk=5141210833809075817~~8; data-o=e296a45d-2879-4b7d-bb73-eaf53b9522d3~~8; data-p=3Wp8ezqxc1OH~~8; data-so=5688e494-508c-4738-b73e-b65747a6da2a~~8; data-ttd=c05b2355-de57-4855-be98-dd0694efbd0a~~1; data-g=CAESEIs549-zLj_XxlAU4nhfC8E~~8; data-c=5b07aa10-bd03-49c4-9e28-e57f0a499e2c~~1; data-c-ts=1736870499; data-co=AQAJjlaI5E_qUAJsovnaAQEBAQEBAQCVZI2SAQEBAJVkjZIB~~8; data-xu=Xb5LBvBx1TxJmh5~~8; data-exp=setstatuscode~~1; data-r=M5WNUK97-17-EYYN~~1
Source: global traffic	HTTP traffic detected: GET /cs?fwrd=1&aid=11595&id=ID5-5-ba558f61-8477-40e4-a542-bd4e6da31def HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=bPEplXn9Cp_s
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fid5-sync.com%2Fc%2F691%2F429%2F4%2F5.gif%3Fpuid%3D%23PM_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; chkChromeAb67Sec=4; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^1^0; DPSync4=1738022400%3A245_226_227_197_219; pi=156758:3; SPugT=1736870499; KRTBCOOKIE_391=22924-5339454043937287521&KRTB&23231-5339454043937287521&KRTB&23263-5339454043937287521&KRTB&23481-5339454043937287521; PugT=1736870499; SyncRTB4=1738022400%3A220_13_56_21_266_54_55_201_251_71%7C1737417600%3A223%7C1738108800%3A35
Source: global traffic	HTTP traffic detected: GET /sync/prebid?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dfef12232-5f79-444b-bd75-f4d22476fca4%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f916f29b-2afe-4e6a-82ea-5c73ed5d83f2\|1736870496; pd=v2\|1736870496\|vMgavPkWgyiK; univ_id=537072971\|c05b2355-de57-4855-be98-dd0694efbd0a\|1736870498870143
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7459801990627391854&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=752EF183-2EFE-4640-8487-1A2E07ED43A9; KRTBCOOKIE_80=22987-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&16514-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23025-CAESEGxg0mRTDJPdEqwhnIuCb9Y&KRTB&23386-CAESEGxg0mRTDJPdEqwhnIuCb9Y; KRTBCOOKIE_632=23041-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23047-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23234-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&KRTB&23361-1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70; KRTBCOOKIE_377=6810-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22918-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&22926-c05b2355-de57-4855-be98-dd0694efbd0a&KRTB&23031-c05b2355-de57-4855-be98-dd0694efbd0a; chkChromeAb67Sec=4; ipc=156758^https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40020%26id%3D%23PMUID^1^0; DPSync4=1738022400%3A245_226_227_197_219; pi=156758:3; SPugT=1736870499; KRTBCOOKIE_391=22924-5339454043937287521&KRTB&23231-5339454043937287521&KRTB&23263-5339454043937287521&KRTB&23481-5339454043937287521; PugT=1736870499; SyncRTB4=1738022400%3A220_13_56_21_266_54_55_201_251_71%7C1737417600%3A223%7C1738108800%3A35
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.5224749604754737 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dfef12232-5f79-444b-bd75-f4d22476fca4%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Z4aKXdHM50oAACSqBWeJWwAA; CMPS=1383; CMPRO=1383

Source: chromecache_307.2.dr	String found in binary or memory: <p>Once you've done this, you can try to <a href="/signin">sign in again</a>.</p> </div></div><div id="overlay"></div></div><footer data-qa="footer"><section class="links"><div class="grid"><div class="col span_1_of_4 nav_col"><ul><li class="cat_1">Using Slack</li><li><a href="/is" data-qa="product_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_product">Product</a></li><li><a href="/enterprise" data-qa="enterprise_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_enterprise">Enterprise</a></li><li><a href="/pricing?ui_step=28&ui_element=5" data-qa="pricing_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_pricing">Pricing</a></li><li><a href="https://get.slack.help/hc/en-us" data-qa="support_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_support">Support</a></li><li><a href="/guides" data-qa="getting_started" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_getting_started">Slack Guides</a></li><li><a href="/marketplace" data-qa="app_directory" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_app_directory">Slack Marketplace</a></li><li><a href="https://api.slack.com/" data-qa="api" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_api">API</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_2">Slack <ts-icon class="ts_icon_heart"></ts-icon></li><li><a href="/careers" data-qa="jobs" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_jobs">Jobs</a></li><li><a href="/customers" data-qa="customers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_customers">Customers</a></li><li><a href="/developers" data-qa="developers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_developers">Developers</a></li><li><a href="/events" data-qa="events" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_events">Events</a></li><li><a href="https://slackhq.com/" data-qa="blog_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_blog">Blog</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_3">Legal</li><li><a href="/privacy-policy" data-qa="privacy" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_privacy">Privacy</a></li><li><a href="/trust/security" data-qa="security" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_security">Security</a></li><li><a href="/terms-of-service" data-qa="tos" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_tos">Terms of Service</a></li><li><a href="/legal" data-qa="policies" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_policies">Policies</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_4">Handy Links</li><li><a href="/downloads" data-qa="downloads" data-clog-event="WEBSITE_CLICK" data-clog
Source: chromecache_307.2.dr	String found in binary or memory: <p>Once you've done this, you can try to <a href="/signin">sign in again</a>.</p> </div></div><div id="overlay"></div></div><footer data-qa="footer"><section class="links"><div class="grid"><div class="col span_1_of_4 nav_col"><ul><li class="cat_1">Using Slack</li><li><a href="/is" data-qa="product_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_product">Product</a></li><li><a href="/enterprise" data-qa="enterprise_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_enterprise">Enterprise</a></li><li><a href="/pricing?ui_step=28&ui_element=5" data-qa="pricing_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_pricing">Pricing</a></li><li><a href="https://get.slack.help/hc/en-us" data-qa="support_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_support">Support</a></li><li><a href="/guides" data-qa="getting_started" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_getting_started">Slack Guides</a></li><li><a href="/marketplace" data-qa="app_directory" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_app_directory">Slack Marketplace</a></li><li><a href="https://api.slack.com/" data-qa="api" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_api">API</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_2">Slack <ts-icon class="ts_icon_heart"></ts-icon></li><li><a href="/careers" data-qa="jobs" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_jobs">Jobs</a></li><li><a href="/customers" data-qa="customers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_customers">Customers</a></li><li><a href="/developers" data-qa="developers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_developers">Developers</a></li><li><a href="/events" data-qa="events" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_events">Events</a></li><li><a href="https://slackhq.com/" data-qa="blog_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_blog">Blog</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_3">Legal</li><li><a href="/privacy-policy" data-qa="privacy" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_privacy">Privacy</a></li><li><a href="/trust/security" data-qa="security" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_security">Security</a></li><li><a href="/terms-of-service" data-qa="tos" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_tos">Terms of Service</a></li><li><a href="/legal" data-qa="policies" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_policies">Policies</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_4">Handy Links</li><li><a href="/downloads" data-qa="downloads" data-clog-event="WEBSITE_CLICK" data-clog
Source: chromecache_618.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.fastly.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_475.2.dr	String found in binary or memory: </style><meta property="fb:app_id" content="138566025676"/><meta property="og:site_name" content="Airbnb"/><meta property="og:locale" content="en_US"/><meta property="og:url" content="https://www.airbnb.com/login"/><meta property="og:title" content="Log In / Sign Up - Airbnb"/><meta property="og:description" content="Join a global community of travelers and local hosts on Airbnb. Log in with your email address, Facebook, or Google."/><meta property="og:type" content="website"/><meta property="og:image" content="https://a0.muscache.com/im/pictures/fe7217ff-0b24-438d-880d-b94722c75bf5.jpg"/><meta name="robots" content="noindex, nofollow"/><meta name="description" content="Join a global community of travelers and local hosts on Airbnb. Log in with your email address, Facebook, or Google."/><title>Log In / Sign Up - Airbnb</title><link rel="manifest" href="/manifest.json"/><meta name="twitter:card" content="summary"/><meta name="twitter:title" content="Log In / Sign Up - Airbnb"/><meta name="twitter:site" content="@airbnb"/><meta name="twitter:app:name:iphone" content="Airbnb"/><meta name="twitter:app:name:ipad" content="Airbnb"/><meta name="twitter:app:name:googleplay" content="Airbnb"/><meta name="twitter:app:id:iphone" content="401626263"/><meta name="twitter:app:id:ipad" content="401626263"/><meta name="twitter:app:id:googleplay" content="com.airbnb.android"/><meta name="twitter:url" content="https://www.airbnb.com/login"/><script id="data-apollo-state" data-apollo-state="true" type="application/json">{}</script><script id="data-flagger_cdn_experiments" data-flagger_cdn_experiments="true" type="application/json">{"flagger_cdn_experiments":[]}</script><script id="aphrodite-classes" type="application/json">["_is5jnq","_1k81gub","_siy8gh","_vuzcgs","_176ugpa","_3hmsj","_pvfq6t","_z5mecy","_167wsvl","_88xxct","_qrzeuh","_1y9y8er","_7lvai1","_gt7qdv","_2ftibv","_1tpjx2u","_je2ned","_15sn973","_1vk19cb","_1n35162","_kh8wuv","_k3vzc58","_1l63kxf","_88sa87","_tcop0t","_fvfsqm","_bc4egv","_jwti9r","_1udzt2s","_qr5vxk","_15m7xnk","_wxdo12","_1fqnaqg","_1sv27e6","_ar9stc","_jro6t0","_3qymq","_sovp2k","_xmk1z0p","_j8ldew","_pd8gea","_1fx0lfx","_lldyhy","_zlfm26","_1sbp7g1","_1p4noobx","_115qwnm","_1xbvnt9","_j7hlqym"]</script></head><body class="with-new-header"><div id="site-skip-links"><a class="screen-reader-only screen-reader-only-focusable skip-to-content" data-hook="skip-to-content" href="#site-content" tabindex="0">Skip to content</a><span id="popups-everywhere-skip-link"></span></div><div id="smart-banner"></div><noscript><div class="alert alert-with-icon alert-error no-js-alert" data-nosnippet="true"><i class="icon alert-icon icon-alert-alt"></i>We equals www.facebook.com (Facebook)
Source: chromecache_454.2.dr	String found in binary or memory: <span class='fb-custom social-wrapper' data-href='https://www.facebook.com/sharer.php?u=http://workspaceupdates.googleblog.com/2023/04/new-community-features-for-google-chat-and-an-update-currents%20.html'> equals www.facebook.com (Facebook)
Source: chromecache_593.2.dr	String found in binary or memory: M.getElementsByTagName("iframe"),pa=Q.length,oa=0;oa<pa;oa++)if(!v&&c(Q[oa],G.bf)){OL("https://www.youtube.com/iframe_api");v=!0;break}})}}else H(t.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},u,v=!1;Y.__ytl=n;Y.__ytl.o="ytl";Y.__ytl.isVendorTemplate=!0;Y.__ytl.priorityOverride=0;Y.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_391.2.dr, chromecache_406.2.dr, chromecache_593.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),RE=["www.youtube.com","www.youtube-nocookie.com"],SE,TE=!1; equals www.youtube.com (Youtube)
Source: chromecache_391.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=wC(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},zC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_391.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(bF(w,"iframe_api")\|\|bF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!TE&&$E(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_366.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_380.2.dr, chromecache_516.2.dr, chromecache_547.2.dr, chromecache_585.2.dr, chromecache_310.2.dr, chromecache_674.2.dr	String found in binary or memory: return b}PE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),RE=["www.youtube.com","www.youtube-nocookie.com"],SE,TE=!1; equals www.youtube.com (Youtube)
Source: chromecache_723.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_723.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_723.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_587.2.dr	String found in binary or memory: tf=y(["https://sandbox.google.com/tools/feedback/"]),uf=y(["https://www.google.cn/tools/feedback/"]),vf=y(["https://help.youtube.com/tools/feedback/"]),wf=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),xf=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),yf=y(["https://localhost.corp.google.com/inapp/"]),zf=y(["https://localhost.proxy.googlers.com/inapp/"]),Af=S(bf),Bf=[S(cf),S(df)],Cf=[S(ef),S(ff),S(gf),S(hf),S(jf),S(kf),S(lf),S(mf),S(nf),S(of)],Df=[S(pf),S(qf)],Ef= equals www.youtube.com (Youtube)
Source: chromecache_391.2.dr	String found in binary or memory: var dE=function(a,b,c,d,e){var f=UB("fsl",c?"nv.mwt":"mwt",0),g;g=c?UB("fsl","nv.ids",[]):UB("fsl","ids",[]);if(!g.length)return!0;var k=ZB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!EA(k,GA(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: microsoft-visio.en.softonic.com
Source: global traffic	DNS traffic detected: DNS query: sc.sftcdn.net
Source: global traffic	DNS traffic detected: DNS query: sdk.privacy-center.org
Source: global traffic	DNS traffic detected: DNS query: images.sftcdn.net
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rv-assets.softonic.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: z.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: bt.dns-finder.com
Source: global traffic	DNS traffic detected: DNS query: di-images.sftcdn.net
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: lexicon.33across.com
Source: global traffic	DNS traffic detected: DNS query: id.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: aax.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: shb.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: hb-api.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: prebid.media.net
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: ampcid.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: config.aps.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: wct.softonic.com
Source: global traffic	DNS traffic detected: DNS query: cdn-ima.33across.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: api.btloader.com
Source: global traffic	DNS traffic detected: DNS query: cdn.btmessage.com
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: g.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: cdn.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: serve.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: api.btmessage.com
Source: global traffic	DNS traffic detected: DNS query: cdn.id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: s.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: sync.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: api-2-0.spot.im
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: eu-west-1-cs-rtb.openwebmp.com
Source: global traffic	DNS traffic detected: DNS query: gum.aidemsrv.com
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: g4.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: g6.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: hbx.media.net
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: match.deepintent.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: tg.socdm.com
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com

Source: unknown

HTTP traffic detected: POST /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveContent-Length: 172sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://microsoft-visio.en.softonic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://microsoft-visio.en.softonic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 16:01:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Ray: 901ed8922e898c2f-EWRCF-Cache-Status: DYNAMICAccept-Ranges: bytesCache-Control: max-age=0, no-cache, no-storeExpires: Tue, 14 Jan 2025 16:01:40 GMTLast-Modified: Thu, 08 Apr 2021 17:07:08 GMTPragma: no-cacheReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LVig38J3u5%2F5uuBmhyUVjW4gE%2BvpKIX%2FvUDWsDzCt0%2FpsJdw6ZSsqnF4FdsH9S6IAaC15MqpkuF1ZXWheO5jra77IGOo1EUaeHgRX1CnJY850CtmBqb4WTrGU%2Fi4nXg94esIxfPrz46Nmg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflarealt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closex-xss-protection: 1; mode=blockx-content-type-options: nosniffstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-ua-compatible: IE=edgereporting-endpoints: coop-endpoint="https://www.pinterest.com/_/_/coop_report/", coep-endpoint="https://www.pinterest.com/_/_/coep_report/"cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"set-cookie: csrftoken=590c64edbced461144b2ba4fd0aaccb6; path=/; expires=Wed, 14 Jan 2026 16:01:58 GMT; samesite=lax; secureset-cookie: _pinterest_sess=TWc9PSZZQ1AvMFRaTjVVLzBYaytuOWo3RnIwdGczM3FtYmtuUExObXJhN2xEc3A1U3JiZW9nY1BWdXJHZElhcm92bjRUSHNVa29YUGZ3WWVabllaZ0VlV25tVDY0VXlyNFlseEtuZVg1NkR3Qk9YND0mRlRoNjhZSlNVcUJoUU03MmZpWFhQVkxhKzB3PQ==; path=/; expires=Fri, 09 Jan 2026 16:01:58 GMT; domain=.pinterest.com; samesite=none; secure; httponlyset-cookie: _auth=0; path=/; expires=Fri, 09 Jan 2026 16:01:58 GMT; domain=.pinterest.com; secure; httponlyp3p: CP="This is not a P3P policy. See https://www.pinterest.com/_/_/help/articles/pinterest-and-p3p for more info."
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockAtl-Traceid: cc28a44c7cb6482fa2b667a8e45ec94cAtl-Request-Id: cc28a44c-7cb6-482f-a2b6-67a8e45ec94cStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadReport-To: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}Nel: {"failure_fraction": 0.001, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}Access-Control-Allow-Origin: *Content-Length: 19046Content-Type: text/htmlVary: Accept-EncodingServer-Timing: atl-edge;dur=1,atl-edge-internal;dur=3,atl-edge-upstream;dur=0,atl-edge-pop;desc="aws-eu-central-1"Date: Tue, 14 Jan 2025 16:01:59 GMTServer: AtlassianEdgeConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 16:02:00 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: CTK=; Max-Age=0; Path=/; Secure; SameSite=Nonevary: Originvary: Access-Control-Request-Methodvary: Access-Control-Request-Headersx-frame-options: SAMEORIGINcontent-security-policy: upgrade-insecure-requests; frame-ancestors https://indeed.com https://*.indeed.comstrict-transport-security: max-age=86400pragma: no-cacheCache-Control: no-store, no-cache, must-revalidate, privateexpires: Tue, 14 Jan 2025 16:01:00 GMTcontent-language: en-USCF-Cache-Status: DYNAMICSet-Cookie: CTK=1ihioppc9gcv3800; Domain=.indeed.com; Max-Age=157680000; Path=/; Secure; SameSite=NoneSet-Cookie: SURF=KZXalzr5KlfDyUG5QudsaSJcr3vpFfiH; Domain=.indeed.com; Expires=Tue, 21 Jan 2025 16:02:00 GMT; Path=/; Secure; HttpOnlySet-Cookie: __cf_bm=FRldv7M3PgGb6veKCQcDytPfvLsxpe_R2VDTmuEP8Q8-1736870520-1.0.1.1-nRKLr.UbY111WVuxhNKLS_WBDKFjqDMy8hO04IaEHfGvf_l.SMBIV95a2DaG09MYREoSGkP1f_hwn3XfV9Wvkg; path=/; expires=Tue, 14-Jan-25 16:32:00 GMT; domain=.indeed.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: __cflb=0H28v9ueys8DmBCU6XVKET5P25SoAHypsP1iSYG4mwJ; SameSite=None; Secure; path=/; expires=Wed, 15-Jan-25 15:02:00 GMT; HttpOnly
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 718Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMA3af0XEMupJ4ACC57vQ==X-DD-B: 1Set-Cookie: datadome=gSxLFsUkjWr95DEZ9fvnSza~3waXPl9pD9DIY0mdfFqyVsa6TfJijNk85lRMW4JCkKeZIm4FQj_BSgnkEGxHZMzSM1hLq9vXt9AJYRNzOMdnJxXNSdwc3TqKgITLUiCV; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Tue, 14 Jan 2025 16:02:33 GMTVia: 1.1 varnishPaypal-Debug-Id: f472273c3fdccStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740040-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1736870554.831270,VS0,VE19set-cookie: ddbc=1; secure; httponlyServer-Timing: content-encoding;desc="",x-cdn;desc="fastly"

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://microsoft-visio.en.softonic.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8964 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=13704 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8964 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=13704 --field-trial-handle=2068,i,11976969000861237233,11345158357843196527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://cdn.protectonow.com/lottie_2_a_1735132522.json	0%	Avira URL Cloud	safe
https://cdn.protectonow.com/ext/checkmark-chrome_1698059071.svg+xml	0%	Avira URL Cloud	safe
https://cdn.protectonow.com/ext/stticon_1735726475.png	0%	Avira URL Cloud	safe
https://dashboard-production-c.squarecdn.com	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	142.250.185.98	true	false	high
um.simpli.fi	35.204.158.49	true	false	high
global.px.quantserve.com	91.228.74.244	true	false	high
ssum.casalemedia.com	104.18.26.193	true	false	high
live.primis.tech	13.32.99.104	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
bttrack.com	192.132.33.68	true	false	high
mwzeom.zeotap.com	104.22.50.98	true	false	high
sync.intentiq.com	3.160.150.30	true	false	high
csync.copper6.com	80.77.84.96	true	false	high
dckrl2e5yf7xg.cloudfront.net	18.245.46.117	true	false	high
id.rlcdn.com	35.244.174.68	true	false	high
match.adsrvr.org	15.197.193.217	true	false	high
dsp-cookie.adfarm1.adition.com	80.82.210.217	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	35.175.87.20	true	false	high
pagead-googlehosted.l.google.com	142.250.181.225	true	false	high
creativecdn.com	185.184.8.90	true	false	high
chromewebstore.google.com	142.250.185.206	true	false	high
uip.semasio.net	77.243.51.122	true	false	high
syndicatedsearch.goog	142.250.185.78	true	false	high
m.deepintent.com	169.197.150.7	true	false	high
nld-prebid.a-mx.net	163.5.194.33	true	false	high
pixel.onaudience.com	54.38.113.6	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.3.93	true	false	high
ssum-sec.casalemedia.com	104.18.27.193	true	false	high
reddit.map.fastly.net	151.101.65.140	true	false	high
eu.battle.net	37.244.28.102	true	false	high
clickdistrict-stable-europe-west4.pumpkin.uverse.iponweb.net	34.1.230.247	true	false	high
rtb.adgrx.com	52.19.224.221	true	false	high
config.aps.amazon-adsystem.com	18.245.31.9	true	false	high
bidberry.net	57.129.39.243	true	false	high
id.crwdcntrl.net	52.212.180.213	true	false	high
hbx.media.net	23.212.88.20	true	false	high
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.67	true	false	high
nlb-dflb-496f722d06cc67e2.elb.eu-north-1.amazonaws.com	13.50.192.155	true	false	high
api.wecantrack.com	172.67.74.173	true	false	high
hde.tynt.com	67.202.105.33	true	false	high
pixel-eu.onaudience.com	54.38.113.8	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
store.steampowered.com	95.101.149.47	true	false	high
spug-lhrc.pubmnet.com	185.64.190.81	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
rtb-csync-euw2.smartadserver.com	164.132.25.184	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
blogspot.l.googleusercontent.com	216.58.206.33	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
imgsync-amsfpairbc.pubmnet.com	198.47.127.18	true	false	high
ad-delivery.net	104.26.3.70	true	false	high
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
match.adsby.bidtheatre.com	188.166.17.21	true	false	high
sync-sc-main-was.aniview.com	172.240.45.96	true	false	high
500px.com	18.172.112.126	true	false	high
euob.7roundprince.com	18.245.31.92	true	false	high
sync.1rx.io	46.228.174.117	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	108.128.174.112	true	false	high
idaas-ext.cph.liveintent.com	3.218.55.33	true	false	high
partners-1864332697.us-east-1.elb.amazonaws.com	52.3.83.233	true	false	high
ow-amsc.pubmnet.com	185.64.189.116	true	false	high
d1mee2k02h94hw.cloudfront.net	3.167.227.87	true	false	high
star-mini.c10r.facebook.com	157.240.253.35	true	false	high
nydc1.outbrain.org	70.42.32.191	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
ampcid.google.com	142.250.184.238	true	false	high
github.com	140.82.121.3	true	false	high
ow-canary-va1.pubmatic.com	207.65.36.103	true	false	high
d1jvc9b8z3vcjs.cloudfront.net	18.244.21.227	true	false	high
analytics-alv.google.com	216.239.32.181	true	false	high
prod.pinterest.global.map.fastly.net	151.101.64.84	true	false	high
prod.appnexus.map.fastly.net	151.101.65.108	true	false	high
shb.richaudience.com	148.251.85.209	true	false	high
g.protectonow.com	172.67.200.191	true	false	unknown
bt.dns-finder.com	104.21.48.1	true	false	high
www.tumblr.com	192.0.77.40	true	false	high
htlb.casalemedia.com	104.18.27.193	true	false	high
usersync.gumgum.com	34.247.233.198	true	false	high
ps.eyeota.net	52.57.150.20	true	false	high
gum.aidemsrv.com	104.18.7.198	true	false	high
cdn.btmessage.com	172.67.74.232	true	false	high
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	18.202.88.130	true	false	high
get4.protectonow.com	172.67.200.191	true	false	high
plus.google.com	142.250.185.238	true	false	high
pxl.iqm.com	54.88.142.103	true	false	high
adizio-stable-europe-west1.pumpkin.uverse.iponweb.net	35.206.140.87	true	false	high
ds-ats.member.g02.yahoodns.net	67.195.204.151	true	false	high
play.google.com	142.250.185.78	true	false	high
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	high
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	high
www-env.dropbox-dns.com	162.125.66.18	true	false	high
lexicon.33across.com	35.244.193.51	true	false	high
cs.yellowblue.io	52.31.226.57	true	false	high
match-eu-central-1-ecs.sharethrough.com	18.184.206.66	true	false	high
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
k8s-kongow-generalp-4b9a3bfec6-974801183.us-east-1.elb.amazonaws.com	34.195.142.83	true	false	high
id5-sync.com	162.19.138.83	true	false	high
prebid.media.net	34.120.63.153	true	false	high
g4.bidbrain.app	34.8.123.242	true	false	high
stats.g.doubleclick.net	108.177.15.155	true	false	high
cdn.w55c.net	35.210.130.15	true	false	high

Name	Malicious	Antivirus Detection	Reputation
https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=0&gdpr_consent=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dfef12232-5f79-444b-bd75-f4d22476fca4%26bidder%3Dindex_rtb%26uid%3D	false		high
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=21649297&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=vb6pzhv&ttd_tpi=1&gdpr=0	false		high
https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=726cb1bf-9fd3-ca67-1832-160ce1497bef	false		high
https://visitor.omnitagjs.com/visitor/sync?name=AIDEM&ttl=720&visitor=&gdpr=0&gdpr_consent=&uid=AAFyw07PDRUAABW6tGVPVA	false		high
https://cdn.bidbrain.app/ng-assets/creative/assets/index-5333d910.js	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false		high
https://sc.sftcdn.net/scripts/chunk4-8baadb.mjs	false		high
https://aax-eu.amazon-adsystem.com/s/ecm3?id=KAFBABZHifxgcsEFSaqmP500&ex=sovrn.com&gdpr=0&gdpr_consent=	false		high
https://cdn.protectonow.com/lottie_2_a_1735132522.json	false	Avira URL Cloud: safe	unknown
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5141210833809075817	false		high
https://usersync.gumgum.com/usersync?b=adf&i=6871813547619617838&gdpr=0&gdpr_consent=	false		high
https://b1sync.zemanta.com/usersync/medianet/?puid=3798720936406173000V10&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D	false		high
https://dsum-sec.casalemedia.com/rrum?cm_dsp_id=178&external_user_id=66a0233d-032d-42f9-995b-276ff3dfeb7c&cb=https://pxl.iqm.com/i/ck/indexch?cmid=	false		high
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=752EF183-2EFE-4640-8487-1A2E07ED43A9&redir=true&gdpr=0&gdpr_consent=	false		high
https://id5-sync.com/c/286/441/2/8.gif?puid=e_33c42140-717c-478c-b5d2-55b417259425&gdpr=0&gdpr_consent=	false		high
https://visitor.omnitagjs.com/visitor/sync?name=ANIVIEW&ttl=720&uid=e8ecb87ff2ef3a3b16ba16c51e7986ac&visitor=25cae47c-5a3d-4afc-8a27-3205ebca22c7&gdpr=0&gdpr_consent=	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8zM2M0MjE0MC03MTdjLTQ3OGMtYjVkMi01NWI0MTcyNTk0MjU=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false		high
https://visitor-ow.omnitagjs.com/visitor/bsync?gdpr=0&gdpr_consent=&name=Openweb_SSP&uid=ee7f7070fcde32ab0ae4be25799fd7f5&url=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40035%26id%3D%7BuserId%7D	false		high
https://visitor.omnitagjs.com/visitor/sync?uid=094e13e3a08b6f25e4d4f7b1fba0b26b&visitor=1OhAIZ66Lyidique3fEQoELoNJDDHjf33KPRGUKlL70&name=RTB_HOUSE&pi=adyoulike&gdpr=0&gdpr_consent=&tc=1	false		high
https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=752EF183-2EFE-4640-8487-1A2E07ED43A9&sInitiator=external&gdpr=0&gdpr_consent=	false		high
https://ib.adnxs.com/prebid/setuid?bidder=rubicon&uid=M5WNUK97-17-EYYN&gdpr=0	false		high
https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1	true		unknown
https://sync.aniview.com/cookiesyncendpoint?biddername=5&auid=&key=M5WNUK97-17-EYYN&gdpr=0&gdpr_consent=undefined	false		high
https://www.amazon.com/ap/signin?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico	false		high
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	false		high
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=index.com&id=Z4aKXdHM50oAACSqBWeJWwAABWcAAAAB	false		high
https://sc.sftcdn.net/fonts/cb75f-83e1c.woff2	false		high
https://cdn.btmessage.com/webfonts43j533.js	false		high
https://ce.lijit.com/merge?pid=84&3pid=Z4aKYgqcWDMo8GdUeYuEG550	false		high
https://dsum-sec.casalemedia.com/crumhttps://dsum-sec.casalemedia.com/crum?cm_dsp_id=235&external_user_id=70c0f315-62e9-48f4-9467-83fff3310871&gdpr=&gdpr_consent=&us_privacy=	false		high
https://visitor-risecode.omnitagjs.com/visitor/bsync?name=risecode&uid=40a3c28f9ffc73ee86df2bac2d2bb390&url=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11609%26id%3D%5BBUYER_ID%5D%0A	false		high
https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent=	false		high
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js	false		high
https://usersync.gumgum.com/usersync?b=pbm&i=752EF183-2EFE-4640-8487-1A2E07ED43A9	false		high
https://bitbucket.org/account/signin/?next=/favicon.ico	false		high
https://500px.com/login?r=%2Ffavicon.ico	false		high
https://idsync.rlcdn.com/709732.gif?partner_uid=66a0233d-032d-42f9-995b-276ff3dfeb7c	false		high
https://wt.rqtrk.eu/?pid=d00044ac-a097-4f82-8dd0-d396cf336696&cb=173687050033267&src=www&type=100&uid=66a0233d-032d-42f9-995b-276ff3dfeb7c&gdpr=0&gdpr_pd=0&sid=0	false		high
https://lh3.googleusercontent.com/49X_jZPODshK81NcE2VTAn7jtIuCGi3bo2PH8UdQ8YV-X-3W8ik7UDMK1DFB7HO4uqZPhfZn6pki3HWeE2DMN204tg=s275-w275-h175	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=3c5f3066-31a8-44db-9ce2-78819c7eca24&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0	false		high
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40021%26id%3D%24UID	false		high
https://rtb.gumgum.com/getuid/id5?r=https%3A%2F%2Fid5-sync.com%2Fc%2F286%2F441%2F2%2F8.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://t.adx.opera.com/pub/sync?pubid=pub11169426274368&coppa=&us_privacy=	false		high
https://onetag-sys.com/match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0	false		high
https://ce.lijit.com/merge?pid=80&3pid=M5WNUKFW-10-J3IA&gdpr=0	false		high
https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D%26biddername%3D72%26pid%3D62f53b2c7850d0786f227f64%26key%3D%7BuserId%7D	false		high
https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=Z4aKXdHM50oAACSqBWeJWwAA%261383&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	false		high
https://eu-west-1-cs-rtb.openwebmp.com/sync-iframe?redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DOPENWEB%26ttl%3D720%26uid%3D9f93135e824096b627ff609f5cdee636%26visitor%3D%7BpartnerId%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://id5-sync.com/g/v2/691.json	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0	false		high
https://lexicon.33across.com/v1/envelope?pid=0013300001kQj1aAAC&src=aps&ver=1.14.0&us_privacy=1---	false		high
https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUQ9KO7A&prvid=2034%2C2033%2C2110%2C2030%2C590%2C273%2C233%2C2028%2C2027%2C236%2C313%2C2025%2C237%2C117%2C636%2C319%2C97%2C55%2C99%2C3012%2C3011%2C3010%2C122%2C201%2C3007%2C246%2C126%2C203%2C404%2C2011%2C2055%2C3022%2C3020%2C251%2C175%2C450%2C2009%2C331%2C178%2C255%2C3018%2C3017%2C214%2C3014%2C77%2C20000%2C38%2C182%2C261%2C141%2C460%2C462%2C222%2C301%2C345%2C225%2C468%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1	false		high
https://a.nel.cloudflare.com/report/v4?s=LVig38J3u5%2F5uuBmhyUVjW4gE%2BvpKIX%2FvUDWsDzCt0%2FpsJdw6ZSsqnF4FdsH9S6IAaC15MqpkuF1ZXWheO5jra77IGOo1EUaeHgRX1CnJY850CtmBqb4WTrGU%2Fi4nXg94esIxfPrz46Nmg%3D%3D	false		high
https://cdn.protectonow.com/ext/checkmark-chrome_1698059071.svg+xml	false	Avira URL Cloud: safe	unknown
https://bh.contextweb.com/bh/rtset?ev=1&gdpr=0&gdpr_consent=&pid=562615&rurl=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11592%26uid%3D%25%25VGUID%25%25&us_privacy=%5BUS_PRIVACY%5D	false		high
https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEDzHm0qOR-QkyQsvxikU8n8&google_cver=1	false		high
https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFGeXcwN1BEUlVBQUJXNnRHVlBWQQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=83830243&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAFyw07PDRUAABW6tGVPVA&gdpr=0&gdpr_consent=	false		high
https://csync.loopme.me/?pubid=11480&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D68c72dd412a8d0f3f6d2276db2509939%26name%3DLOOPME%26visitor%3D%7Bdevice_id%7D&gdpr=0&gdpr_consent=	false		high
https://api.btmessage.com/mw/sign_pbm?w=5299385968099328&bt_env=prod	false		high
https://eb2.3lift.com/getuid?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs.openwebmp.com%2Fcs%3Ffwrd%3D1%26aid%3D40028%26id%3D%24UID	false		high
https://cdn.protectonow.com/ext/stticon_1735726475.png	false	Avira URL Cloud: safe	unknown
https://cs-server-s2s.yellowblue.io/cs?fwrd=1&aid=11563&id=c2bad154-5496-4cd8-937b-c809a8d3644c	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.google.com	chromecache_717.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Currents	chromecache_454.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_409.2.dr, chromecache_489.2.dr	false		high
https://www.blogger.com/feeds/5245696872621940063/posts/default	chromecache_454.2.dr	false		high
https://support.google.com/a/users/answer/11219858	chromecache_454.2.dr	false		high
https://multipassui-production-c.squarecdn.com/assets/vendor-9ad6f4f3605054497b5a2c52aa407cd0.css	chromecache_651.2.dr	false		high
https://cdn.btmessage.com/upload/sw-logo/ef628681-4381-11ef-94eb-42010a80004d	chromecache_464.2.dr, chromecache_763.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_605.2.dr, chromecache_441.2.dr, chromecache_531.2.dr	false		high
https://sync.inmobi.com/oRTB?gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io	chromecache_552.2.dr	false		high
https://ads.stickyadstv.com/user-matching?gdpr=0&gdpr_consent=&id=3663	chromecache_552.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/SAML	chromecache_454.2.dr	false		high
https://a.slack-edge.com/7250118/style/rollup-slack_kit_legacy_adapters.css	chromecache_307.2.dr	false		high
https://github.com/microsoft/clarity	chromecache_318.2.dr, chromecache_518.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Drive%20for%20desktop	chromecache_454.2.dr	false		high
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3	chromecache_368.2.dr	false		high
https://sync.outbrain.com/cookie-sync?p=iqm&uid=66a0233d-032d-42f9-995b-276ff3dfeb7c&initiator=partn	chromecache_752.2.dr, chromecache_436.2.dr, chromecache_448.2.dr, chromecache_589.2.dr, chromecache_340.2.dr, chromecache_338.2.dr	false		high
https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr=	chromecache_329.2.dr, chromecache_751.2.dr, chromecache_608.2.dr, chromecache_302.2.dr, chromecache_661.2.dr, chromecache_370.2.dr, chromecache_611.2.dr, chromecache_598.2.dr, chromecache_672.2.dr, chromecache_610.2.dr	false		high
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs	chromecache_552.2.dr	false		high
http://workspaceupdates.googleblog.com/2023/04/streamlined-file-organization-google-drive-location-p	chromecache_454.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_366.2.dr	false		high
https://slack.com/is	chromecache_307.2.dr	false		high
https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=752EF183-2EFE-4640-8487-1A2E07ED	chromecache_466.2.dr	false		high
https://dashboard-production-c.squarecdn.com	chromecache_651.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_717.2.dr	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11596%	chromecache_552.2.dr	false		high
https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel	chromecache_352.2.dr, chromecache_751.2.dr, chromecache_349.2.dr, chromecache_626.2.dr, chromecache_598.2.dr, chromecache_610.2.dr	false		high
https://cloud.google.com/contact	chromecache_605.2.dr, chromecache_441.2.dr, chromecache_531.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_366.2.dr	false		high
https://www.google.com/recaptcha/api.js	chromecache_382.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
52.209.12.70	rtb.gumgum.com	United States	16509	AMAZON-02US	false
3.218.55.33	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
87.240.132.78	unknown	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
3.160.150.30	sync.intentiq.com	United States	16509	AMAZON-02US	false
87.240.132.72	vk.com	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
151.101.65.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.245.39.216	d2bytcopxu066p.cloudfront.net	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
37.252.171.52	unknown	European Union	29990	ASN-APPNEXUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
18.172.112.126	500px.com	United States	3	MIT-GATEWAYSUS	false
35.214.199.88	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
70.42.32.223	unknown	United States	22075	AS-OUTBRAINUS	false
52.206.247.226	unknown	United States	14618	AMAZON-AESUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.214.138.30	envoy-hl.envoy-csync.core-002-ew4.ov1o.com	United States	19527	GOOGLE-2US	false
52.116.53.150	intadx.com	United States	36351	SOFTLAYERUS	false
141.95.98.64	lb.eu-1-id5-sync.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
104.18.24.18	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
52.215.179.123	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.245.31.92	euob.7roundprince.com	United States	16509	AMAZON-02US	false
185.255.84.152	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
185.255.84.150	hb-api-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
18.202.88.130	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.58.206.33	blogspot.l.googleusercontent.com	United States	15169	GOOGLEUS	false
185.255.84.151	unknown	France	200271	IGUANE-FR	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
54.159.114.154	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
34.195.239.23	cs-server-s2s.yellowblue.io	United States	14618	AMAZON-AESUS	false
87.248.119.251	dcs-ups.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
108.128.174.112	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
13.32.47.193	unknown	United States	16509	AMAZON-02US	false
3.248.162.96	obseu.7roundprince.com	United States	16509	AMAZON-02US	false
151.101.194.214	unknown	United States	54113	FASTLYUS	false
172.217.18.98	unknown	United States	15169	GOOGLEUS	false
18.172.112.4	unknown	United States	3	MIT-GATEWAYSUS	false
178.63.241.79	unknown	Germany	24940	HETZNER-ASDE	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
204.62.12.40	unknown	United States	46636	NATCOWEBUS	false
80.77.84.96	csync.copper6.com	United Kingdom	46636	NATCOWEBUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
52.17.32.26	unknown	United States	16509	AMAZON-02US	false
172.67.41.60	unknown	United States	13335	CLOUDFLARENETUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
151.101.2.214	h2.twitch.map.fastly.net	United States	54113	FASTLYUS	false
95.101.149.47	store.steampowered.com	European Union	20940	AKAMAI-ASN1EU	false
104.22.74.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
57.129.39.243	bidberry.net	Belgium	2686	ATGS-MMD-ASUS	false
172.217.16.130	adclick.g.doubleclick.net	United States	15169	GOOGLEUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
65.9.66.68	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
162.19.138.116	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
37.252.171.21	unknown	European Union	29990	ASN-APPNEXUS	false
108.177.15.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
91.228.74.244	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
151.101.1.91	swls.map.fastly.net	United States	54113	FASTLYUS	false
104.18.37.193	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
18.195.62.177	sonata-notifications.taptapnetworks.com	United States	16509	AMAZON-02US	false
204.62.13.183	sync.contextualadv.com	United States	46636	NATCOWEBUS	false
162.19.138.83	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
148.251.85.209	shb.richaudience.com	Germany	24940	HETZNER-ASDE	false
192.0.77.40	www.tumblr.com	United States	2635	AUTOMATTICUS	false
3.161.82.117	sdk.privacy-center.org	United States	16509	AMAZON-02US	false
18.245.31.9	config.aps.amazon-adsystem.com	United States	16509	AMAZON-02US	false
172.240.45.96	sync-sc-main-was.aniview.com	United States	7979	SERVERS-COMUS	false
172.67.200.191	g.protectonow.com	United States	13335	CLOUDFLARENETUS	false
52.31.168.245	unknown	United States	16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
172.66.0.28	cdn.app.squareup.com	United States	13335	CLOUDFLARENETUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
34.195.142.83	k8s-kongow-generalp-4b9a3bfec6-974801183.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.128.134	unknown	United States	54113	FASTLYUS	false
34.8.123.242	g4.bidbrain.app	United States	2686	ATGS-MMD-ASUS	false
151.101.129.21	unknown	United States	54113	FASTLYUS	false
198.47.127.18	imgsync-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.57.150.20	ps.eyeota.net	United States	16509	AMAZON-02US	false
104.21.50.45	cdn.protectonow.com	United States	13335	CLOUDFLARENETUS	false
172.67.74.232	cdn.btmessage.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
57.128.187.108	pixel.nordicdataresources.net	Belgium	2686	ATGS-MMD-ASUS	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
207.65.36.103	ow-canary-va1.pubmatic.com	United States	6203	ISDN-NETUS	false
34.248.74.5	unknown	United States	16509	AMAZON-02US	false
136.243.39.49	unknown	Germany	24940	HETZNER-ASDE	false
13.32.132.238	unknown	United States	16509	AMAZON-02US	false
81.17.55.117	rtb-csync-euw1.smartadserver.com	Netherlands	24588	NETPROVODOV-ASRU	false
142.250.185.129	unknown	United States	15169	GOOGLEUS	false
54.88.142.103	pxl.iqm.com	United States	14618	AMAZON-AESUS	false
52.95.126.160	unknown	United States	16509	AMAZON-02US	false
52.19.224.221	rtb.adgrx.com	United States	16509	AMAZON-02US	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591063
Start date and time:	2025-01-14 17:00:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://microsoft-visio.en.softonic.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@98/807@871/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	49311
Entropy (8bit):	7.979406406362902
Encrypted:	false
SSDEEP:	1536:HP5U6crB+024IHn/434uejvbpFY2aJywl:H0I0qHn/XuYbp22iywl
MD5:	37BA82B6E19C66190F340A9E4F0F08AB
SHA1:	4BD544D3B6D8086DC6A53E57CD6D22B08B52B7C2
SHA-256:	7E75769EF9D24B4FCBC7CAF167DCDF601EDA2C70BA9434BA895E8F97DEC63AD2
SHA-512:	06A36ACBC7A5E18C304F75CEF183F598536D8FEAB4F717B2015AAF781C6F48B44E2E423F9FC93127CEB223394B4B8A400B4DB266385224DDB90A09236D6C566C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Input	Output
URL: https://microsoft-visio.en.softonic.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://microsoft-visio.en.softonic.com
URL: https://199ea5c655fdf4e4c85644e6b591b788.safeframe... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign code snippet from the Closure Library. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code primarily focuses on user agent detection and data serialization/deserialization, which are common and expected behaviors in web applications. While the code uses some legacy APIs like `XDomainRequest`, these pose only minor risks and are not inherently malicious. Overall, this script is likely part of a legitimate web application and does not demonstrate any suspicious or harmful behavior." }
(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function G(){return w?!!B&&B.brands.length>0:!1}function ea(){return G()?C("Chromium"):(D("Chrome")\|\|D("CriOS"))&&!(G()?0:D("Edge"))\|\|D("Silk")};function fa(a){fa[" "](a);return a}fa[" "]=function(){};!D("Android")\|\|ea();ea();D("Safari")&&(ea()\|\|(G()?0:D("Coast"))\|\|(G()?0:D("Opera"))\|\|(G()?0:D("Edge"))\|\|(G()?C("Microsoft Edge"):D("Edg/"))\|\|G()&&C("Opera"));var ha={},H=null;var ia=new Set;function ja(a,b=!1){a=b&&Symbol.for&&a?Symbol.for(a):a!=null?Symbol(a):Symbol();ia.add(a);return a}var I=ja("jas",!0),ka=ja();var la={},oa={};function pa(a){return!(!a\|\|typeof a!=="object"\|\|a.g!==oa)}function qa(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object}function J(a){return!Array.isArray(a)\|\|a.length?!1:(a[I]\|0)&1?!0:!1};const ra=BigInt(Number.MIN_SAFE_INTEGER),sa=BigInt(Number.MAX_SAFE_INTEGER);function ta(a){if(typeof a!=="boolean"){var b=typeof a;throw Error(`Expected boolean but got ${b!="object"?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(J(a))return}else if(a!=null&&a instanceof Uint8Array){let b="",c=0;const d=a.length-10240;for(;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)}}return a};function wa(a,b,c,d,e){if(a!=null){if(Array.isArray(a))a=J(a)?void 0:e&&(a[I]\|0)&2?a:xa(a,b,c,d!==void 0,e);else if(qa(a)){const f={};for(let g in a)f[g]=wa(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function xa(a,b,c,d,e){const f=d\|\|c?a[I]\|0:0,g=d?!!(f&32):void 0;d=Array.prototype.slice.call(a);for(let l=0;l<d.length;l++)d[l]=wa(d[l],b,c,g,e);c&&((a=(b=aa(ka))?a[b]:void 0)&&(d[ka]=Array.prototype.slice.call(a)),c(f,d));return d}function ya(a){return a.A===la?a.toJSON():va(a)} function za(a){return xa(a,ya,void 0,void 0,!1)};function L(a,b,c){const d=a.l;let e=d[I]\|0;if(e&2)throw Error();Aa(d,e,b,c);return a}function Aa(a,b,c,d){const e=b&512?0:-1,f=c+e;var g=a.length-1;f>=g&&b&256?a[g][c]=d:f<=g?(a[f]=d,b&256&&(a=a[g],c in a&&delete a[c])):d!==void 0&&(g=b>>15&1023\|\|536870912,c>=g?d!=null&&(a[g+e]={[c]:d},a[I]=b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b\|=256;c=d-(b&512?0:-1);if(c>=1024)throw Error("pvtlmt");b=b&-33521665\|(c&1023)<<15}}a[I]=b}this.l=a}toJSON(){const a=!M;try{return a&&(M=za),Ca(this)}finally{a&&(M=void 0)}}};N.prototype.A=la; N.prototype.toString=function(){try{return M=Ba,Ca(this).toString()}finally{M=void 0}}; function Ca(a){var b=a.l;a=M(b);{b=a!==b;let h=a.length;if(h){var c=a[h-1],d=qa(c);d?h--:c=void 0;var e=a;if(d){b:{var f=c;var g;var l=!1;if(f)for(let m in f)isNaN(+m)?(g??(g={}))[m]=f[m]:(d=f[m],Array.isArray(d)&&(J(d)\|\|pa(d)&&d.size===0)&&(d=null),d==null&&(l=!0),d!=null&&((g??(g={}))[m]=d));l\|\|(g=f);if(g)for(let m in g){l=g;break b}l=null}f=l==null?c!=null:l!==c}for(;h>0;h--){g=e[h-1];if(!(g==null\|\|J(g)\|\|pa(g)&&g.size===0))break;var k=!0}if(e!==a\|\|f\|\|k){if(!b)e=Array.prototype.slice.call(e,0,h); else if(k\|\|f\|\|l)e.length=h;l&&e.push(l)}k=e}else k=a}return k};var O=class{cons
URL: https://199ea5c655fdf4e4c85644e6b591b788.safeframe... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided script appears to be a legitimate advertisement-related script from a trusted domain (doubleclick.net). While it uses some legacy APIs like `XDomainRequest`, which pose minor risks, the overall behavior is consistent with typical advertisement and analytics functionality. There are no clear indicators of malicious intent or high-risk activities, so the risk score is assessed as low." }
vu("https://securepubads.g.doubleclick.net/pagead/adview?ai\x3dCOyoJWIqGZ9j0I8iyiM0P9IuOqAW9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTgxMzI4NDQ5NDk0MjE5MzbIAQngAgCoAwHIAwKqBMECT9BMfBljVK_50lSTBPxhG-RjamJLkkheh_igmGhRSywlD5hi_WvFSG_URXxwn1Cy9KBy4uWRkD94WOFlGvX38rV8CTc6dO0BbeUv3OsnyLiqjH0K3XkEmZpk-hPYsv-CxtCmPzx645q7bIEOoqr3glG5GMVNuI2nRijr_dRaRrGNYz8KuSathTpy0DZAlvkBqjNFULgBJPbKFfXWLiAeEcR0TqQJLC2Hh3IFlaqPncgG8V0uNkqECem6mJPObVVBxs5cN1KK5jyNvFWH8FOjpz7ye6Ewe5xgVWGtMCUOCcR7-KIexF2W_UGq7Gm5DG43haDHJdO8LdCk04pPtIiWSFy4P7lmBQ1dNAOcR5AhZDFba1iJRAU91Wr-PCr9L1D6pWKo3zCUbk2xFP6w1Muli0FqYT7-RW-u64q1gTgAZidj4AQBgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOli6v_bjyvWKA4AKA_oLAggBgAwB4g0TCKmj9-PK9YoDFUgZogMd9IUDVeoNEwigpfjjyvWKAxVIGaIDHfSFA1XQFQGAFwGyFx4KGhIUcHViLTgxMzI4NDQ5NDk0MjE5MzYYk9gOGAw\x26sigh\x3duw4CMfOp3yc\x26uach_m\x3d%5BUACH%5D\x26cid\x3dCAQSTgCa7L7d3dIpqApM0tIyAkwr2yFlIEIsvxGDgI1tLbVYYmGwarCuHwz_4Cw98cp6bruyPBcJnDFn7BkAzALU1qyf0xtByAPAcUCCXCOMoBgB")
URL: https://199ea5c655fdf4e4c85644e6b591b788.safeframe... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It appears to be a script related to an advertisement or download promotion, with features like data transmission to external domains, obfuscated URLs, and the use of legacy APIs. While the intent may be legitimate, the implementation lacks transparency and could potentially be used for malicious purposes. Further review is recommended to ensure the script's safety and alignment with user expectations." }
window.SID="d08a0d2d-d290-11ef-8516-d2ade0767875",window.FID="",window.EXP="",window.DOM="microsoft-visio.en.softonic.com",window.CRID="ext_download_prot_smrtsp",window.CNM="ext_download_prot_smrtsp",window.CLICK_URL_ESC_MACRO="https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCiyePWIqGZ9j0I8iyiM0P9IuOqAW9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTgxMzI4NDQ5NDk0MjE5MzbIAQngAgCoAwHIAwKqBMQCT9BMfBljVK_50lSTBPxhG-RjamJLkkheh_igmGhRSywlD5hi_WvFSG_URXxwn1Cy9KBy4uWRkD94WOFlGvX38rV8CTc6dO0BbeUv3OsnyLiqjH0K3XkEmZpk-hPYsv-CxtCmPzx645q7bIEOoqr3glG5GMVNuI2nRijr_dRaRrGNYz8KuSathTpy0DZAlvkBqjNFULgBJPbKFfXWLiAeEcR0TqQJLC2Hh3IFlaqPncgG8V0uNkqECem6mJPObVVBxs5cN1KK5jyNvFWH8FOjpz7ye6Ewe5xgVWGtMCUOCcR7-KIexF2W_UGq7Gm5DG43haDHJdO8LdCk04pPtIiWSFy4P7lmBQ1dNAOcR5AhZDFba1iJRAU91Wr-PGj_DsJiYYusLNnHgN6nyUW98sFzgm9yrMB1U7IfMKWZmaLhlyOQtbEz4AQBgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOli6v_bjyvWKA_oLAggBgAwB4g0TCKmj9-PK9YoDFUgZogMd9IUDVeoNEwigpfjjyvWKAxVIGaIDHfSFA1XQFQGAFwGyFwIYDA%26num%3D1%26sig%3DAOD64_2_Uyt-U44QpkJE-1bABjdXZ1-eAw%26client%3Dca-pub-8132844949421936%26adurl%3D",window.GID="",window.UID="",window.IS_APP="0",window.IS_INTERSTITIAL="0",window.IS_DEMO=0,window.PARAMS_B64="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
URL: https://199ea5c655fdf4e4c85644e6b591b788.safeframe... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a part of the Closure Library, which is a well-known and trusted JavaScript library maintained by Google. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code seems to be focused on handling URLs and creating safe script URLs, which are common and legitimate use cases. Overall, this script poses a low risk and is likely part of a larger, legitimate application." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/ SPDX-License-Identifier: Apache-2.0 / var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={message:fa(v)};var c=void 0===c?{}:c;this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta=c};var w=function(a){w[" "](a);return a};w[" "]=function(){};var ia=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");var ja=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)};var ka=RegExp("^https?://(\\w\|-)+\\.cdn\\.ampproject\\.(net\|org)(\\?\|/\|$)"),ma=function(){var a=la;this.g=x;this.h=a},na=function(a,b){this.url=a;this.j=!!b;this.depth=null};function oa(a){f.google_image_requests\|\|(f.google_image_requests=[]);var b=f.document;b=void 0===b?document:b;b=b.createElement("img");b.src=a;f.google_image_requests.push(b)};var y=function(){this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"==typeof c&&(c=c.split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))},sa=function(a){var b="https://pagead2.googlesyndication.com/pagead/gen_204?id=jserror&",c=ra(a)-27;if(0>c)return"";a.g.sort(function(za,Aa){return za-Aa});for(var d=null,e="",k=0;k<a.g.length;k++)for(var g=a.g[k],A=a.h[g],O=0;O<A.length;O++){if(!c){d=null==d?g:d;break}var q=qa(A[O],a.i,",$");if(q){q=e+q;if(c>=q.length){c-=q.length;b+=q;e=a.i;break}d=null==d?g:d}}a="";null!=d&&(a=e+"trn="+d);return b+a},ra=function(a){var b=1,c;for(c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1};var ta=function(a){if(.01>Math.random())try{if(a instanceof y)var b=a;else b=new y,ja(a,function(d,e){var k=b,g=k.o++;d=z(e,d);k.g.push(g);k.h[g]=d});var c=sa(b);c&&oa(c)}catch(d){}};var fa=function(a){var b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n")}catch(e){b=c}}return b};({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js")));({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S])$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secureframe\.doubleclick\.net\|[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.usercontent\.goog)$/,wa=/^(pagead2\.googlesyndication\.com\|googleads\.g\.doubleclick\.net)$/;var xa=function(a){return function(b){var c=a.hostname,d=va.test(c)\|\|wa.test(c);c=[c];var e=r;r=void 0;if(!d){if(e)throw Error(e());if(c&&0<c.length)throw Error("["+c.map(String).join(",")+"]");throw Error(String(d));}b=(d=aa())?d
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of an advertising or analytics platform. It uses common patterns like a command queue and callbacks to manage various advertising-related functions. The data being sent to the `dataLayer` object is likely for analytics and tracking purposes, which is a common practice. While the code could be improved in terms of modularity and readability, there are no clear indicators of malicious intent or high-risk behaviors." }
!(function(t) { t.revamp = t.revamp \|\| {}; t.revamp.cmd = []; function queueCommand(commandName, args) { t.revamp.cmd.push([commandName, args]); }; t.revamp.registerEventTime = t.revamp.registerEventTime \|\| function() { queueCommand('registerEventTime', arguments); }; t.revamp.displaySlots = t.revamp.displaySlots \|\| function () { queueCommand('displayDeferredSlots', arguments); }; t.revamp.getFPValues = t.revamp.getFPValues \|\| function () { queueCommand('getFPValues', arguments); }; })(window); window.revamp.registerEventTime(['startLoadingAt', Date.now()]); window.revamp.getFPValues(function(ad_session_id, pv) { window.dataLayer = window.dataLayer \|\| []; window.dataLayer.push({ ad_session_id: ad_session_id, pv: pv }); window.dataLayer.push({ event: 'ad_session_id_loaded', ad_session_id: ad_session_id, pv: pv, }); });
URL: https://199ea5c655fdf4e4c85644e6b591b788.safeframe... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including the use of obfuscated URLs and potential data exfiltration. The script appears to be redirecting the user to a suspicious domain (microsoft-visio.en.softonic.com) and collecting various parameters, which could be indicative of malicious activity. While the intent is not entirely clear, the overall behavior of the script raises significant security concerns and warrants further investigation." }
vu("https://g.bidbrain.app/rtimp?a\x3dimp\x26cr\x3dext_download_prot_smrtsp\x26d\x3dmicrosoft-visio.en.softonic.com\x26gid\x3d\x26im\x3dJASSPPwpXnOq_0vuz2PB9xuGScHywQQ4qIcLWkbQ7gPKXXs1hpNLnmUGw1m9hiZagx4ciHC-wVzOfMX2nmzfiqZ8ZzyGpOYeGwzn4klN3mbODhoDTOQ6WZSaLhob4SmeQU6Pj87iNSowYsML2COyz8Kyg0nlhhA6K0IDin5WOxM2Nv1GbxijfC4G3A1ooyMxyx8lftqO_yfjs3Jc4pkb8AJMHEzLo9PqFRtPaesvweXuUiow5iInOUWr9TOdR0GUC6Q_6xH5mZz-9bm8YBrQbgLN6rX65xs57JTD8R8lvaWMQ40vnCmGZxVQlqdiFJnDvVp_aRdY1liMmrNT5_mH-r6FimHeHhcx9H4UjiKWN4VbUix9b7pFe8DmZX3QhAyjV6dPxc4bUJhmyTLd8HrKEw\x26p\x3dZ4aKWAAI-lgDohlIAAOF9G-9GVYStrUQfA2EJA\x26sid\x3dd08a0d2d-d290-11ef-8516-d2ade0767875")
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a session tracking script that checks the duration of a user's session and triggers a 'session_duration_conv' event if the session duration exceeds a predefined threshold. This behavior is consistent with typical analytics and session management functionality, and the script does not exhibit any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script uses standard cookie-based session tracking, which is a common practice. Overall, the script seems to be a legitimate implementation of session tracking functionality with no clear signs of malicious intent." }
var sessionDurationThreshold=120;function gtm_getCookie(a){var b=decodeURIComponent(document.cookie);b=b.split(";");return b=b.find(function(d){return a==d.trim().substring(0,a.length)})} (function(){var a=gtm_getCookie("gtm_session_start"),b=gtm_getCookie("gtm_session_threshold"),d=new Date,e=d.getTime();d=1E3*sessionDurationThreshold-1;var c=new Date;c.setTime(c.getTime()+18E5);c="expires\x3d"+c.toUTCString();a?b\|\|(a=a.trim().slice(18),a=e-a,a>d&&(window.dataLayer=window.dataLayer\|\|[],dataLayer.push({event:"session_duration_conv"}),document.cookie="gtm_session_threshold\x3dtrue;"+c+";path\x3d/")):document.cookie="gtm_session_start\x3d"+e+";"+c+";path\x3d/"})();
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a tracking and analytics script with some legacy practices, but no clear indicators of malicious intent. The script is primarily focused on sending event data to a Google Analytics 4 (GA4) data layer, which is a common practice for web analytics. While it uses some outdated APIs like `XDomainRequest`, the overall behavior is consistent with legitimate analytics and telemetry functionality. There are no signs of dynamic code execution, data exfiltration, or redirects to suspicious domains, which are the high-risk indicators. The script may benefit from some code modernization, but it does not appear to pose a significant security risk." }
(function () { window.revampAdRendered = window.revampAdRendered \|\| []; window.dataLayer = window.dataLayer \|\| []; window.dataLayer.push({ di_status: 'revamp_not_loaded', }); document.addEventListener("rv:adRendered", function(event) { var detail = event.detail; window.revampAdRendered.push(detail); }); window.eventTracker = window.eventTracker \|\| {}; eventTracker.cmd = eventTracker.cmd \|\| []; var eventBundleMapping = { display: { ga4_event: 'di_show' }, download: { ga4_event: 'di_download' }, error: { labelFn: (ev) => ev.error \|\| 'unknown error', } }; var eventPopupMapping = { revampLoaded: { ga4_di_status: 'revamp_loaded' }, flowInitiated: { ga4_di_status: 'flow_initiated' }, diDisabledByMeta: { ga4_di_status: 'disabled_by_meta' }, diHasBeenShown: { ga4_di_status: 'has_been_shown' }, diHasNotPriority: { ga4_di_status: 'has_not_priority' }, diDisabledForPageType: { ga4_di_status: 'disabled_for_page_type' }, diDisabledInvalidPublisherConfig: { ga4_di_status: 'disabled_invalid_publisher_config' }, gettingContext: { ga4_di_status: 'getting_context' }, getCampaign: { ga4_event: 'di_request' }, diErrorRenderingRootElement: { ga4_di_status: 'error_rendering_root_element' }, diSetModalVisible: { ga4_di_status: 'set_modal_visible' }, diPreRenderDone: { ga4_di_status: 'pre_render_done' }, close: { ga4_event: 'di_click', ga4_clicked: 'close' }, continue: { ga4_event: 'di_click', ga4_clicked: 'continue' }, display: { ga4_event: 'di_show' }, downloadRecommended: { ga4_event: 'di_download', download_type: 'download' }, downloadLandingPage: { ga4_event: 'di_download', download_type: 'download_visit_website' }, home: { ga4_event: 'di_click', ga4_clicked: 'home' }, support: { ga4_event: 'di_click', ga4_clicked: 'support' }, error: { labelFn: (ev) => ev.error \|\| 'unknown error', } }; function trackBundleGA4Event(diEvent) { var eventMapped = eventBundleMapping[diEvent.kind]; if (!eventMapped) { return; } if (diEvent.kind === 'error') { window.dataLayer.push({ event: 'di_error', error_message: diEvent.error \|\| 'unknown error', di_status: 'error', }); } else { window.dataLayer.push({ event: eventMapped.ga4_event, di_campaign_name: diEvent.campaign?.id ? diEvent.campaign.id : 'n/a', di_placement: diEvent.campaign?.placementId ? diEvent.campaign.placementId : 'n/a', campaign_delivery_logic: diEvent.campaign?.logic ? diEvent.campaign.logic : 'n/a', detected_country: diEvent.countryCode, }); } } function trackPopupGA4Event(diEvent) { var eventMapped = eventPopupMapping[diEvent.kind]; if (!eventMapped) { return; } if (diEvent.kind === 'error') { window.dataLayer.push({ event: 'di_error', error_message: diEvent.error \|\| 'unknown error', di_status: 'error', }); } else if (diEvent.kind === 'getCampaign') { const suitableCampaigns = (diEvent.campaignsResult?.suitableCampaigns \|\| []).map(({ id }) => id); const winnerCampaign = diEvent.campaignsResult?.winnerCampaign?.id ? 'has_winner_campaign' : 'has_not_winner_campaign'; window.dataLayer.push({ event: eventMapped.ga4_event, detected_country: diEvent.countryCode, suitable_campaigns: suitableCampaigns, di_status: suitableCampaigns.length === 0 ? 'non_suitable_campaign' : winnerCampaign, }); } else if (['revampLoaded', 'flowInitiated', 'diDisabledByMeta', 'diHasBeenShown', 'diHasNotPriority', 'diDisabledForPageType', 'diDisabledInvalidPublisherConfig', 'gettingContext', 'diErrorRenderingRootElement', 'diPreRenderDone', 'diSetModalVisible' ].includ
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a CMP (Consent Management Platform) stub, which is a common practice for implementing consent management functionality on websites. While the code contains some behaviors that could be considered moderate-risk, such as using the `postMessage` API to communicate with an external frame, the overall intent seems to be legitimate and aligned with typical consent management use cases. Further review of the actual CMP implementation and the domains it interacts with would be necessary to provide a more accurate risk assessment." }
// CMP stub (function(){function a(e){if(!window.frames[e]){if(document.body&&document.body.firstChild){var t=document.body;var n=document.createElement("iframe");n.style.display="none";n.name=e;n.title=e;t.insertBefore(n,t.firstChild)} else{setTimeout(function(){a(e)},5)}}}function e(n,r,o,c,s){function e(e,t,n,a){if(typeof n!=="function"){return}if(!window[r]){window[r]=[]}var i=false;if(s){i=s(e,t,n)}if(!i){window[r].push({command:e,parameter:t,callback:n,version:a})}}e.stub=true;function t(a){if(!window[n]\|\|window[n].stub!==true){return}if(!a.data){return} var i=typeof a.data==="string";var e;try{e=i?JSON.parse(a.data):a.data}catch(t){return}if(e[o]){var r=e[o];window[n](r.command,r.parameter,function(e,t){var n={};n[c]={returnValue:e,success:t,callId:r.callId};a.source.postMessage(i?JSON.stringify(n):n,"*")},r.version)}} if(typeof window[n]!=="function"){window[n]=e;if(window.addEventListener){window.addEventListener("message",t,false)}else{window.attachEvent("onmessage",t)}}}e("__tcfapi","__tcfapiBuffer","__tcfapiCall","__tcfapiReturn");a("__tcfapiLocator");})();
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that loads a module-based script or a fallback script for older browsers. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is loading a script from a domain that appears to be associated with Softonic, a reputable software publisher. The script is also using standard practices like cross-origin requests and asynchronous loading, which are common for modern web development. Overall, this script seems to be a benign and well-implemented script with no clear malicious intent." }
(function () { function isModuleScriptSupported(scriptElement) { if ('supports' in HTMLScriptElement) { return HTMLScriptElement.supports('module'); } return 'noModule' in scriptElement; } var revampScript = document.createElement('script'); revampScript.crossorigin = 'anonymous'; if (isModuleScriptSupported(revampScript)) { revampScript.src = '//rv-assets.softonic.com/publishers/softonic.js?modern=1'; revampScript.setAttribute('type', 'module'); } else { revampScript.src = '//rv-assets.softonic.com/publishers/softonic.js'; } revampScript.setAttribute('async', ''); revampScript.addEventListener('load', () => window.revamp.registerEventTime(['revampScriptLoadedAt', Date.now()])); document.head.appendChild(revampScript); })();
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Visio" ] }
	{ "brands": [ "Microsoft Visio" ] }
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Visio" ] }
	{ "brands": [ "Microsoft Visio" ] }
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click continue to go to the Chrome Web Store and install our Chrome Extension. This Extension modifies your default search provider to use our custom web search to provide you a better search experience.", "prominent_button_name": "continue with extension", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "brands": [ "Softonic", "Microsoft Visio" ] }
	{ "brands": [ "Softonic", "Microsoft Visio" ] }
URL: https://microsoft-visio.en.softonic.com/?ex=RAMP-2639.1 Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	94129
Entropy (8bit):	5.504671270700424
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QqSYTZ02LKVsdmpyKcicIjyQjMpR7:RIT7OXVs9ZVKBvYj8wKcHIjo
MD5:	8E7EB7535EEFB9B41480F9135543AB62
SHA1:	0BB3CCD3CC37F44B8A668ACBBE2979D94237BB3D
SHA-256:	47EDB251FFB641EF8D6BE095D198AF9E0E3FA42DAAAA73C58E631210F1620F01
SHA-512:	462DA5E843E6F78401A49CF74D91021AC5CB6F67B42436B7570944CE8122F8AABBB2CCB94E18EB0F5F86B08581D0FD5E1703E9701A3CAFB96DAA84A1234E10BD
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:22 UTC	674	OUT	GET / HTTP/1.1 Host: microsoft-visio.en.softonic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:22 UTC	1349	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 x-version: 1.6449.0 x-detected-as: desktop referrer-policy: strict-origin-when-cross-origin x-page-id: app cache-control: no-cache,no-store,max-age=0,must-revalidate location: ?ex=RAMP-2639.1 content-language: en-US x-request-id: 3843363926 content-type: text/html; charset=utf-8 x-rendered-as: desktop x-frame-options: sameorigin set-cookie: _usr_orgn=direct; Domain=en.softonic.com; Path=/ set-cookie: _swo_vis=RAMP-2639.1; Max-Age=1800; Expires=Tue, 14 Jan 2025 16:31:22 GMT; Secure; Domain=en.softonic.com; Path=/ set-cookie: _swo_pos=298; Max-Age=1296000; Expires=Wed, 29 Jan 2025 16:01:22 GMT; Secure; Domain=en.softonic.com; Path=/ permissions-policy: accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=() x-content-type-options: nosniff x-xss-protection: 1 x-is-bot: false content-security-policy: upgrade-insecure-requests Accept-Ranges: bytes Date: Tue, 14 Jan 2025 16:01:22 GMT Vary: user-agent Strict-Transport-Security: max-age=63072000; includeSubDomains; preload access-control-expose-headers: x-country-code,x-region x-country-code: US x-region: NY
2025-01-14 16:01:22 UTC	151	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 73 77 6f 5f 70 6f 73 3d 35 31 30 3b 20 64 6f 6d 61 69 6e 3d 73 6f 66 74 6f 6e 69 63 3b 20 6d 61 78 2d 61 67 65 3d 31 32 39 36 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 37 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _swo_pos=510; domain=softonic; max-age=1296000; path=/; securealt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:22 UTC	751	OUT	GET /?ex=RAMP-2639.1 HTTP/1.1 Host: microsoft-visio.en.softonic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usr_orgn=direct; _swo_vis=RAMP-2639.1; _swo_pos=298
2025-01-14 16:01:23 UTC	1339	IN	HTTP/1.1 200 OK Connection: close Content-Length: 334492 x-version: 1.6449.0 x-detected-as: desktop referrer-policy: strict-origin-when-cross-origin x-page-id: app cache-control: no-cache,no-store,max-age=0,must-revalidate content-language: en-US accept-ranges: bytes x-request-id: 338936371 content-type: text/html; charset=utf-8 x-rendered-as: desktop x-frame-options: sameorigin set-cookie: _usr_orgn=direct; Domain=en.softonic.com; Path=/ permissions-policy: accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=() x-content-type-options: nosniff x-xss-protection: 1 x-is-bot: false content-security-policy: upgrade-insecure-requests Date: Tue, 14 Jan 2025 16:01:23 GMT Vary: user-agent,accept-encoding, Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload access-control-expose-headers: x-country-code,x-region x-country-code: US x-region: NY Set-Cookie: _swo_pos=298; domain=softonic; max-age=1296000; path=/; secure Set-Cookie: _swo_vis=RAMP-2639.1; domain=softonic; max-age=1800; path=/; secure alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 56 69 73 69 6f 20 2d 20 20 44 6f 77 6e 6c 6f 61 64 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Microsoft Visio - Download</title><link rel="preconnect" href="h
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 64 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 2d 76 69 73 69 6f 2e 64 65 2e 73 6f 66 74 6f 6e 69 63 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 2d 76 69 73 69 6f 2e 73 6f 66 74 6f 6e 69 63 2e 63 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 2d 76 69 73 69 6f 2e 66 72 2e 73 6f 66 74 6f 6e 69 63 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 Data Ascii: ternate" hreflang="de" href="https://microsoft-visio.de.softonic.com"><link rel="alternate" hreflang="zh" href="https://microsoft-visio.softonic.cn"><link rel="alternate" hreflang="fr" href="https://microsoft-visio.fr.softonic.com"><link rel="alternate" h
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 2d 76 69 73 69 6f 2e 65 6e 2e 73 6f 66 74 6f 6e 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 6f 66 74 6f 6e 69 63 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 70 75 62 6c 69 73 68 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 53 6f 66 74 6f 6e 69 63 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 Data Ascii: ="og:url" content="https://microsoft-visio.en.softonic.com"><meta property="og:site_name" content="Softonic"><meta property="og:type" content="article"><meta property="article:publisher" content="https://www.facebook.com/Softonic"><meta property="fb:app_i
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 64 73 6b 5f 61 66 73 5f 65 6e 5f 70 70 2b 63 32 5f 73 66 74 5f 64 73 6b 5f 6e 6f 6e 2d 6d 61 72 74 65 63 68 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 72 76 2d 72 65 76 69 65 77 2d 76 65 63 6e 61 22 20 63 6f 6e 74 65 6e 74 3d 22 66 61 6c 73 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 72 76 2d 63 6f 6e 74 65 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 72 69 63 68 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 72 76 2d 68 6f 73 74 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 66 61 6c 73 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 72 76 2d 62 75 6e 64 6c 65 2d 64 69 73 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 75 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 72 76 2d 64 Data Ascii: l" content="dsk_afs_en_pp+c2_sft_dsk_non-martech"><meta property="rv-review-vecna" content="false"><meta property="rv-content" content="rich"><meta property="rv-hosted" content="false"><meta property="rv-bundle-disable" content="true"><meta property="rv-d
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 75 65 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 61 67 65 49 64 22 3a 22 61 70 70 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 72 65 67 69 6f 6e 22 3a 22 41 22 2c 22 72 6f 6f 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 2e 73 6f 66 74 6f 6e 69 63 2e 63 6f 6d 22 2c 22 73 69 74 65 44 6f 6d 61 69 6e 22 3a 22 65 6e 2e 73 6f 66 74 6f 6e 69 63 2e 63 6f 6d 22 2c 22 73 74 61 74 69 63 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 2e 73 66 74 63 64 6e 2e 6e 65 74 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 63 6c 61 73 73 3d 22 73 63 72 69 70 74 2d 70 61 72 61 6d 73 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 6e 61 6d 65 3d 22 77 6f 72 64 43 6f 75 6e 74 22 3e Data Ascii: ue,"locale":"en-US","pageId":"app","protocol":"https","region":"A","rootUrl":"https://en.softonic.com","siteDomain":"en.softonic.com","staticsBaseUrl":"https://sc.sftcdn.net"}</script><script class="script-params" type="application/json" name="wordCount">
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 3a 6e 2c 22 2a 22 29 7d 2c 72 2e 76 65 72 73 69 6f 6e 29 7d 7d 0a 20 20 20 20 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 6e 5d 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 77 69 6e 64 6f 77 5b 6e 5d 3d 65 3b 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 74 2c 66 61 6c 73 65 29 7d 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 74 29 7d 7d 7d 65 28 22 5f 5f 74 63 66 61 70 69 22 2c 22 5f 5f 74 63 66 61 70 69 42 75 66 66 65 72 22 2c 22 5f 5f 74 63 66 61 70 69 43 61 6c 6c 22 2c 22 5f 5f 74 63 66 61 70 69 Data Ascii: JSON.stringify(n):n,"*")},r.version)}} if(typeof window[n]!=="function"){window[n]=e;if(window.addEventListener){window.addEventListener("message",t,false)}else{window.attachEvent("onmessage",t)}}}e("__tcfapi","__tcfapiBuffer","__tcfapiCall","__tcfapi
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 71 75 65 75 65 43 6f 6d 6d 61 6e 64 28 27 67 65 74 46 50 56 61 6c 75 65 73 27 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 7d 29 28 77 69 6e 64 6f 77 29 3b 0a 20 20 77 69 6e 64 6f 77 2e 72 65 76 61 6d 70 2e 72 65 67 69 73 74 65 72 45 76 65 6e 74 54 69 6d 65 28 5b 27 73 74 61 72 74 4c 6f 61 64 69 6e 67 41 74 27 2c 20 44 61 74 65 2e 6e 6f 77 28 29 5d 29 3b 0a 20 20 77 69 6e 64 6f 77 2e 72 65 76 61 6d 70 2e 67 65 74 46 50 56 61 6c 75 65 73 28 66 75 6e 63 74 69 6f 6e 28 61 64 5f 73 65 73 73 69 6f 6e 5f 69 64 2c 20 70 76 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 Data Ascii: function () { queueCommand('getFPValues', arguments); }; })(window); window.revamp.registerEventTime(['startLoadingAt', Date.now()]); window.revamp.getFPValues(function(ad_session_id, pv) { window.dataLayer = window.dataLayer
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 70 74 22 2c 22 65 78 63 6c 75 64 65 4c 61 62 65 6c 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 5d 2c 22 74 6f 70 2d 6c 65 61 64 65 72 62 6f 61 72 64 2d 31 22 3a 5b 7b 22 70 72 6f 76 69 64 65 72 22 3a 22 67 70 74 22 2c 22 69 73 46 69 72 73 74 41 64 55 6e 69 74 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 7b 22 70 72 6f 76 69 64 65 72 22 3a 22 73 74 61 74 69 63 22 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 6f 6e 6c 79 46 6f 72 41 64 42 6c 6f 63 6b 65 72 73 22 3a 74 72 75 65 2c 22 73 6c 6f 74 57 72 61 70 70 65 72 49 64 22 3a 22 74 6f 70 2d 6c 65 61 64 65 72 62 6f 61 72 64 2d 31 2d 77 72 61 70 70 65 72 22 2c 22 62 6f 64 79 22 3a 22 5c 6e 20 20 20 20 3c Data Ascii: pt","excludeLabel":true,"isEnabled":true}],"top-leaderboard-1":[{"provider":"gpt","isFirstAdUnit":true,"isEnabled":true},{"provider":"static","isEnabled":false,"options":{"onlyForAdBlockers":true,"slotWrapperId":"top-leaderboard-1-wrapper","body":"\n <
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 22 63 74 61 2d 73 74 61 74 69 63 2d 74 6f 70 2d 6d 70 75 2d 31 5c 22 3e 5c 6e 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 73 66 74 63 64 6e 2e 6e 65 74 2f 69 6d 61 67 65 2f 75 70 6c 6f 61 64 2f 76 31 35 38 34 35 32 30 31 37 30 2f 61 63 6d 70 2f 73 65 63 75 72 69 74 79 5f 62 65 73 74 5f 76 70 6e 5f 6d 70 75 2e 67 69 66 5c 22 20 61 6c 74 3d 5c 22 73 6f 6c 75 74 69 6f 6e 73 5c 22 20 73 74 79 6c 65 3d 5c 22 74 6f 70 3a 33 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 5c 22 20 2f 3e 5c 6e 20 20 20 20 3c 2f 61 3e 5c 6e 20 20 20 20 3c 73 63 72 69 70 74 3e 5c 6e 20 20 20 20 20 20 65 76 65 6e 74 54 72 61 63 6b 65 72 2e 63 6d 64 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 5c 6e 20 20 20 20 Data Ascii: "cta-static-top-mpu-1\">\n <img src=\"https://images.sftcdn.net/image/upload/v1584520170/acmp/security_best_vpn_mpu.gif\" alt=\"solutions\" style=\"top:3px;position:relative\" />\n </a>\n <script>\n eventTracker.cmd.push(function() {\n
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 22 2c 22 6b 6f 22 2c 22 6e 6c 22 2c 22 70 6c 22 2c 22 70 74 22 2c 22 72 75 22 2c 22 73 76 22 2c 22 74 72 22 2c 22 7a 68 22 5d 2c 22 68 6f 73 74 65 64 22 3a 22 66 61 6c 73 65 22 2c 22 61 62 5f 75 70 72 22 3a 22 33 22 7d 2c 22 72 65 66 72 65 73 68 53 75 66 66 69 78 22 3a 22 5f 72 65 66 72 65 73 68 22 7d 2c 22 61 66 73 43 68 61 6e 6e 65 6c 22 3a 22 64 73 6b 5f 61 66 73 5f 65 6e 5f 70 70 2b 63 32 5f 73 66 74 5f 64 73 6b 5f 6e 6f 6e 2d 6d 61 72 74 65 63 68 22 7d 7d 2c 22 61 76 6f 69 64 41 64 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 77 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 0a 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 76 61 6d 70 41 64 52 65 6e 64 65 72 65 64 20 Data Ascii: ","ko","nl","pl","pt","ru","sv","tr","zh"],"hosted":"false","ab_upr":"3"},"refreshSuffix":"_refresh"},"afsChannel":"dsk_afs_en_pp+c2_sft_dsk_non-martech"}},"avoidAds":false,"isRewarded":false}</script><script> (function () { window.revampAdRendered

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	597	OUT	GET /scripts/72c3f-0f5a1.mjs HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:23 UTC	939	IN	HTTP/1.1 200 OK Connection: close Content-Length: 64224 server: istio-envoy content-type: application/javascript last-modified: Mon, 30 Dec 2024 13:29:31 GMT etag: "6772a03b-fae0" expires: Thu, 08 Jan 2026 13:40:06 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 1 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 526877 Date: Tue, 14 Jan 2025 16:01:23 GMT X-Served-By: cache-ams21026-AMS, cache-ewr-kewr1740069-EWR X-Cache: HIT, MISS X-Cache-Hits: 114, 0 X-Timer: S1736870484.724631,VS0,VE78 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3b 6f 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 2c 72 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 65 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 6e 20 69 6e 20 72 3f 72 5b 6e 5d 3a 72 5b 6e 5d 3d 74 2e 61 70 70 6c 79 28 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],[function(t,e,r){var n,o,i;o=[],void 0===(i="function"==typeof(n=function(){"use strict";return function(t){var e=JSON.stringify,r={},n=function(){var n=e(arguments);return n in r?r[n]:r[n]=t.apply(t
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 26 22 65 6e 76 22 69 6e 20 6e 26 26 28 74 3d 4f 62 6a 65 63 74 28 7b 57 45 42 50 41 43 4b 5f 42 55 4e 44 4c 45 5f 4e 41 4d 45 3a 22 6d 6f 64 65 72 6e 52 65 73 70 6f 6e 73 69 76 65 22 7d 29 2e 44 45 42 55 47 29 3b 72 65 74 75 72 6e 20 74 7d 2c 65 2e 75 73 65 43 6f 6c 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 70 72 6f 63 65 73 73 26 26 28 22 72 65 6e 64 65 72 65 72 22 3d 3d 3d 77 69 6e 64 6f 77 2e 70 72 6f 63 65 73 73 2e 74 79 70 65 7c 7c 77 69 6e 64 6f 77 2e 70 72 6f 63 65 73 73 2e 5f 5f 6e 77 6a 73 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 Data Ascii: &"env"in n&&(t=Object({WEBPACK_BUNDLE_NAME:"modernResponsive"}).DEBUG);return t},e.useColors=function(){if("undefined"!=typeof window&&window.process&&("renderer"===window.process.type\|\|window.process.__nwjs))return!0;if("undefined"!=typeof navigator&&nav
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 43 22 2c 22 23 43 43 30 30 46 46 22 2c 22 23 43 43 33 33 30 30 22 2c 22 23 43 43 33 33 33 33 22 2c 22 23 43 43 33 33 36 36 22 2c 22 23 43 43 33 33 39 39 22 2c 22 23 43 43 33 33 43 43 22 2c 22 23 43 43 33 33 46 46 22 2c 22 23 43 43 36 36 30 30 22 2c 22 23 43 43 36 36 33 33 22 2c 22 23 43 43 39 39 30 30 22 2c 22 23 43 43 39 39 33 33 22 2c 22 23 43 43 43 43 30 30 22 2c 22 23 43 43 43 43 33 33 22 2c 22 23 46 46 30 30 30 30 22 2c 22 23 46 46 30 30 33 33 22 2c 22 23 46 46 30 30 36 36 22 2c 22 23 46 46 30 30 39 39 22 2c 22 23 46 46 30 30 43 43 22 2c 22 23 46 46 30 30 46 46 22 2c 22 23 46 46 33 33 30 30 22 2c 22 23 46 46 33 33 33 33 22 2c 22 23 46 46 33 33 36 36 22 2c 22 23 46 46 33 33 39 39 22 2c 22 23 46 46 33 33 43 43 22 2c 22 23 46 46 33 33 46 46 22 2c 22 23 Data Ascii: C","#CC00FF","#CC3300","#CC3333","#CC3366","#CC3399","#CC33CC","#CC33FF","#CC6600","#CC6633","#CC9900","#CC9933","#CCCC00","#CCCC33","#FF0000","#FF0033","#FF0066","#FF0099","#FF00CC","#FF00FF","#FF3300","#FF3333","#FF3366","#FF3399","#FF33CC","#FF33FF","#
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 3b 66 6f 72 28 65 20 69 6e 20 72 5b 30 5d 29 72 5b 30 5d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 74 68 69 73 2e 72 6f 6f 74 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 74 68 69 73 2e 68 61 6e 64 6c 65 2c 21 31 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 46 6f 72 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 5b 22 62 6c 75 72 22 2c 22 65 72 72 6f 72 22 2c 22 66 6f 63 75 73 22 2c 22 6c 6f 61 64 22 2c 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 22 5d 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 76 61 72 20 75 2c Data Ascii: ;for(e in r[0])r[0].hasOwnProperty(e)&&this.rootElement.addEventListener(e,this.handle,!1);return this},n.prototype.captureForType=function(t){return-1!==["blur","error","focus","load","resize","scroll"].indexOf(t)},n.prototype.on=function(t,e,r,n){var u,
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 73 77 69 74 63 68 28 33 3d 3d 3d 28 69 3d 74 2e 74 61 72 67 65 74 29 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 3d 69 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 69 2e 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 55 73 65 45 6c 65 6d 65 6e 74 26 26 28 69 3d 69 2e 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 55 73 65 45 6c 65 6d 65 6e 74 29 2c 6e 3d 74 68 69 73 2e 72 6f 6f 74 45 6c 65 6d 65 6e 74 2c 74 2e 65 76 65 6e 74 50 68 61 73 65 7c 7c 28 74 2e 74 61 72 67 65 74 21 3d 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3f 33 3a 32 29 29 7b 63 61 73 65 20 31 3a 75 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 4d 61 70 5b 31 5d 5b 73 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 4d 61 70 5b 30 5d 26 26 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 4d Data Ascii: switch(3===(i=t.target).nodeType&&(i=i.parentNode),i.correspondingUseElement&&(i=i.correspondingUseElement),n=this.rootElement,t.eventPhase\|\|(t.target!==t.currentTarget?3:2)){case 1:u=this.listenerMap[1][s];break;case 2:this.listenerMap[0]&&this.listenerM
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 72 20 65 3b 65 3d 31 2f 30 3d 3d 3d 74 3f 38 36 34 65 31 33 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 3f 44 61 74 65 2e 6e 6f 77 28 29 2b 31 65 33 2a 74 3a 74 3b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 28 65 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 69 66 28 22 49 6e 76 61 6c 69 64 20 44 61 74 65 22 3d 3d 3d 72 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 27 55 6e 65 78 70 65 63 74 65 64 20 22 65 78 70 69 72 65 22 20 76 61 6c 75 65 27 29 3b 72 65 74 75 72 6e 20 72 7d 28 65 29 2c 74 68 69 73 2e 5f 64 6f 6d 61 69 6e 3d 72 2c 74 68 69 73 2e 5f 70 61 74 68 3d 6e 2c 74 68 69 73 2e 5f 73 65 63 75 72 65 3d 6f 2c 74 68 69 73 2e 5f 70 72 65 66 69 78 3d 69 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 74 65 6d 3d 66 75 6e 63 Data Ascii: r e;e=1/0===t?864e13:"number"==typeof t?Date.now()+1e3*t:t;var r=new Date(e).toUTCString();if("Invalid Date"===r)throw RangeError('Unexpected "expire" value');return r}(e),this._domain=r,this._path=n,this._secure=o,this._prefix=i};n.prototype.getItem=func
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 30 36 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 63 6f 64 65 3d 65 2e 70 61 72 73 65 3d 72 28 39 34 29 2c 65 2e 65 6e 63 6f 64 65 3d 65 2e 73 74 72 69 6e 67 69 66 79 3d 72 28 39 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 28 29 3b 74 72 79 7b 72 3d 72 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 Data Ascii: ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,function(t,e,r){var n=r(106).Symbol;t.exports=n},function(t,e,r){"use strict";e.decode=e.parse=r(94),e.encode=e.stringify=r(95)},function(t,e){var r;r=function(){return this}();try{r=r\|\|new Function("return this")()}catc
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 30 34 29 2c 6f 3d 72 28 31 32 32 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 74 2b 28 72 3f 6e 28 65 29 3a 65 29 7d 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 65 74 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 20 68 61 73 Data Ascii: unction(t,e,r){var n=r(104),o=r(122)((function(t,e,r){return e=e.toLowerCase(),t+(r?n(e):e)}));t.exports=o},function(t,e){var r,n,o=t.exports={};function i(){throw new Error("setTimeout has not been defined")}function s(){throw new Error("clearTimeout has
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 76 3d 5b 5d 2c 6f 2e 76 65 72 73 69 6f 6e 3d 22 22 2c 6f 2e 76 65 72 73 69 6f 6e 73 3d 7b 7d 2c 6f 2e 6f 6e 3d 67 2c 6f 2e 61 64 64 4c 69 73 74 65 6e 65 72 3d 67 2c 6f 2e 6f 6e 63 65 3d 67 2c 6f 2e 6f 66 66 3d 67 2c 6f 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 67 2c 6f 2e 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 3d 67 2c 6f 2e 65 6d 69 74 3d 67 2c 6f 2e 70 72 65 70 65 6e 64 4c 69 73 74 65 6e 65 72 3d 67 2c 6f 2e 70 72 65 70 65 6e 64 4f 6e 63 65 4c 69 73 74 65 6e 65 72 3d 67 2c 6f 2e 6c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 5d 7d 2c 6f 2e 62 69 6e 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 72 6f 63 65 73 73 2e 62 69 6e 64 69 6e 67 Data Ascii: v=[],o.version="",o.versions={},o.on=g,o.addListener=g,o.once=g,o.off=g,o.removeListener=g,o.removeAllListeners=g,o.emit=g,o.prependListener=g,o.prependOnceListener=g,o.listeners=function(t){return[]},o.binding=function(t){throw new Error("process.binding
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 2e 64 65 62 75 67 3d 6e 2c 6e 2e 64 65 66 61 75 6c 74 3d 6e 2c 6e 2e 63 6f 65 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 72 65 74 75 72 6e 20 74 2e 73 74 61 63 6b 7c 7c 74 2e 6d 65 73 73 61 67 65 3b 72 65 74 75 72 6e 20 74 7d 2c 6e 2e 64 69 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 65 6e 61 62 6c 65 28 22 22 29 7d 2c 6e 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 6e 2e 73 61 76 65 28 74 29 2c 6e 2e 6e 61 6d 65 73 3d 5b 5d 2c 6e 2e 73 6b 69 70 73 3d 5b 5d 3b 76 61 72 20 72 3d 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 22 22 29 2e 73 70 6c 69 74 28 2f 5b 5c 73 2c 5d 2b 2f 29 2c 6f 3d 72 Data Ascii: )}return n.debug=n,n.default=n,n.coerce=function(t){if(t instanceof Error)return t.stack\|\|t.message;return t},n.disable=function(){n.enable("")},n.enable=function(t){var e;n.save(t),n.names=[],n.skips=[];var r=("string"==typeof t?t:"").split(/[\s,]+/),o=r

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	686	OUT	GET /images/t_app-icon-s/p/b123c50c-96d0-11e6-98a2-00163ec9f5fa/3355942234/microsoft-visio-logo.png HTTP/1.1 Host: images.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:23 UTC	503	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4236 Cache-Control: public,max-age=31536000 Content-Type: image/avif Etag: "2ul9+lDaOF8okhCDqwntDqi3TTHWXcD3HqujOmpEsXI" Expires: Fri, 19 Sep 2025 08:37:50 GMT Fastly-Stats: io=1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2436040 Date: Tue, 14 Jan 2025 16:01:23 GMT Vary: Accept Strict-Transport-Security: max-age=63072000; includeSubDomains; preload alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 01 8d 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 2c 69 6c 6f 63 00 00 00 00 44 00 00 02 00 01 00 00 00 01 00 00 03 f8 00 00 0c 94 00 02 00 00 00 01 00 00 01 b1 00 00 02 47 00 00 00 42 69 69 6e 66 00 00 00 00 00 02 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 1a 69 6e 66 65 02 00 00 00 00 02 00 00 61 76 30 31 41 6c 70 68 61 00 00 00 00 1a 69 72 65 66 00 00 00 00 00 00 00 0e 61 75 78 6c 00 02 00 01 00 01 00 00 00 c3 69 70 72 70 00 00 00 9d 69 70 63 6f 00 00 00 14 69 73 70 65 00 Data Ascii: ftypavifavifmif1miafmeta(hdlrpictlibavifpitm,ilocDGBiinfinfeav01Colorinfeav01Alphairefauxliprpipcoispe
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: c7 4d a4 40 fa 61 27 97 d8 99 8a f2 21 fa 1e d4 ba b9 11 fe d3 ca 7a 1f 3d 1f fc c9 d0 c2 9c 83 a7 6b da ab b1 17 82 b9 4f 05 44 9c cb a8 c7 fd 5d 82 0e 2e 31 04 4e cd b1 c5 97 76 7c df 70 d5 d1 d6 c3 de b2 47 40 fc 67 bc c6 1e 58 23 78 b8 2c 92 9d 93 a6 62 13 23 51 35 2a ed 8d c9 8a ce 3a 70 38 37 59 15 4c c0 92 cb 36 6d 25 67 8e 16 9c 27 c4 ac 43 00 7c 2c bc b8 fb ff ea 77 7b b3 7b 94 4a 17 d6 5d bd b6 97 af 54 c5 44 6f 18 25 85 b6 e5 e4 92 b4 b7 3c 64 34 ba 2b 7a c6 f2 8e 79 bd a8 1a df b6 83 02 45 3f 3c ec a9 77 47 18 45 6e 24 dd 69 37 44 9f 8c bd f7 12 33 3c 38 59 b1 c1 47 c6 50 96 fe 57 c0 9d 06 16 23 26 76 fa a1 30 1e 60 29 b6 6b 6f 29 4a 9a ae 4a 05 1d 62 98 b7 f2 d9 56 78 61 31 d8 5f 78 3a f7 ce e1 68 d5 68 e6 05 cb 3a b2 4c bc bc 5f f4 f7 26 71 Data Ascii: M@a'!z=kOD].1Nv\|pG@gX#x,b#Q5*:p87YL6m%g'C\|,w{{J]TDo%<d4+zyE?<wGEn$i7D3<8YGPW#&v0`)ko)JJbVxa1_x:hh:L_&q
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 4f 53 95 dd 0f 40 6a 6e 74 5b 93 85 20 49 ce 75 34 0e 9b ba 3c 20 fd 12 19 17 70 2d d4 dd e4 0b 9e 19 bc 2d 6d 8f d6 e2 5a e1 47 8b c3 7a b2 4a ff 43 f3 94 dd 2d 13 da ea 68 e7 db b0 a1 96 7e e4 18 69 45 3d b8 73 16 dc de 09 f7 7f d8 7c 9f e5 a9 e6 6c 6f ec df 02 ab bb 11 c6 9a 14 14 76 61 8d 29 e2 2f 36 6b 85 5e 80 6a e5 3f c1 b8 ce a4 b8 43 9b 2d ff 6f 1d c1 18 06 c5 45 15 25 b5 44 0f a2 43 18 53 41 fc b1 60 be 63 c6 cb 8b 7d 37 90 99 5e 39 40 40 c5 b2 f6 4e 0a 10 9f 29 79 0a 8f a9 97 be e3 e6 4f ad ae d4 b8 fd 60 28 42 7c f1 0c ec 09 13 49 4a ac d8 ed 36 fe 61 79 71 4a fe 45 3b 7b fd 24 88 38 a0 8c 5a 50 62 19 6b c0 9a 6e 37 a5 b4 67 fc 1a 64 02 dd 2b c6 57 9f e8 18 5b 68 d2 3f 58 ac ef 61 d6 8b bb 9c 38 ae b7 aa 7a e6 1d 21 13 0d c4 53 30 ac dc 73 03 Data Ascii: OS@jnt[ Iu4< p--mZGzJC-h~iE=s\|lova)/6k^j?C-oE%DCSA`c}7^9@@N)yO`(B\|IJ6ayqJE;{$8ZPbkn7gd+W[h?Xa8z!S0s
2025-01-14 16:01:23 UTC	102	IN	Data Raw: de fb 57 0a b9 fe 7e 18 cd e8 1b b6 53 69 8f 65 5f 28 47 36 10 f8 da 31 f3 c6 7c cf 64 82 5c 22 1f 6d 8a 94 d4 55 d3 b9 c0 21 c7 e2 eb 53 dd 00 a7 f6 cd 3f 18 ba 2a 85 a5 32 85 1d a3 c5 8a 5a 04 7b 48 45 65 47 84 3b 63 ba 45 a3 a1 8a fc a0 ec 72 fc 64 96 28 31 87 0d 9f cb f7 61 68 ce 00 3f 8b 50 d4 36 8f Data Ascii: W~Sie_(G61\|d\"mU!S?*2Z{HEeG;cErd(1ah?P6

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	597	OUT	GET /scripts/23986-ee935.mjs HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:23 UTC	943	IN	HTTP/1.1 200 OK Connection: close Content-Length: 99488 server: istio-envoy content-type: application/javascript last-modified: Mon, 30 Dec 2024 13:29:31 GMT etag: "6772a03b-184a0" expires: Thu, 08 Jan 2026 13:40:06 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 0 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 526877 Date: Tue, 14 Jan 2025 16:01:23 GMT X-Served-By: cache-ams2100123-AMS, cache-ewr-kewr1740047-EWR X-Cache: HIT, MISS X-Cache-Hits: 105, 0 X-Timer: S1736870484.769761,VS0,VE160 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 2c 63 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 6c 3d 74 5b 32 5d 2c 75 3d 30 2c 70 3d 5b 5d 3b 75 3c 63 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 3d 63 5b 75 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 6e 5b 69 5d 26 26 70 2e 70 75 73 68 28 6e 5b 69 5d 5b 30 5d 29 2c 6e 5b 69 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 64 26 26 64 28 74 29 3b 70 2e 6c 65 6e 67 74 68 3b 29 70 2e 73 68 Data Ascii: !function(e){function t(t){for(var r,i,c=t[0],s=t[1],l=t[2],u=0,p=[];u<c.length;u++)i=c[u],Object.prototype.hasOwnProperty.call(n,i)&&n[i]&&p.push(n[i][0]),n[i]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(d&&d(t);p.length;)p.sh
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 65 5d 3d 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 63 7d 29 7d 29 2c 31 32 65 34 29 3b 63 2e 6f 6e 65 72 72 6f 72 3d 63 2e 6f 6e 6c 6f 61 64 3d 6f 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 29 7d 2c 69 2e 6d 3d 65 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 61 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: e]=void 0}};var l=setTimeout((function(){o({type:"timeout",target:c})}),12e4);c.onerror=c.onload=o,document.head.appendChild(c)}return Promise.all(t)},i.m=e,i.c=r,i.d=function(e,t,a){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:a})},i.r=function
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 73 2e 5f 63 6f 6f 6b 69 65 50 61 72 61 6d 73 3d 74 2c 74 68 69 73 2e 5f 73 65 74 43 6f 6f 6b 69 65 3d 61 2c 74 68 69 73 2e 5f 73 69 74 65 44 6f 6d 61 69 6e 3d 72 7d 70 65 72 73 69 73 74 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 66 69 6c 74 65 72 55 74 6d 55 72 6c 50 61 72 61 6d 73 28 74 68 69 73 2e 5f 75 72 6c 50 61 72 61 6d 73 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 75 70 64 61 74 65 43 6f 6f 6b 69 65 28 65 29 7d 67 65 74 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 66 69 6c 74 65 72 55 74 6d 55 72 6c 50 61 72 61 6d 73 28 74 68 69 73 2e 5f 75 72 6c 50 61 72 61 6d 73 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 3f 65 3a 74 68 69 73 2e 5f 66 69 6c 74 65 72 Data Ascii: s._cookieParams=t,this._setCookie=a,this._siteDomain=r}persist(){var e=this._filterUtmUrlParams(this._urlParams);Object.keys(e).length&&this._updateCookie(e)}get(){var e=this._filterUtmUrlParams(this._urlParams);return Object.keys(e).length?e:this._filter
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 6f 6d 61 69 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 61 2e 64 28 74 2c 22 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 61 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 2c 61 2e 64 28 74 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 61 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 61 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 29 2c 61 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e Data Ascii: omain)},function(e,t,a){"use strict";a.d(t,"a",(function(){return b})),a.d(t,"h",(function(){return k})),a.d(t,"d",(function(){return U})),a.d(t,"g",(function(){return C})),a.d(t,"e",(function(){return w})),a.d(t,"f",(function(){return L})),a.d(t,"b",(fun
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 65 66 65 74 63 68 28 65 29 29 2c 74 68 69 73 2e 5f 69 73 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2e 74 68 65 6e 28 28 29 3d 3e 65 2e 66 6f 72 45 61 63 68 28 65 3d 3e 74 68 69 73 2e 5f 73 61 6d 2e 64 69 73 70 6c 61 79 28 65 29 29 29 7d 7d 73 74 6f 70 28 29 7b 74 68 69 73 2e 5f 73 61 6d 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 22 64 69 73 70 6c 61 79 65 64 22 2c 74 68 69 73 2e 5f 6f 6e 44 69 73 70 6c 61 79 57 61 6c 6c 70 61 70 65 72 29 7d 5f 6f 6e 44 69 73 70 6c 61 79 57 61 6c 6c 70 61 70 65 72 28 65 29 7b 76 61 72 7b 73 6c 6f 74 3a 74 7d 3d 65 3b 22 77 61 6c 6c 70 61 70 65 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 28 74 68 69 73 2e 73 74 6f 70 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 68 69 73 2e 5f Data Ascii: efetch(e)),this._isContentLoaded.then(()=>e.forEach(e=>this._sam.display(e)))}}stop(){this._sam.removeListener("displayed",this._onDisplayWallpaper)}_onDisplayWallpaper(e){var{slot:t}=e;"wallpaper"===t.type&&(this.stop(),document.body.classList.add(this._
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 70 70 50 6c 61 74 66 6f 72 6d 49 64 3a 6f 7d 3d 74 68 69 73 2e 5f 73 63 72 69 70 74 50 61 72 61 6d 73 2c 69 3d 22 64 65 73 6b 74 6f 70 22 3d 3d 3d 74 2c 63 3d 72 2e 73 6c 69 63 65 28 30 2c 32 29 7c 7c 22 65 6e 22 2c 73 3d 69 3f 22 64 73 6b 22 3a 22 6d 6f 62 22 2c 6c 3d 7b 61 70 70 3a 7b 64 73 6b 3a 7b 70 75 62 49 64 3a 22 73 6f 66 74 6f 6e 69 63 22 2c 73 74 79 6c 65 49 64 3a 22 35 35 39 33 36 32 38 32 30 32 22 7d 2c 6d 6f 62 3a 7b 70 75 62 49 64 3a 22 73 6f 66 74 6f 6e 69 63 22 2c 73 74 79 6c 65 49 64 3a 22 33 39 32 38 34 35 38 31 36 39 22 7d 7d 2c 61 72 74 69 63 6c 65 3a 7b 64 73 6b 3a 7b 70 75 62 49 64 3a 22 73 6f 66 74 6f 6e 69 63 22 2c 73 74 79 6c 65 49 64 3a 22 38 35 33 33 32 32 36 39 38 37 22 7d 2c 6d 6f 62 3a 7b 70 75 62 49 64 3a 22 6d 6f 62 69 6c Data Ascii: ppPlatformId:o}=this._scriptParams,i="desktop"===t,c=r.slice(0,2)\|\|"en",s=i?"dsk":"mob",l={app:{dsk:{pubId:"softonic",styleId:"5593628202"},mob:{pubId:"softonic",styleId:"3928458169"}},article:{dsk:{pubId:"softonic",styleId:"8533226987"},mob:{pubId:"mobil
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 72 67 75 6d 65 6e 74 73 29 2c 61 3d 72 29 7d 29 3b 74 68 69 73 2e 5f 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 72 29 7d 7d 76 61 72 20 70 3d 61 28 31 32 29 2c 67 3d 61 28 31 29 2c 76 3d 61 28 38 29 2c 41 3d 61 28 38 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 61 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 7b 76 61 72 20 72 3d 61 2e 63 61 6c 6c 28 65 2c 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 Data Ascii: rguments),a=r)});this._container.addEventListener("scroll",r)}}var p=a(12),g=a(1),v=a(8),A=a(80);function m(e){var t=function(e,t){if("object"!=typeof e\|\|null===e)return e;var a=e[Symbol.toPrimitive];if(void 0!==a){var r=a.call(e,t\|\|"default");if("object"
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 61 2e 6f 6e 54 69 6d 65 6f 75 74 29 7b 76 61 72 20 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 68 69 73 2e 75 6e 72 65 67 69 73 74 65 72 44 65 6c 65 67 61 74 65 28 74 2c 21 31 29 2c 61 2e 6f 6e 54 69 6d 65 6f 75 74 28 29 7d 2c 61 2e 74 69 6d 65 6f 75 74 54 69 6d 65 29 3b 61 2e 74 69 6d 65 6f 75 74 3d 72 7d 7d 29 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 72 65 76 61 6d 70 41 64 52 65 6e 64 65 72 65 64 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 72 65 76 61 6d 70 41 64 52 65 6e 64 65 72 65 64 3d 7b 70 75 73 68 3a 74 68 69 73 2e 70 75 73 68 2e 62 69 6e 64 28 74 68 69 73 29 7d 2c 65 2e 66 6f 72 45 61 63 68 28 65 3d 3e 77 69 6e 64 6f 77 2e 72 65 76 61 6d 70 41 64 52 65 6e 64 65 72 65 64 2e 70 75 73 68 28 65 29 29 7d 7d 76 61 72 20 68 3d 61 28 37 39 29 3b Data Ascii: a.onTimeout){var r=setTimeout(()=>{this.unregisterDelegate(t,!1),a.onTimeout()},a.timeoutTime);a.timeout=r}});var e=window.revampAdRendered\|\|[];window.revampAdRendered={push:this.push.bind(this)},e.forEach(e=>window.revampAdRendered.push(e))}}var h=a(79);
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 70 61 70 65 72 22 2c 64 69 73 70 6c 61 79 65 64 54 69 6d 65 3a 30 2c 6f 6e 44 69 73 70 6c 61 79 65 64 3a 65 7d 29 7d 7d 7d 29 2c 77 3d 6e 28 29 28 28 29 3d 3e 28 7b 73 74 61 72 74 3a 28 29 3d 3e 7b 55 28 29 2e 72 65 67 69 73 74 65 72 44 65 6c 65 67 61 74 65 28 7b 73 6c 6f 74 49 64 3a 22 6e 61 74 69 76 65 2d 73 6c 69 64 65 69 6e 22 2c 64 69 73 70 6c 61 79 65 64 54 69 6d 65 3a 30 2c 6f 6e 44 69 73 70 6c 61 79 65 64 3a 63 2e 62 7d 29 7d 7d 29 29 2c 4c 3d 6e 28 29 28 28 29 3d 3e 7b 76 61 72 20 65 3d 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 61 6d 2d 62 6f 74 74 6f 6d 2d 62 61 72 2d 73 6c 69 64 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 68 69 64 64 65 6e 22 29 7d 3b 72 65 74 75 Data Ascii: paper",displayedTime:0,onDisplayed:e})}}}),w=n()(()=>({start:()=>{U().registerDelegate({slotId:"native-slidein",displayedTime:0,onDisplayed:c.b})}})),L=n()(()=>{var e=()=>{document.getElementById("sam-bottom-bar-slide").classList.remove("is-hidden")};retu
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 65 74 75 72 6e 7b 65 76 65 6e 74 3a 22 61 72 74 69 63 6c 65 5f 63 6c 69 63 6b 22 2c 61 72 74 69 63 6c 65 5f 73 6c 75 67 3a 74 2c 70 6c 61 63 65 6d 65 6e 74 3a 22 72 65 6c 61 74 65 64 22 7d 7d 7d 2c 63 6c 69 63 6b 52 65 6c 61 74 65 64 41 72 74 69 63 6c 65 56 69 65 77 4d 6f 72 65 3a 7b 75 61 28 65 29 7b 76 61 72 7b 64 61 74 61 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 7b 55 41 43 61 74 65 67 6f 72 79 3a 22 52 65 6c 61 74 65 64 41 72 74 69 63 6c 65 73 4d 6f 64 75 6c 65 22 2c 55 41 41 63 74 69 6f 6e 3a 22 43 6c 69 63 6b 56 69 65 77 4d 6f 72 65 22 2c 55 41 4c 61 62 65 6c 3a 74 7d 7d 7d 2c 63 6c 69 63 6b 4c 61 74 65 73 74 41 72 74 69 63 6c 65 3a 7b 75 61 28 65 29 7b 76 61 72 7b 64 61 74 61 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 7b 55 41 43 61 74 65 67 6f 72 79 3a 22 4c Data Ascii: eturn{event:"article_click",article_slug:t,placement:"related"}}},clickRelatedArticleViewMore:{ua(e){var{data:t}=e;return{UACategory:"RelatedArticlesModule",UAAction:"ClickViewMore",UALabel:t}}},clickLatestArticle:{ua(e){var{data:t}=e;return{UACategory:"L

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	595	OUT	GET /fonts/5bba3-e5711.woff2 HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:23 UTC	927	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12700 server: istio-envoy content-type: font/woff2 last-modified: Mon, 16 Dec 2024 15:10:37 GMT etag: "676042ed-319c" expires: Wed, 17 Dec 2025 01:13:26 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 0 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2472477 Date: Tue, 14 Jan 2025 16:01:23 GMT X-Served-By: cache-ams21064-AMS, cache-ewr-kewr1740063-EWR X-Cache: HIT, HIT X-Cache-Hits: 1063, 0 X-Timer: S1736870484.775411,VS0,VE1 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 31 9c 00 10 00 00 00 00 7c 20 00 00 31 3c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 76 1b d2 48 1c 86 34 06 60 3f 53 54 41 54 44 00 85 12 11 08 0a 81 81 54 e7 6f 0b 84 40 00 01 36 02 24 03 88 7c 04 20 05 85 2a 07 20 0c 07 1b e5 6b 45 07 62 c6 38 00 18 e3 5c c6 28 a4 49 9c d4 24 b2 ff 8f 09 54 86 ac 2b 9a 0e 80 5f 85 05 9b c4 74 6b b6 89 58 33 9b 29 b4 58 5d ce 2c bd d7 06 74 cf b1 cf 59 ba 3a e5 1d 98 8e 63 21 2e 03 6d 33 f0 fc 14 c7 d7 dd fa af f8 1f 30 48 e5 d6 94 7c e6 7d 0d 20 2a 62 18 1c 3b 2e c2 60 5a a9 47 68 72 8a 98 9c 87 7f f6 c7 f7 fb 9c fb 06 66 a2 9c e1 24 24 a4 89 b3 26 82 71 22 33 a4 ef f4 af 0f cf 6f f3 cf 7d ef 51 46 02 16 e2 13 37 c4 4a 8c 08 3e 46 e5 8c 65 27 8b 6c 56 2e d3 Data Ascii: wOF21\| 1<vH4`?STATDTo@6$\| * kEb8\(I$T+_tkX3)X],tY:c!.m30H\|} *b;.`ZGhrf$$&q"3o}QF7J>Fe'lV.
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 69 2a 7f 18 14 a5 55 8b 24 03 d8 ec 63 05 75 dd 68 e5 d7 5d 1f fb b0 ed 3b 01 b5 e8 45 dd 7d b9 ea 18 8c 42 4d 75 8b 64 27 9d 1d 89 4b 89 04 dd 98 92 40 fb 7c 1f 8f 95 32 44 97 9e 15 e0 31 66 52 a8 a5 00 26 97 74 c8 c9 fe 5e 73 2d b4 7d 18 04 22 aa 51 71 5a 45 19 67 de f3 26 22 a2 71 b6 95 10 1e 45 38 2c fc 36 d9 c9 e0 2f ec 1d ea d5 d9 31 d1 01 9a 0d 43 5a 42 12 fb e6 ea b4 79 84 c5 12 6a 50 3e 29 33 21 30 60 35 00 14 b7 93 f7 03 52 07 00 a1 99 6d a2 b4 84 b1 1a d7 62 08 09 e5 fe e2 66 a8 3e 23 6c b4 cc 35 cc 82 6e 10 e8 e6 0a 23 2d 04 5b e1 0c 9b 3b 79 71 91 24 1b 2a eb 2a 95 2e 1b 97 26 54 9b ca 64 65 78 65 89 f7 37 bc b5 9e cc 02 ac d0 84 69 a6 6d ce af b0 f6 00 49 44 28 ed 50 fc 88 a6 d5 37 e2 26 c0 41 32 29 3f da d4 1f 48 3b 00 60 f5 51 64 0d 4e a8 Data Ascii: iU$cuh];E}BMud'K@\|2D1fR&t^s-}"QqZEg&"qE8,6/1CZByjP>)3!0`5Rmbf>#l5n#-[;yq$*.&Tdexe7imID(P7&A2)?H;`QdN
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 16 5c 26 71 c6 50 d5 b0 e9 4b b5 de 38 c5 58 13 59 2a 0d 7c 52 54 36 8a f6 9e c6 93 99 12 66 d3 46 18 2d e7 ad a6 08 c4 a5 f2 2f 43 4f 54 5a 6b 8f 2f a7 b6 2e 2f ee af 99 de 3e ea b4 35 c7 72 2d 1d d8 81 99 fe 71 f1 f7 c8 46 9a 6e a3 32 cd 22 6d 0b a4 2b 33 f4 49 ba 6c df a1 12 66 dd 36 ad c2 a0 55 e2 89 68 47 3e ac 69 49 ad 89 3b 4f f6 a7 ab 00 ee 67 32 e6 38 09 59 49 58 04 8b 21 41 11 f4 95 97 b4 55 d4 5e 2d 3a a2 66 f5 09 55 7f 03 a6 bb 69 86 7f b2 0f a4 43 23 33 76 b9 be 5c 67 07 2d 23 ed 74 a6 e3 17 5b ba c4 5a fb 2f 4f ee 0f 28 9d ea 1d 1d 4e fb 9c de d3 0c c0 ce f8 8a 73 3c 98 19 ef c6 cd c6 e6 c7 a1 4a 08 01 9b 40 26 7e 4c e6 cb 68 1a d1 0e 5d f8 15 f8 e1 56 5e 9f c9 77 54 9d da 96 2f f1 65 92 0c 36 c6 64 8e ad 79 ed 5d e8 d2 dc e7 84 d3 4e b8 d5 Data Ascii: \&qPK8XY*\|RT6fF-/COTZk/./>5r-qFn2"m+3Ilf6UhG>iI;Og28YIX!AU^-:fUiC#3v\g-#t[Z/O(Ns<J@&~Lh]V^wT/e6dy]N
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: c4 51 fb 3d b3 d5 29 5b 68 6c b3 dd 6b 2f bd b2 db 17 84 80 1e 03 46 cc 09 89 88 d9 90 b0 25 65 c7 9e 13 17 ae dc b8 f3 e0 cb 8f 3f a5 40 27 1c 74 d2 7b e7 62 84 60 d1 62 c4 49 90 2a 4d 3a 95 1c 79 f2 15 28 54 ac 5a ad 3a f5 1a 35 69 d3 ae 43 a7 be 8e f9 eb b8 b7 ee d8 e5 01 ad 87 9e f8 e7 7b 0c f1 c3 40 57 bd 73 da cf 18 a3 db 1b 6b ad 8b 1e 3e f8 66 6f f4 b1 c6 20 d7 6c b2 d1 66 7b 70 50 68 3c 0c 2e 3e 7d 66 8c 99 30 65 cd 82 25 2b 86 58 3d c9 38 70 d4 c3 0b 72 3e 3c 79 f1 16 c0 59 83 70 21 42 45 0a 13 21 4a ac 14 89 92 24 cb a6 96 21 53 bc 22 e5 4a 94 aa 54 a6 4b 85 5e 9a b5 68 d5 5b 8d 3e 14 aa e8 f0 bf cb ae 38 ef a2 4b 2e 20 48 a9 8c 81 68 03 e4 30 88 1e 50 f7 27 d0 e4 07 50 71 01 8a 2d 80 44 95 ee 18 0c 6a 8a 67 0e 40 01 d5 4e 23 57 c3 fe 61 78 c5 Data Ascii: Q=)[hlk/F%e?@'t{b`bI*M:y(TZ:5iC{@Wsk>fo lf{pPh<.>}f0e%+X=8pr><yYp!BE!J$!S"JTK^h[>8K. Hh0P'Pq-Djg@N#Wax
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 84 0d a9 db c2 10 22 6f a2 4d e7 9b 73 de b0 c7 c3 3a 3b 24 76 4d 62 d4 6f 35 7e f8 ea 12 54 ec bd e4 a0 77 8d fc 67 7a 76 09 2a 1e 69 f1 3e d0 5d 25 5c e3 98 2c 69 1b dd 30 f9 ba 25 b4 85 16 f9 f3 15 2e e8 5d d7 27 0b 7f ec d6 6b c3 45 c5 01 de 3c 3b c6 40 3e 29 88 97 bb 08 65 a8 3f 9a 03 dd 21 31 a7 67 98 32 49 e5 ae dc 92 7a 52 4f 0b ed 02 f3 f1 13 43 c1 aa bf 72 82 20 58 c5 74 1f c3 e1 63 21 57 69 45 53 53 66 d6 6f 73 3c 3e 5c 08 84 06 d2 63 92 4f 2a ff a8 a2 bc d1 6b d3 a7 46 46 f1 d1 3c 95 52 8a 48 6b a7 61 7b 8c a6 81 2c 60 bf 17 70 63 a0 52 99 f5 c5 02 1e dc d1 60 a9 f5 d3 d6 a0 12 5d 3b 65 7a 57 2f ab 11 a7 ed c1 9e 38 43 b1 fe 13 b4 a7 43 4b e1 c3 45 c5 8b 53 36 e3 dd c3 26 e7 40 8b 75 3a 93 94 7c 2c 65 7e de f9 11 e4 a5 c6 6b 93 bd 5d d9 a3 c1 Data Ascii: "oMs:;$vMbo5~Twgzvi>]%\,i0%.]'kE<;@>)e?!1g2IzROCr Xtc!WiESSfos<>\cOkFF<RHka{,`pcR`];ezW/8CCKES6&@u:\|,e~k]
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: fe cc c7 cc ea b3 4b 33 4b f3 f5 54 86 4e 28 92 fa bb 85 81 92 2e f4 1c 25 f4 7d 30 bf 88 af ca fb 16 81 b9 aa 87 97 65 95 e6 e9 0b e9 3a 81 50 ea ef 11 82 1f ac df c4 9c b1 6f ac 60 0c b6 e5 d8 d1 bd e3 83 c3 4d 6b ab 3d 9e 8a ea a6 e1 fe f1 bd c9 9e 0c 18 ec a9 54 46 c2 91 99 18 64 4d 81 b4 97 53 23 77 13 d0 6c 22 f1 5a 42 f9 66 a2 fb eb a9 b1 97 c4 84 8b 62 00 93 ef ac c9 1d d9 fe 1a f6 b1 bb b8 54 76 bf 9f b2 67 d7 07 1c c9 bb 1c b0 54 54 60 63 fe 3e fe 75 47 da 6f 3b 86 32 7f 47 da e0 a0 d0 77 89 fc c9 ed 98 72 73 e3 dd fb b4 19 68 d3 4d fd 85 f7 59 c1 bb b5 e8 e2 b2 8a ea fa e4 d0 60 83 79 22 a9 37 29 07 06 07 ba 9f 1f 4e 0e 4e 26 d5 7c 0f 00 fb 9b 6a 5f 14 28 a5 10 c3 8b 78 97 55 7e a4 1d a3 58 df 1b 5b 2f 42 a6 4b cb 28 2c 7d 11 83 aa ab 2e 74 ec Data Ascii: K3KTN(.%}0e:Po`Mk=TFdMS#wl"ZBfbTvgTT`c>uGo;2GwrshMY`y"7)NN&\|j_(xU~X[/BK(,}.t
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 55 c9 31 05 39 3e e2 43 99 59 59 28 d4 ce ed af ee 9c 04 6f 9e e4 3b 0a 99 06 26 8b a9 77 52 b9 a1 40 2d d2 fb 4c 91 21 ed e2 69 e9 2a aa b9 40 a7 39 c7 9c b2 13 38 2e be db 83 d1 2b 93 30 ef 0d 9b e5 df b7 41 d9 38 9e a5 d0 b7 4f 08 6c 30 d7 c3 2e d3 91 b6 36 c1 ea b8 dc 43 2e 73 c0 84 a9 9a ab 99 ad e3 52 a2 6e 0f a5 c9 d5 b1 99 7a 6e 9d c7 4d 89 ee 66 e0 c0 d8 d8 9d 68 f6 34 c0 fb e0 8b 31 ab cf 65 b2 94 5c 05 c7 89 7f ab 5c 33 3c 26 f5 9a 9b 59 d2 32 39 6e b5 8a 6d f8 6f fe e9 91 bd 31 b0 58 90 b4 89 fa 9b 20 e4 8f 10 25 5a 8b 90 cd d2 09 ec 8a b2 6b 3f 82 44 74 ce e7 6f 0c 88 4c 1e e8 6f 2d 97 48 82 9d 52 80 3d 54 5e 3a 33 ee 9a 51 64 d2 62 7f 1d 5a 92 16 4d 75 ee 03 99 da 0a 5f 69 fa e4 d6 58 45 6c ec 02 67 9e fe 2c be 7b 7f 34 02 c9 f2 0b 20 69 aa Data Ascii: U19>CYY(o;&wR@-L!i*@98.+0A8Ol0.6C.sRnznMfh41e\\3<&Y29nmo1X %Zk?DtoLo-HR=T^:3QdbZMu_iXElg,{4 i
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: bc 0a 26 cc 8d ae f6 19 c9 d0 b0 21 bb 11 59 dd 67 ba 06 36 9b 1b 5d eb 37 81 94 67 aa 62 9d d7 ce 56 24 2a 16 9d f5 06 8c 99 cf 3d 53 d1 0e ca 01 32 98 75 fc 91 66 29 82 ad c1 83 ab d3 0c 5e aa 46 ef c5 62 f6 a1 d1 63 18 ec 28 68 7a 1b 59 8b 2c a8 43 a2 ea 0a 9a 79 81 3b 17 c5 e5 f2 f9 b1 31 f9 3d 71 69 5c 1a 15 7e 31 30 40 58 57 82 4d 17 e3 b2 08 a3 2b 2e 29 95 dd 2b 5f ff b2 79 50 74 d1 ed 71 d9 ee e6 b5 c3 b1 b5 58 78 3c f7 ae dd e3 74 17 87 e0 44 1d e1 25 8a e4 44 56 46 e6 49 09 e5 25 82 8e 08 0f 01 d5 c5 ad 35 a4 7b 35 ed 4c cb 78 68 87 49 21 65 8a 3d f6 eb d9 7e 37 37 9e 85 ab c5 65 b5 e7 dd b5 79 5c a0 f2 e2 99 9f 42 ad 9f b4 86 c0 83 8b 1f 42 2d 9f b4 84 e6 01 ff d3 fa cc 7a f0 a3 f3 57 e7 5a f9 e6 1d 31 9b 7f 35 df bf f3 9e f9 52 34 b7 ca 88 ff Data Ascii: &!Yg6]7gbV$*=S2uf)^Fbc(hzY,Cy;1=qi\~10@XWM+.)+_yPtqXx<tD%DVFI%5{5LxhI!e=~77ey\BB-zWZ15R4
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: ff 58 6c 8e 6c cb 58 35 50 80 ce 0f ab df 79 ea 11 0c dd 50 0c 24 9a 67 0f 6b dd cc a0 82 13 38 12 00 42 0d 71 48 5f 29 bf 5c 40 8b e2 6f a1 31 37 f1 f8 eb 68 ec 34 48 34 e6 2d c8 cb 5b 98 97 bb 20 3f 1f 3c 1e 7a 81 51 fe 68 b2 99 ea 6a 62 ad de 31 fc fd e9 3f 80 de e6 cd 8e cd f6 e0 31 c7 b1 1f 23 7f 58 bd d1 53 ce 53 8b f0 4b 4e 38 4f 80 85 72 b0 00 00 5c 22 34 72 ac 28 d6 ac d6 7c 6d 1e e1 c0 08 4e 65 91 58 2c c5 de fc ca bd 97 eb ed 6d 71 6e ef 95 78 20 21 27 56 14 6b 86 cc 45 f6 e4 ab 85 ff ff 08 d0 36 17 35 37 53 cd 53 e8 cb 51 d3 80 b0 1b 09 3b 38 56 14 6b 16 6b fe 40 96 6b 84 38 87 98 1b 09 03 88 15 c5 9a 21 73 24 d8 5b 88 46 92 07 1a 1d e8 7f b1 4c 2c 62 a9 58 0e e2 a2 98 bd f9 0c 4a 78 20 5a 3f 96 89 05 a2 e0 bf 69 aa 84 55 59 85 a6 39 dd dc a6 Data Ascii: XllX5PyP$gk8BqH_)\@o17h4H4-[ ?<zQhjb1?1#XSSKN8Or\"4r(\|mNeX,mqnx !'VkE657SSQ;8Vkk@k8!s$[FL,bXJx Z?iUY9
2025-01-14 16:01:23 UTC	298	IN	Data Raw: 8f ec 3b 85 6b 3c 6c 87 25 30 10 9e 0d 3c 0f 0e c0 f5 27 d7 7d 06 04 a2 8d 3c 3c b9 7f 01 02 5c b1 02 0d 6a db 8c 46 2a 04 80 8b 10 0e 25 3c 6d e5 54 59 d5 1e 4a 8b f2 21 96 39 94 c3 3a 9e 87 72 b9 27 e9 50 23 be e9 7b a8 09 69 36 1e 62 ca 24 e7 06 11 a0 66 dc 83 9f 9b 03 73 b5 eb fa 11 d2 8b 2f a2 b5 68 d5 4f 9b 3a 35 6a 75 60 79 f3 e4 c5 0b 2b 33 81 2a 9e 6a 98 bd 59 87 76 55 da b4 29 6b 2c 95 36 e6 f5 a9 a8 88 ad 48 9d a4 d5 6a e1 ed 10 8a a9 ac 0e ad c7 43 83 78 f0 50 a3 ae 88 2d 4e 39 77 15 8d d3 c4 43 52 ec 34 aa 53 d5 36 2c 93 a5 51 d9 f0 e7 37 b1 53 86 5d 46 5e d7 6a ac 0c de 14 78 94 25 d2 a8 92 5a d4 4c 3d b4 4c 9b 00 ee 3c 97 a7 37 58 96 14 91 82 21 30 63 75 e4 6e 90 4d 22 13 75 06 3e 76 39 86 10 06 29 6c 85 ed 50 61 d7 69 35 15 ee d0 76 23 77 Data Ascii: ;k<l%0<'}<<\jF%<mTYJ!9:r'P#{i6b$fs/hO:5ju`y+3jYvU)k,6HjCxP-N9wCR4S6,Q7S]F^jx%ZL=L<7X!0cunM"u>v9)lPai5v#w

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	613	OUT	GET /publishers/softonic.js?modern=1 HTTP/1.1 Host: rv-assets.softonic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:23 UTC	1233	IN	HTTP/1.1 200 OK Connection: close Content-Length: 903439 server: istio-envoy content-type: application/javascript; charset=utf-8 cache-control: max-age=172500, public, s-maxage=172800, stale-if-error=31536000, stale-while-revalidate=864000 x-publisher-id: softonic etag: "9887046b9a48990af27c6aa6b4ce8ab9" x-version: 1.1502.0 x-request-id: b061edb8-28a4-449c-a731-f8ffb1b2c932 x-envoy-upstream-service-time: 821 x-envoy-decorator-operation: svc-revamp-api-cms.revamp-api-v2.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 17444 Date: Tue, 14 Jan 2025 16:01:23 GMT X-Served-By: cache-ams21042-AMS, cache-nyc-kteb1890030-NYC X-Cache: HIT, MISS X-Cache-Hits: 9, 0 X-Timer: S1736870484.792220,VS0,VE91 Vary: Accept-Encoding,x-device-platform,x-platform-id access-control-expose-headers: x-country-code, x-region, x-browser-name, x-browser-version, x-platform-id, x-platform-version, x-device-platform access-control-allow-origin: * x-country-code: US x-region: NY x-device-platform: Desktop x-browser-name: Chrome x-browser-version: 117.0.0.0 x-platform-id: Windows x-platform-version: 10 alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 3d 7b 38 30 36 33 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 Data Ascii: (()=>{"use strict";var e,t={8063:e=>{function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typ
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 28 29 3d 3e 68 7d 29 3b 76 61 72 20 6e 3d 72 28 37 39 30 33 29 2c 6f 3d 72 28 32 39 30 38 29 2c 69 3d 72 28 34 38 37 38 29 2c 73 3d 72 28 35 39 36 34 29 2c 63 3d 72 28 35 31 30 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 6e 2e 45 29 3b 76 61 72 20 61 3d 28 30 2c 63 2e 4f 29 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 4e 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 74 3f 74 3a 7b 7d 2c 6f 3d 6e 2e 6c 65 61 64 69 6e 67 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2c 75 3d 6e 2e 74 72 61 69 6c 69 6e 67 2c 6c 3d 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2c 64 3d 21 31 2c 66 3d 6e 75 6c Data Ascii: ()=>h});var n=r(7903),o=r(2908),i=r(4878),s=r(5964),c=r(5100);function a(e,t,r){void 0===t&&(t=n.E);var a=(0,c.O)(e,t);return function(e,t){return(0,o.N)((function(e,r){var n=null!=t?t:{},o=n.leading,c=void 0===o\|\|o,u=n.trailing,l=void 0!==u&&u,d=!1,f=nul
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 2c 70 28 74 68 69 73 2c 22 67 64 70 72 41 70 70 6c 69 65 73 22 2c 21 31 29 2c 70 28 74 68 69 73 2c 22 63 63 70 61 41 70 70 6c 69 65 73 22 2c 21 31 29 2c 70 28 74 68 69 73 2c 22 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 44 65 74 65 63 74 65 64 22 2c 21 31 29 2c 70 28 74 68 69 73 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 22 2c 76 6f 69 64 20 30 29 2c 70 28 74 68 69 73 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 50 72 6f 66 69 6c 65 22 2c 76 6f 69 64 20 30 29 2c 70 28 74 68 69 73 2c 22 64 65 76 69 63 65 41 63 63 65 73 73 22 2c 21 31 29 2c 70 28 74 68 69 73 2c 22 74 63 44 61 74 61 22 2c 76 6f 69 64 20 30 29 2c 70 28 74 68 69 73 2c 22 74 63 66 4c 61 73 74 45 76 65 6e 74 53 74 61 74 75 73 22 2c 22 22 29 2c 74 68 69 73 2e 63 6d 70 73 74 75 62 3d 65 Data Ascii: ,p(this,"gdprApplies",!1),p(this,"ccpaApplies",!1),p(this,"consentStringDetected",!1),p(this,"personalizedAds",void 0),p(this,"personalizedAdsProfile",void 0),p(this,"deviceAccess",!1),p(this,"tcData",void 0),p(this,"tcfLastEventStatus",""),this.cmpstub=e
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 73 6f 6e 61 6c 69 7a 65 64 41 64 73 50 72 6f 66 69 6c 65 3d 21 30 2c 74 68 69 73 2e 64 65 76 69 63 65 41 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 65 6d 69 74 43 6f 6e 73 65 6e 74 45 76 65 6e 74 28 29 29 3a 28 74 68 69 73 2e 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 44 65 74 65 63 74 65 64 3d 21 31 2c 74 68 69 73 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 3d 21 31 2c 74 68 69 73 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 50 72 6f 66 69 6c 65 3d 21 31 2c 74 68 69 73 2e 64 65 76 69 63 65 41 63 63 65 73 73 3d 21 31 2c 74 68 69 73 2e 65 6d 69 74 43 6f 6e 73 65 6e 74 45 76 65 6e 74 28 29 29 7d 3b 74 68 69 73 2e 77 61 69 74 46 6f 72 47 44 50 52 50 72 6f 76 69 64 65 72 54 6f 42 65 52 65 61 64 79 28 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 3b 6e 75 6c 6c 21 Data Ascii: sonalizedAdsProfile=!0,this.deviceAccess=!0,this.emitConsentEvent()):(this.consentStringDetected=!1,this.personalizedAds=!1,this.personalizedAdsProfile=!1,this.deviceAccess=!1,this.emitConsentEvent())};this.waitForGDPRProviderToBeReady((()=>{var e,t;null!
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 65 6d 69 74 43 6f 6e 73 65 6e 74 45 76 65 6e 74 28 29 7d 65 6d 69 74 43 6f 6e 73 65 6e 74 45 76 65 6e 74 28 29 7b 76 61 72 20 65 3d 7b 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 44 65 74 65 63 74 65 64 3a 74 68 69 73 2e 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 44 65 74 65 63 74 65 64 2c 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 3a 74 68 69 73 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 2c 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 50 72 6f 66 69 6c 65 3a 74 68 69 73 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 50 72 6f 66 69 6c 65 2c 64 65 76 69 63 65 41 63 63 65 73 73 3a 74 68 69 73 2e 64 65 76 69 63 65 41 63 63 65 73 73 7d 3b 74 68 69 73 2e 65 76 65 6e 74 73 53 75 62 6a 65 63 74 2e 6e 65 78 74 28 7b 74 79 70 65 3a 68 2e 45 56 45 4e 54 53 2e 55 53 Data Ascii: emitConsentEvent()}emitConsentEvent(){var e={consentStringDetected:this.consentStringDetected,personalizedAds:this.personalizedAds,personalizedAdsProfile:this.personalizedAdsProfile,deviceAccess:this.deviceAccess};this.eventsSubject.next({type:h.EVENTS.US
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 28 29 7d 77 61 69 74 46 6f 72 43 43 50 41 50 72 6f 76 69 64 65 72 54 6f 42 65 52 65 61 64 79 28 65 29 7b 74 68 69 73 2e 70 72 6f 76 69 64 65 72 3d 3d 3d 76 3f 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 66 63 2e 63 61 6c 6c 62 61 63 6b 51 75 65 75 65 2e 70 75 73 68 28 7b 43 4f 4e 53 45 4e 54 5f 44 41 54 41 5f 52 45 41 44 59 3a 65 7d 29 3a 65 28 29 7d 7d 70 28 68 2c 22 41 4c 49 41 53 22 2c 22 55 73 65 72 43 6f 6e 73 65 6e 74 53 65 72 76 69 63 65 22 29 2c 70 28 68 2c 22 45 56 45 4e 54 53 22 2c 7b 55 53 45 52 5f 43 4f 4e 53 45 4e 54 5f 45 4d 49 54 54 45 44 3a 22 63 6f 6e 73 65 6e 74 2e 65 6d 69 74 74 65 64 2e 64 6f 6e 65 22 2c 55 53 45 52 5f 43 4f 4e 53 45 4e 54 5f 41 50 49 5f 54 49 4d 45 44 5f 4f 55 54 3a 22 63 6f 6e 73 65 6e 74 2e 74 69 6d 65 64 2d 6f 75 74 2e Data Ascii: ()}waitForCCPAProviderToBeReady(e){this.provider===v?window.googlefc.callbackQueue.push({CONSENT_DATA_READY:e}):e()}}p(h,"ALIAS","UserConsentService"),p(h,"EVENTS",{USER_CONSENT_EMITTED:"consent.emitted.done",USER_CONSENT_API_TIMED_OUT:"consent.timed-out.
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 3a 20 6f 72 61 6e 67 65 22 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 22 2c 22 22 5d 2c 72 29 7d 73 75 63 63 65 73 73 28 65 2c 74 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 22 22 3b 74 68 69 73 2e 6c 6f 67 28 22 25 63 20 5b 44 4f 4e 45 5d 3a 20 25 63 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 25 63 22 29 2e 63 6f 6e 63 61 74 28 74 29 2c 5b 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 20 63 6f 6c 6f 72 3a 20 67 72 65 65 6e 22 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 22 2c 22 22 5d 2c 72 29 7d 65 72 72 6f 72 28 65 2c 74 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: : orange","font-weight: 600;",""],r)}success(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"";this.log("%c [DONE]: %c".concat(e," %c").concat(t),["font-weight: 600; color: green","font-weight: 600;",""],r)}error(e,t){var r=arguments.le
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 53 28 69 2c 6e 2c 6f 2c 73 2c 63 2c 22 74 68 72 6f 77 22 2c 65 29 7d 73 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 72 2c 65 7d 63 6c 61 73 73 20 4f 7b 73 74 61 74 69 63 20 6e 6f 72 6d 61 6c 69 7a 65 44 65 76 69 63 65 54 79 70 65 28 65 29 7b 72 65 74 75 72 6e 20 4f 2e 41 56 41 49 4c 41 42 4c 45 5f 44 45 56 49 43 45 5f 54 59 50 45 53 5b 65 5d 7c 7c 4f 2e 44 45 46 41 55 4c 54 5f 44 Data Ascii: unction c(e){S(i,n,o,s,c,"throw",e)}s(void 0)}))}}function _(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}class O{static normalizeDeviceType(e){return O.AVAILABLE_DEVICE_TYPES[e]\|\|O.DEFAULT_D
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 65 2c 6f 3d 28 6e 75 6c 6c 3d 3d 3d 28 61 3d 75 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 78 2d 64 65 76 69 63 65 2d 70 6c 61 74 66 6f 72 6d 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 6f 2c 74 3d 75 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 78 2d 72 65 67 69 6f 6e 22 29 7c 7c 74 2c 69 3d 75 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 78 2d 70 6c 61 74 66 6f 72 6d 2d 69 64 22 29 7c 7c 69 2c 73 3d 75 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 78 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 22 29 7c 7c 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 4f 2e 6e 6f 72 6d 61 6c 69 7a 65 52 65 73 70 6f 6e 73 65 28 7b 62 72 6f 77 73 65 72 4e 61 6d 65 3a 72 2c 62 72 6f 77 73 Data Ascii: e,o=(null===(a=u.headers.get("x-device-platform"))\|\|void 0===a?void 0:a.toLowerCase())\|\|o,t=u.headers.get("x-region")\|\|t,i=u.headers.get("x-platform-id")\|\|i,s=u.headers.get("x-platform-version")\|\|s}catch(e){}return O.normalizeResponse({browserName:r,brows
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 72 76 66 65 78 3a 74 7d 3d 54 2e 4a 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 72 3d 4e 75 6d 62 65 72 28 74 29 3b 72 65 74 75 72 6e 20 49 28 65 2c 72 29 3f 28 50 28 41 2c 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 72 29 3a 6e 75 6c 6c 7d 29 28 65 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 28 65 3d 3e 7b 76 61 72 20 74 2c 72 3d 28 74 3d 41 2c 54 2e 4a 2e 67 65 74 43 6f 6f 6b 69 65 28 74 29 7c 7c 22 22 29 2c 6e 3d 22 22 3d 3d 3d 72 3f 6e 75 6c 6c 3a 70 61 72 73 65 49 6e 74 28 72 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 49 28 65 2c 6e 29 3f 6e 3a 6e 75 6c 6c 7d 29 28 65 29 3b 72 65 74 75 72 6e 20 Data Ascii: rvfex:t}=T.J.getQueryParams(window.location.search),r=Number(t);return I(e,r)?(P(A,r.toString()),r):null})(e);if(null!==t)return t;var r=(e=>{var t,r=(t=A,T.J.getCookie(t)\|\|""),n=""===r?null:parseInt(r);return"number"==typeof n&&I(e,n)?n:null})(e);return

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	595	OUT	GET /fonts/585ea-68c47.woff2 HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:23 UTC	927	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16708 server: istio-envoy content-type: font/woff2 last-modified: Tue, 17 Dec 2024 13:04:57 GMT etag: "676176f9-4144" expires: Fri, 19 Dec 2025 02:13:19 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 0 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2296085 Date: Tue, 14 Jan 2025 16:01:23 GMT X-Served-By: cache-ams21069-AMS, cache-nyc-kteb1890099-NYC X-Cache: HIT, HIT X-Cache-Hits: 1146, 0 X-Timer: S1736870484.792624,VS0,VE1 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 41 44 00 10 00 00 00 00 b6 e8 00 00 40 e1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 76 1b e3 04 1c c6 06 06 60 3f 53 54 41 54 48 00 85 04 11 08 0a 81 a5 50 81 86 7b 0b 85 34 00 01 36 02 24 03 8a 64 04 20 05 84 16 07 20 0c 07 1b c9 a3 07 d8 b6 b4 60 76 3b 30 12 f9 ee e5 26 dc 18 7a d8 38 06 1e 73 26 12 45 05 69 5e d9 ff ff 19 09 32 c6 d0 7c 9c 97 07 a1 da ae 9b 50 28 dd 31 83 56 e6 b5 f6 2c 7b 69 b5 4b a1 24 ea ae e9 92 40 4c 2e f2 1a b7 e6 53 56 8d ae a6 10 cd 84 26 85 77 ab 35 86 ba b4 50 a8 c1 a1 39 00 2a 16 61 10 0e 71 74 26 7e a0 ac 28 6e 7f 34 5d 22 2c ba 4d 62 01 8b dd 07 a6 de fc 96 cf f7 b9 cb d4 1e 63 94 51 7a ba 57 e2 92 58 38 fc de a2 8e fa 67 38 5f 5b a2 85 c9 e9 be c3 26 5a 0e dd Data Ascii: wOF2AD@v`?STATHP{46$d `v;0&z8s&Ei^2\|P(1V,{iK$@L.SV&w5P9*aqt&~(n4]",MbcQzWX8g8_[&Z
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: dd 69 4e 31 be 87 f8 b5 cd bc c8 c6 50 7a 3e 7b 6d d3 3d a3 87 d1 78 5a 58 a2 b8 73 5c d7 54 e6 4a ce d7 4a e3 5b 88 8d f2 66 e9 be 8c 2d d5 53 32 15 72 44 d9 7d f9 2f 5b 7e 22 0a b9 8c ca 2a 73 cd b3 f4 ce 84 3e f9 12 83 95 90 34 e4 6d c3 48 42 79 31 7c 88 5b 4a bd 2e 2f c0 23 56 db 8a 28 9c c0 e2 1b ee e4 28 f9 ac 75 47 32 d7 e3 59 1e 4b 0b 9c c7 49 86 6d aa fa 20 5f c7 0c 7f e1 b5 67 90 33 78 ea 75 a8 c1 d4 a9 48 b5 7e f2 a9 de cf 33 e3 8a e5 2c f9 b3 4c 81 f7 62 d2 5e 2c 3d 0a 0e 4a 40 33 d6 4f 25 89 cb a8 82 54 8d 6f d3 84 73 14 18 4f ba d3 8c 7c e7 d6 39 5e 3d 56 27 04 9b a5 19 cc 8c e5 7f ac d5 b6 ce b1 92 93 c0 6c 93 72 ab bc 93 0b e1 a0 48 01 a5 3f c5 9c 64 70 23 8c 33 68 f0 f9 76 3c 7e e4 af fc 1d 47 bb 0f a4 68 f2 d4 b3 c0 35 2b d4 b3 dd 85 c3 Data Ascii: iN1Pz>{m=xZXs\TJJ[f-S2rD}/[~"*s>4mHBy1\|[J./#V((uG2YKIm _g3xuH~3,Lb^,=J@3O%TosO\|9^=V'lrH?dp#3hv<~Gh5+
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 51 61 1f 9b 61 a6 59 d1 d6 6f 7d 05 3c b3 c5 cf 0c 07 da cf 25 b8 bd 27 ee d2 3d f7 bb 07 c7 45 3c 6c 8e 84 94 8c 5c 80 40 41 14 82 bb f8 95 84 d4 c5 b0 2c 2c d7 c3 16 b9 bd b0 2e 8e e3 79 a4 99 44 8d 3a 0d 9b 6c a6 09 f9 a6 a6 2c 30 05 64 1f 24 56 7f 38 68 e8 8a 50 24 de 3e 6c af 14 72 d0 38 6b 10 75 2a ed 99 ad 8a 93 1c 6c 4a 91 5a 74 f8 5c cb 26 37 7b 0c 7a b7 7b c0 5e a6 d1 8c bd a5 d3 e7 34 a7 28 e7 cc 2e 83 a9 7c b6 e5 94 f9 7b 4f 1d 47 d6 c6 42 21 66 c9 90 14 47 7e e2 6e d1 b2 24 bb 18 ee e5 69 de fc 12 59 6c 18 fc 7b 81 b5 f2 16 83 1b ab 8c a4 9c 66 92 0d 3a 20 62 23 31 58 02 1c 21 3e 22 97 ac 2e 4a 56 e4 6c 2d b7 20 5b 36 51 09 da da 4a 59 34 ce 0e fd 7f 10 02 12 28 40 09 2a 50 83 0c 5a 40 8a 4a cb b6 7e 4e 71 6c 0a 98 de 66 14 4b d4 46 1b 72 d7 Data Ascii: QaaYo}<%'=E<l\@A,,.yD:l,0d$V8hP$>lr8kulJZt\&7{z{^4(.\|{OGB!fG~n$iYl{f: b#1X!>".JVl- [6QJY4(@PZ@J~NqlfKFr
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 71 63 c9 88 5a 87 71 1a 37 73 44 f0 81 88 26 41 73 40 94 a6 80 8b c2 a2 bc 06 23 7a f2 04 8c e2 b2 0f e0 9e 5e 8b d6 e2 a5 5d 0b d6 42 d1 89 4a a6 ff 3b 55 07 59 8a 12 45 a9 a2 4c 51 ae a8 50 54 29 66 29 54 8a 4a 85 12 90 cf 5f f1 13 64 79 69 44 48 11 33 6e cf fc 9c 68 1d 2d 2a 2f ea 84 ad 78 b7 17 6c b5 7d 4d cd e4 ab c6 da 55 4f 76 af 15 27 d2 7a 03 3b 01 c3 ed ee ff f4 27 5e 1e 47 3d 52 ae ae b6 b7 b3 9e fa c4 08 20 6d 13 6d b0 8f 44 04 24 8a 11 51 89 c0 5e 88 f6 a0 07 c0 cd df 05 4e d0 64 3b 67 d2 5a 02 e6 dd 14 90 c8 d4 bf cd 15 44 4e 12 01 74 b6 6d 25 bc b7 34 24 c2 96 5e 41 6f 22 bc f5 f5 66 41 1f e2 da 84 f0 9e 53 67 e6 e7 20 09 f1 4f 2f d1 3f 66 2e 10 32 01 27 a9 14 f6 fd 6a d9 0e ec 1d 48 8b 69 ae 74 e5 6b 8c 38 54 03 1d 5a fb 46 92 dd 8b a1 52 Data Ascii: qcZq7sD&As@#z^]BJ;UYELQPT)f)TJ_dyiDH3nh-*/xl}MUOv'z;'^G=R mmD$Q^Nd;gZDNtm%4$^Ao"fASg O/?f.2'jHitk8TZFR
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 4c 31 c3 2f a9 e3 d6 35 77 f4 e2 cf 43 5a 3c 23 f4 b6 4e db ed f1 81 41 fb 15 4c 98 32 ab e4 57 7d 71 ad f4 c2 ea d6 1e 99 6a 88 eb 42 b6 ec b9 eb cc 57 a0 70 d1 62 7d 4c 6c a2 7c 85 05 79 e0 02 1b 52 e8 e1 04 1f 58 4e 62 e5 0a 37 71 d0 86 07 cc 73 22 bc 21 ce 08 19 72 c8 3c 95 45 f1 46 1f 4b 9c f1 e6 7e 8f d8 e8 39 9b bd ab 4b a4 d7 47 86 1c 74 c8 f7 a6 25 4e fb dd 7f e2 e9 24 93 62 6a 69 a7 57 e6 1a 6a ec 4c 57 ba 9e 3d 57 ed 79 f2 17 28 54 7f 6f 1a ee 63 e9 b2 e5 9a a9 d0 3f e7 58 de 6c 73 cc 35 cf 7c e1 cf cd 6f 78 e3 cf fc ca 6d bf 7d 7e 64 74 ed 76 20 23 3b 23 7c 87 23 bb 44 3e de 9c ef a7 c3 56 3b db 82 ff b6 af e9 9f 91 6e 7a da bb 5e b6 b1 92 b2 de 90 06 16 a9 e4 a6 19 04 a6 83 a4 2d 90 6c f3 5e 40 9c d2 88 2e 5f cc 1b 73 74 22 ac 1b 7c 3b df c9 Data Ascii: L1/5wCZ<#NAL2W}qjBWpb}Ll\|yRXNb7qs"!r<EFK~9KGt%N$bjiWjLW=Wy(Toc?Xls5\|oxm}~dtv #;#\|#D>V;nz^-l^@._st"\|;
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 8e 60 58 a5 16 34 c6 bc 95 21 91 7c f6 52 2a f8 05 83 11 18 02 2f 1f d3 4b 98 93 ac d4 14 50 40 30 9e 32 e1 58 ae a7 4c 01 54 15 9c 15 70 c2 71 b9 e6 51 6e c1 4f 02 29 c3 80 5d c7 c0 61 2a 20 74 15 78 85 27 0c 95 2e 49 11 c5 44 72 ae d0 47 b9 2e 41 4a 18 4c 91 f7 16 06 86 80 cb 34 7d 64 95 72 2a 48 f3 38 4e 5e d2 28 e5 0c 37 91 49 4f 20 ca 23 d1 9f 92 e1 e3 e9 bc 4e 4a 6d 65 b3 43 60 e1 91 da ac 91 69 e6 2d 85 d2 b9 8b f7 35 40 77 67 8a 65 99 46 a2 44 27 81 e6 c2 b7 36 d0 62 b5 da 69 18 73 67 45 23 85 4a fb 4f 8d f6 93 ff 7a 7d 11 0c 4c 35 e8 0b 3b 5a 8c 63 cf a5 81 a6 4d 89 2e 9f 6f e4 4d 8f 30 cb 92 c1 d9 d6 18 14 17 c2 8a 3d 1e 6b 8c c0 4e c1 76 ab 8b ce 87 cc 35 49 f5 2f 28 e0 14 9b 65 66 55 85 39 f0 a7 63 a0 cc 62 12 5d 4a f0 3e c0 f4 00 49 37 58 d5 Data Ascii: `X4!\|R/KP@02XLTpqQnO)]a tx'.IDrG.AJL4}dr*H8N^(7IO #NJmeC`i-5@wgeFD'6bisgE#JOz}L5;ZcM.oM0=kNv5I/(efU9cb]J>I7X
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 4c 8c 14 bd ba e8 fc b8 7c 15 c8 64 5a 7a 40 63 cd 2f cf 37 8d c0 48 00 2a 21 06 6a 50 71 39 41 ab 6c 80 83 b8 c1 5a be 7e a1 10 06 26 19 2e fa 9e 1a 69 cb 21 83 f6 71 42 d9 1e 57 7a b0 8d bb 39 44 90 f1 02 84 72 59 fb 3a 4f 7b 5b e6 69 5a 5b 9e 65 e0 2c ef 20 a0 2b cb 3b 7c db de 11 c6 19 89 cc b1 1e 7f 03 e7 69 48 10 68 66 3b 3e 7d 33 f9 65 38 e3 da e6 ee d5 23 58 97 69 6c 33 e4 90 c8 ae 58 9d 32 29 d9 49 58 b0 3f 77 ed 26 93 29 5d 24 76 9e cd ac 03 d7 a9 76 67 ad 6f d8 bb 8f f3 c8 bf eb 78 2a 85 c6 bb 8c fb 1a b9 1e 66 bc 82 1b 00 da ca 9b 12 37 e6 53 36 a8 79 5b 18 d5 ae 7f 10 9c dc 8f f7 ba 63 f4 91 25 26 1b d9 37 fd 66 0b b6 b2 8f 28 0d d1 16 f4 09 47 b4 46 de 2c 09 37 d9 86 61 e9 78 05 b4 41 ad d9 eb 70 4d 6a 6a eb 7a 05 af ba ba e8 ec 6b c7 be 34 Data Ascii: L\|dZz@c/7H!jPq9AlZ~&.i!qBWz9DrY:O{[iZ[e, +;\|iHhf;>}3e8#Xil3X2)IX?w&)]$vvgoxf7S6y[c%&7f(GF,7axApMjjzk4
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 7b 77 0d 7f 37 25 70 fa 9e c9 c3 53 2d f1 9f 57 61 1e be 37 a9 b6 ef 84 da ff b4 e8 2a df 7f fd 7a d9 41 f3 ee 4f ab ca 95 e6 29 76 e4 78 66 66 e4 9d 7b c9 ad fd a0 99 00 17 2a 40 bd 3d e2 88 0b 56 a0 de 1c b1 f5 3d a8 c0 32 84 69 b4 78 2c 9b ca 77 57 2f d7 37 bf f4 d1 6c c9 44 3e 1d 1b d9 73 58 33 6a e0 1e a5 e5 e5 4e a5 a8 d9 23 ac 31 dc a3 5e 03 a1 56 d8 be 62 63 eb f0 85 fb 61 ac 5a 52 90 3f 27 d3 ef bc 59 c9 9c 2d 0e 3d 71 b2 3f 87 7b 57 dc d2 a5 7d aa 41 a5 74 2b be f1 af 76 2b 6c 99 75 a1 ea 11 96 5f f2 63 b4 b0 85 45 63 e7 0e e1 12 bf fd db e7 93 97 fe c6 9c c3 e0 f4 fd c4 a4 65 51 ff 17 8d 3a 40 2e 30 56 12 00 4a 11 68 26 78 25 08 b2 c3 25 54 3d 9a c0 52 47 7f fb 0d d0 e9 a3 73 e9 f9 92 69 97 0b 57 d6 44 9d 9d 5f 45 f9 2b 55 80 76 41 12 37 6a 20 Data Ascii: {w7%pS-Wa7zAO)vxff{@=V=2ix,wW/7lD>sX3jN#1^VbcaZR?'Y-=q?{W}At+v+lu_cEceQ:@.0VJh&x%%T=RGsiWD_E+UvA7j
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 07 52 b4 a1 d5 41 83 9f 4c 1f f3 42 77 78 50 6e 85 66 5d 3d 07 a7 28 a7 48 05 1c 06 34 50 39 9c b7 4d dd e2 37 39 b9 8e 72 cc b6 d1 a9 f2 f0 1b 11 59 43 1a ae a6 2a ca a6 8f de 8a 17 08 6e 25 b8 37 ab fb 12 2e eb 38 d7 bd ca 11 08 94 39 2e 3c 1d 63 44 73 10 6f 85 55 6b 85 5d 96 69 54 6d c8 8e 3e 01 5e c5 44 0d 0a 2d aa f9 07 ed 55 41 63 a2 62 bd b5 ee ea 69 48 0c 18 05 06 56 60 ce d2 46 d4 a7 8d 46 f8 38 b8 11 f5 7e 03 f2 a1 2a 75 c2 ef 30 70 9c 0b d5 13 6a d3 e8 87 39 47 d2 8d ce 21 31 de af 28 8f 2d 1d 49 cb 93 74 f8 82 4c 09 11 e1 e6 83 0f 4a a7 dd 46 44 40 f9 29 b3 46 ad 35 c2 51 0c 25 48 9b 76 b3 9a f0 c4 79 f4 cb 63 97 ea b5 9a 9a 0c fa c3 f1 12 a5 44 95 28 42 a8 4d 1c 0e b5 45 11 5e 82 82 60 a1 c4 d2 bd c8 b3 fc a6 ca ee e9 80 07 c7 6e ca 7c 9f bd Data Ascii: RALBwxPnf]=(H4P9M79rYCn%7.89.<cDsoUk]iTm>^D-UAcbiHV`FF8~u0pj9G!1(-ItLJFD@)F5Q%HvycD(BME^`n\|
2025-01-14 16:01:23 UTC	1378	IN	Data Raw: 3c e1 f6 71 c2 35 44 67 b5 8a 0a e5 6e 05 56 f7 d2 85 53 ae e5 13 1c 91 8f 4d 15 57 ec 6f 92 9b 14 75 df fc 90 f1 3f e5 01 0c 61 47 2f 70 93 8f e8 ad 59 4d 2d 8c 60 fc 01 ec 2f e6 da 54 8a b0 1c 4b cf 89 55 d5 2a e4 97 53 50 ec 75 ac 4d e5 aa 55 22 9f df bd 30 bd 0c 63 f1 b4 c5 d5 53 f6 d4 74 7f cb 0f 2e 1e d3 ed 7b bf 69 b9 81 b1 29 11 3e 28 dd 7d 28 62 7d b8 ba f1 44 eb 91 3c aa 76 a8 4e 06 29 ee 92 33 5b 3d 4f e3 6e 82 68 d0 63 ad e4 3c ee 4d 49 eb 18 85 a9 4d de 22 33 8e c7 2e ea b0 9e 5c 08 c1 e7 46 d2 18 85 26 46 cb e7 b0 1a 65 6f df 5c 39 4a ba fd 21 45 ac 86 b6 16 fc bd 71 ae 10 b9 ed 7c 11 24 5f 3c 24 33 77 b4 1d 78 31 69 b9 b4 57 57 86 39 d7 9c e8 fb a2 a5 2d 78 44 e6 cb 4b 91 a6 85 4c 70 04 9e 4b b5 05 f0 44 0f 09 2e 3d 24 54 1e b2 db 33 15 2b Data Ascii: <q5DgnVSMWou?aG/pYM-`/TKU*SPuMU"0cSt.{i)>(}(b}D<vN)3[=Onhc<MIM"3.\F&Feo\9J!Eq\|$_<$3wx1iWW9-xDKLpKD.=$T3+

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:23 UTC	606	OUT	GET /a8ff32f4-78c7-4428-825d-0badb488b68b/loader.js?target=en.softonic.com HTTP/1.1 Host: sdk.privacy-center.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:24 UTC	753	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 68439 Connection: close Date: Tue, 14 Jan 2025 16:01:24 GMT x-amzn-RequestId: 1d4396b1-e400-4011-86b0-b27ca94f9c8e x-didomi-configs-version: 113 Cache-Control: max-age=7200, public ETag: "a232c83fcb7b2d0bb2ff32dbe3a4e4aa" X-Amzn-Trace-Id: Root=1-67868a54-662d2ecf6d98fa1b5ee27310;Parent=289bcdcaf11ec59f;Sampled=0;Lineage=1:eaae1266:0 x-didomi-remote-config-metadata: multiReg:true;legacyGlobalGdpr:false Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 47bf742fc3975367a1788e300150d028.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: e4vuLzHf9xTJEG1mSMToGZsRt5pZr6aHT73KI3fsvXLTHqQV-RfGew==
2025-01-14 16:01:24 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 64 69 64 6f 6d 69 52 65 6d 6f 74 65 43 6f 6e 66 69 67 3d 7b 22 6e 6f 74 69 63 65 73 22 3a 5b 7b 22 6e 6f 74 69 63 65 5f 69 64 22 3a 22 7a 41 54 55 7a 77 58 4d 22 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 77 65 62 22 2c 22 74 61 72 67 65 74 73 22 3a 5b 5d 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 69 64 22 3a 22 37 39 37 64 64 38 62 38 2d 30 64 35 61 2d 34 62 34 30 2d 39 31 66 31 2d 34 33 61 38 31 33 33 64 37 37 66 64 22 2c 22 63 6f 6f 6b 69 65 73 22 3a 7b 22 73 74 6f 72 61 67 65 53 6f 75 72 63 65 73 22 3a 7b 22 63 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 74 72 75 65 7d 7d 2c 22 61 70 70 22 3a 7b 22 67 64 70 Data Ascii: !function(){try{window.didomiRemoteConfig={"notices":[{"notice_id":"zATUzwXM","default":true,"platform":"web","targets":[],"config":{"id":"797dd8b8-0d5a-4b40-91f1-43a8133d77fd","cookies":{"storageSources":{"cookies":false,"localStorage":true}},"app":{"gdp
2025-01-14 16:01:24 UTC	8949	IN	Data Raw: 6f 6f 6b 69 65 41 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 74 79 70 65 22 3a 22 33 72 64 5f 70 61 72 74 79 22 2c 22 6c 61 6e 67 5f 75 72 6c 73 22 3a 5b 5d 2c 22 6e 61 6d 65 73 70 61 63 65 73 22 3a 7b 22 67 6f 6f 67 6c 65 22 3a 7b 22 69 64 22 3a 31 39 32 2c 22 63 75 72 72 65 6e 74 22 3a 74 72 75 65 7d 7d 7d 2c 7b 22 69 64 22 3a 22 74 72 75 65 66 66 65 63 74 22 2c 22 6e 61 6d 65 22 3a 22 54 72 75 45 66 66 65 63 74 22 2c 22 70 6f 6c 69 63 79 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 75 65 66 66 65 63 74 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 70 75 72 70 6f 73 65 49 64 73 22 3a 5b 5d 2c 22 6c 65 67 49 6e 74 50 75 72 70 6f 73 65 49 64 73 22 3a 5b 22 63 6f 6f 6b 69 65 73 22 2c 22 63 72 65 61 74 65 5f 61 64 73 5f 70 72 6f 66 Data Ascii: ookieAccess":false,"type":"3rd_party","lang_urls":[],"namespaces":{"google":{"id":192,"current":true}}},{"id":"trueffect","name":"TruEffect","policyUrl":"https://trueffect.com/privacy-policy/","purposeIds":[],"legIntPurposeIds":["cookies","create_ads_prof
2025-01-14 16:01:24 UTC	8949	IN	Data Raw: 61 6d 65 73 70 61 63 65 73 22 3a 7b 22 67 6f 6f 67 6c 65 22 3a 7b 22 69 64 22 3a 31 38 38 39 2c 22 63 75 72 72 65 6e 74 22 3a 74 72 75 65 7d 7d 7d 2c 7b 22 69 64 22 3a 22 73 66 72 2d 4d 64 70 69 37 6b 66 4e 22 2c 22 6e 61 6d 65 22 3a 22 53 46 52 22 2c 22 70 6f 6c 69 63 79 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 66 72 2e 66 72 2f 73 65 63 75 72 69 74 65 2d 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 65 2e 68 74 6d 6c 22 2c 22 70 75 72 70 6f 73 65 49 64 73 22 3a 5b 5d 2c 22 6c 65 67 49 6e 74 50 75 72 70 6f 73 65 49 64 73 22 3a 5b 22 63 6f 6f 6b 69 65 73 22 2c 22 63 72 65 61 74 65 5f 61 64 73 5f 70 72 6f 66 69 6c 65 22 2c 22 73 65 6c 65 63 74 5f 70 65 72 73 6f 6e 61 6c 69 7a 65 64 5f 61 64 73 22 2c 22 69 6d 70 72 6f 76 65 5f 70 72 6f 64 75 63 74 Data Ascii: amespaces":{"google":{"id":1889,"current":true}}},{"id":"sfr-Mdpi7kfN","name":"SFR","policyUrl":"http://www.sfr.fr/securite-confidentialite.html","purposeIds":[],"legIntPurposeIds":["cookies","create_ads_profile","select_personalized_ads","improve_product
2025-01-14 16:01:24 UTC	16384	IN	Data Raw: 63 74 5f 70 65 72 73 6f 6e 61 6c 69 7a 65 64 5f 61 64 73 22 2c 22 6d 61 72 6b 65 74 5f 72 65 73 65 61 72 63 68 22 2c 22 69 6d 70 72 6f 76 65 5f 70 72 6f 64 75 63 74 73 22 2c 22 75 73 65 5f 6c 69 6d 69 74 65 64 5f 64 61 74 61 5f 74 6f 5f 73 65 6c 65 63 74 5f 63 6f 6e 74 65 6e 74 22 5d 2c 22 75 73 65 73 4e 6f 6e 43 6f 6f 6b 69 65 41 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 74 79 70 65 22 3a 22 33 72 64 5f 70 61 72 74 79 22 2c 22 6c 61 6e 67 5f 75 72 6c 73 22 3a 5b 7b 22 6c 61 6e 67 49 64 22 3a 22 65 6e 22 2c 22 70 72 69 76 61 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6e 69 76 69 65 77 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 6c 65 67 49 6e 74 43 6c 61 69 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6e 69 76 69 Data Ascii: ct_personalized_ads","market_research","improve_products","use_limited_data_to_select_content"],"usesNonCookieAccess":false,"type":"3rd_party","lang_urls":[{"langId":"en","privacy":"https://www.aniview.com/privacy-policy/","legIntClaim":"https://www.anivi
2025-01-14 16:01:24 UTC	16384	IN	Data Raw: e0 b9 8c e0 b9 83 e0 b8 99 e0 b8 81 e0 b8 b2 e0 b8 a3 e0 b9 82 e0 b8 86 e0 b8 a9 e0 b8 93 e0 b8 b2 e0 b8 97 e0 b8 b5 e0 b9 88 e0 b8 95 e0 b8 a3 e0 b8 87 e0 b9 80 e0 b8 9b e0 b9 89 e0 b8 b2 e0 b8 ab e0 b8 a1 e0 b8 b2 e0 b8 a2 22 2c 22 74 72 22 3a 22 48 65 64 65 66 6c 69 20 72 65 6b 6c 61 6d 20 61 6d 61 c3 a7 6c 61 72 c4 b1 20 69 c3 a7 69 6e 20 63 6f c4 9f 72 61 66 69 20 6b 6f 6e 75 6d 20 62 69 6c 67 69 6c 65 72 69 6e 69 6e 20 64 65 70 6f 6c 61 6e 6d 61 73 c4 b1 20 76 65 20 65 72 69 c5 9f 69 6d 22 2c 22 75 6b 22 3a 22 d0 a1 d1 85 d0 be d0 b2 d0 b8 d1 89 d0 b5 20 d1 82 d0 b0 20 d0 b4 d0 be d1 81 d1 82 d1 83 d0 bf 20 d0 b4 d0 be 20 d0 b2 d1 96 d0 b4 d0 be d0 bc d0 be d1 81 d1 82 d0 b5 d0 b9 20 d0 bf d1 80 d0 be 20 d0 b3 d0 b5 d0 be d0 b3 d1 80 d0 b0 d1 84 d1 Data Ascii: ","tr":"Hedefli reklam amalar iin corafi konum bilgilerinin depolanmas ve eriim","uk":"
2025-01-14 16:01:24 UTC	1389	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 28 22 6e 6f 4d 6f 64 75 6c 65 22 69 6e 20 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 53 65 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 5b 5d 2e 66 69 6e 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 5b 5d 2e 66 6c 61 74 4d 61 70 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 Data Ascii: function(){try{return!("noModule"in HTMLScriptElement.prototype)\|\|"function"!=typeof Set\|\|"function"!=typeof Symbol\|\|"function"!=typeof Object.assign\|\|"function"!=typeof[].find\|\|"function"!=typeof[].flatMap\|\|"function"!=typeof Array.from\|\|"function"!=type

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	655	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:24 UTC	786	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Tue, 14 Jan 2025 16:01:24 GMT Expires: Tue, 14 Jan 2025 16:01:24 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 862 / 20102 / m202501070101 / config-hash: 6228454917395037610 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 109501 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 16:01:24 UTC	604	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 70 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 75 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 Data Ascii: &c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}},w=func
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 69 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 Data Ascii: function(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(u.Symbol,"iterator")]=function(){return this};return a},ia=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 71 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 72 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 Data Ascii: n(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)qa(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ra},"es6");var sa=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 67 29 3f 64 65 6c 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 79 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6c 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c Data Ascii: g)?delete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),l=new a(y([[h,"s"]]));if(l.get(h)!="s"\|\|l.size!=1\|\|l
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6b 3d 76 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 71 3b 21 28 71 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 71 3d 71 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6c 2c 71 5b 31 5d 2c 71 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: urn e(this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,l){for(var k=v(this,"entries").call(this),q;!(q=k.next()).done;)q=q.value,h.call(l,q[1],q[0],this)};c.prototype
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: .done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.size=this.g.size;return c};b.prototype.clear=function(){this.
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d Data Ascii: lar expression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return ta(this,b,"includes").indexOf(b,c\|\|0)!==-1}},"es6");w("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f=
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 Data Ascii: urn!1;return g>=f}},"es6");var ua=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[v(u.Symbol,"iterator")]=function(){return e};re
2025-01-14 16:01:24 UTC	1390	IN	Data Raw: 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 42 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 42 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 Data Ascii: uthors. SPDX-License-Identifier: Apache-2.0 */ var B=this\|\|self,va=function(a){a=a.split(".");for(var b=B,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},xa=function(a){var b=typeof a;return b!="object"?b:a?Array.isArray(a)?"array":b:"nu

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://microsoft-visio.en.softonic.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Windows Analysis Report
https://microsoft-visio.en.softonic.com/

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	700	OUT	GET /images/t_app-cover-s,f_auto/p/b123c50c-96d0-11e6-98a2-00163ec9f5fa/1577596571/microsoft-visio-screenshot.png HTTP/1.1 Host: images.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:24 UTC	503	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4942 Cache-Control: public,max-age=31536000 Content-Type: image/avif Etag: "x/TpYxTo5QfcI+Km+stonlmkzVBrk1vDtliTr3DyEqQ" Expires: Fri, 19 Sep 2025 08:37:58 GMT Fastly-Stats: io=1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2010118 Date: Tue, 14 Jan 2025 16:01:24 GMT Vary: Accept Strict-Transport-Security: max-age=63072000; includeSubDomains; preload alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 16 00 00 12 38 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 54 00 00 00 9e 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 40 08 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 17 69 70 6d 61 Data Ascii: ftypavifavifmif1miafmeta(hdlrpictlibavifpitmilocD8(iinfinfeav01ColorjiprpKipcoispeTpixiav1C@colrnclxipma
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: c6 df 99 02 ca d5 e5 2d 3a 25 59 e4 fd db d4 5d 8f f7 2f ee 0c 47 3a 8e 3f c4 18 bd d0 fb b0 6d d2 a1 56 50 63 ad 41 ad f9 d8 a1 b9 f7 88 77 51 d4 ff da be d4 dc b2 5a 60 27 87 2e 60 33 a1 cc ab bf 45 39 8e cf 84 93 e7 57 07 42 a1 0e 73 d9 f5 e0 ff 5d 18 12 d4 73 cf e5 9e f9 90 70 c5 40 83 12 63 a3 88 7f 8a 83 b8 ff cb 19 c0 29 6d 96 f6 5c cb 6e b8 68 cc b4 92 f4 94 18 c4 cb fe 93 db 82 d2 6a 4e cb d8 a0 c3 a1 5f e3 2a b1 39 44 ad a9 b4 5a 62 b2 24 12 d7 e4 a5 b7 98 f2 a9 c5 40 3a 8c dc c0 8f 6d fd 95 9e 96 6d a7 43 75 e2 9e a9 05 24 0f 1b b9 eb 88 9a fd 5d cd a9 65 67 4c 5e b7 81 03 c6 8c 66 54 84 6e 3c 73 34 51 9b 11 7c be f9 b0 e5 23 fd 93 39 4f f7 13 c7 e9 4d 54 30 7f b7 f9 21 95 4d 73 65 7c cf e9 5e 14 67 b6 74 55 a3 37 40 d5 0b 4e 27 d8 83 4d da 86 Data Ascii: -:%Y]/G:?mVPcAwQZ`'.`3E9WBs]sp@c)m\nhjN_*9DZb$@:mmCu$]egL^fTn<s4Q\|#9OMT0!Mse\|^gtU7@N'M
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 69 ee ec cc 43 e6 e4 6d 19 55 8e 86 19 29 46 7c 9e 76 e8 b4 b9 43 64 d1 44 aa e6 ab bc fe c9 80 d1 eb fa dc ce c3 75 1e b5 45 cf e3 3a fc 27 5e 85 ec 2b 82 63 64 02 64 4c 61 f2 a4 79 84 72 c6 af dc ab dc bc 14 0e 98 50 61 26 93 bf 62 e1 8f 76 f0 7c 2e d4 e2 55 55 9e 8a 28 db b9 00 8d 14 36 8b 80 c6 44 23 69 33 20 e1 9a 5f 4b 36 02 9a 98 ec ca ed 68 4e 4a c9 ca ed 43 b9 c0 de d9 eb 83 67 28 6c 0c 41 3e 12 85 bd 7a 05 91 07 dc 80 b9 68 fa d6 c6 98 08 90 19 51 ca 9d 6d 4d 89 0a 22 d2 31 cc d3 93 b0 47 9d e7 c8 99 2e 75 cf d4 82 6f 60 f0 70 96 2d f4 d9 a6 42 96 dc 70 71 ad d6 82 3d d4 2a 74 3a ce 7f 1f aa 8a 7e 0b 2b dd 06 2b 67 80 a1 84 27 b9 ee ba 7e 50 de 41 d1 5c fa 14 37 63 58 39 93 3c 8d a5 79 81 31 3b 9d d4 40 09 79 a5 bd 1c 5c c4 8c 25 c7 f6 e1 df a0 Data Ascii: iCmU)F\|vCdDuE:'^+cddLayrPa&bv\|.UU(6D#i3 _K6hNJCg(lA>zhQmM"1G.uo`p-Bpq=*t:~++g'~PA\7cX9<y1;@y\%
2025-01-14 16:01:24 UTC	808	IN	Data Raw: 36 2c c7 1c 3f 44 b1 29 99 54 03 a7 7d 8c 4d 65 c0 85 27 80 68 dc 69 70 c0 39 16 89 5f 1c f5 98 a8 3d ef bc 6a 65 da 32 a2 b2 a2 bb 14 b8 ef b2 f9 0c 4b d9 7c 50 fe 8f 6e 7e bb 6b f8 b5 78 1b d2 a4 db 14 ff d8 2f 3a 58 7b b7 17 2a 59 61 12 d6 cb 5e 09 f2 ab 72 18 39 88 2a 3c c2 05 6e 24 c4 d6 84 51 10 c3 52 9f ef ab 83 87 9e ac fb cb 7d bd 55 32 1e 11 9e e0 3d 10 07 00 6e 41 21 46 d3 cf 2a 67 a5 93 df 37 d5 d8 19 10 61 75 57 05 11 44 06 2c 40 ce 01 eb a1 c1 3e 13 d0 cb 25 33 b5 65 10 b1 2b de 0c b2 ae 4c 16 02 be 96 20 2f cf a6 89 7e 39 85 90 23 ab 7f 7c 11 fa 48 8c b3 b2 19 29 75 65 cd 95 03 a7 e3 e4 7f f9 bf e7 f3 d9 bf 7a e8 89 84 0c ae 12 fe 14 3f 4b 62 77 a1 cd 5d c8 56 a5 6a 37 fd 14 a2 b6 ac a5 88 cb e1 6a ac 54 02 38 de 61 25 4a bd 4a c4 e0 01 27 Data Ascii: 6,?D)T}Me'hip9_=je2K\|Pn~kx/:X{Ya^r9<n$QR}U2=nA!F*g7auWD,@>%3e+L /~9#\|H)uez?Kbw]Vj7jT8a%JJ'

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	647	OUT	GET /images/t_avatar-48/editor-profiles/dinkar-kamat/profile HTTP/1.1 Host: images.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:24 UTC	503	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1063 Cache-Control: public,max-age=31536000 Content-Type: image/avif Etag: "LXqDXxkdoTPykRn0OEVtUbZSixhBq5zNgbfV5cY7dFo" Expires: Thu, 25 Sep 2025 09:59:40 GMT Fastly-Stats: io=1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3075280 Date: Tue, 14 Jan 2025 16:01:24 GMT Vary: Accept Strict-Transport-Security: max-age=63072000; includeSubDomains; preload alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:24 UTC	1063	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 16 00 00 03 11 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 30 00 00 00 30 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 40 08 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 17 69 70 6d 61 Data Ascii: ftypavifavifmif1miafmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispe00pixiav1C@colrnclxipma

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	614	OUT	GET /prebid/softonic/prebid-client.js HTTP/1.1 Host: rv-assets.softonic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:24 UTC	1231	IN	HTTP/1.1 200 OK Connection: close Content-Length: 372919 server: istio-envoy content-type: application/javascript; charset=utf-8 cache-control: max-age=172500, public, s-maxage=172800, stale-if-error=31536000, stale-while-revalidate=864000 x-publisher-id: softonic etag: "ff5275a09264fba7f2c0c5dc0e5e4c31" x-version: 1.1502.0 x-request-id: d8a626fa-50b1-4647-adc9-c4b846df4e35 x-envoy-upstream-service-time: 33 x-envoy-decorator-operation: svc-revamp-api-cms.revamp-api-v2.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Tue, 14 Jan 2025 16:01:24 GMT X-Served-By: cache-ams21034-AMS, cache-ewr-kewr1740020-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1736870485.681227,VS0,VE129 Vary: Accept-Encoding,x-country-code,x-device-platform access-control-expose-headers: x-country-code, x-region, x-browser-name, x-browser-version, x-platform-id, x-platform-version, x-device-platform access-control-allow-origin: * x-country-code: US x-region: NY x-device-platform: Desktop x-browser-name: Chrome x-browser-version: 117.0.0.0 x-platform-id: Windows x-platform-version: 10 alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 69 66 28 77 69 6e 64 6f 77 2e 70 62 6a 73 26 26 77 69 6e 64 6f 77 2e 70 62 6a 73 2e 6c 69 62 4c 6f 61 64 65 64 29 74 72 79 7b 77 69 6e 64 6f 77 2e 70 62 6a 73 2e 67 65 74 43 6f 6e 66 69 67 28 22 64 65 62 75 67 22 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 74 74 65 6d 70 74 65 64 20 74 6f 20 6c 6f 61 64 20 61 20 63 6f 70 79 20 6f 66 20 50 72 65 62 69 64 2e 6a 73 20 74 68 61 74 20 63 6c 61 73 68 65 73 20 77 69 74 68 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 27 70 62 6a 73 27 20 69 6e 73 74 61 6e 63 65 2e 20 4c 6f 61 64 20 61 62 6f 72 74 65 64 2e 22 29 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c 73 65 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3d 7b 33 35 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){!function(){var e,n={35706:function(e,
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 6f 63 75 6d 65 6e 74 2c 74 29 29 2c 72 7c 7c 28 72 3d 64 6f 63 75 6d 65 6e 74 29 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6e 74 65 78 74 3d 72 2c 65 2e 72 65 6e 64 65 72 28 6e 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6e 74 65 78 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 6e 3d 75 2e 61 64 55 6e 69 74 73 2c 74 3d 28 30 2c 61 2e 73 45 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 63 6f 64 65 3d 3d 3d 65 7d 29 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 28 30 2c 6f 2e 5a 29 28 74 2c 22 72 65 6e 64 65 72 65 72 22 29 2c 69 3d 21 21 28 72 26 26 72 2e 75 72 6c 26 26 72 2e 72 65 6e 64 65 72 29 2c 63 3d 28 30 2c 6f 2e 5a 29 28 74 2c 22 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 2e 72 65 Data Ascii: ocument,t)),r\|\|(r=document),e.documentContext=r,e.render(n,e.documentContext)}function l(e){var n=u.adUnits,t=(0,a.sE)(n,(function(n){return n.code===e}));if(!t)return!1;var r=(0,o.Z)(t,"renderer"),i=!!(r&&r.url&&r.render),c=(0,o.Z)(t,"mediaTypes.video.re
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 2c 73 3d 22 74 72 61 6e 73 6d 69 74 45 69 64 73 22 2c 64 3d 22 74 72 61 6e 73 6d 69 74 55 66 70 64 22 2c 66 3d 22 74 72 61 6e 73 6d 69 74 50 72 65 63 69 73 65 47 65 6f 22 2c 6c 3d 22 74 72 61 6e 73 6d 69 74 54 69 64 22 7d 2c 31 30 32 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 74 28 38 36 31 30 34 29 2c 69 3d 28 30 2c 74 28 31 36 33 31 30 29 2e 4f 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 5a 50 2e 72 65 73 6f 6c 76 65 41 6c 69 61 73 28 65 29 7d 29 29 7d 2c 39 36 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 55 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: ,s="transmitEids",d="transmitUfpd",f="transmitPreciseGeo",l="transmitTid"},10286:function(e,n,t){t.d(n,{T:function(){return i}});var r=t(86104),i=(0,t(16310).Oj)((function(e){return r.ZP.resolveAlias(e)}))},9633:function(e,n,t){t.d(n,{UL:function(){return
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 64 28 65 2c 6e 29 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 74 26 26 65 2e 63 6f 6e Data Ascii: 47);function s(e,n){var t="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(!t){if(Array.isArray(e)\|\|(t=function(e,n){if(!e)return;if("string"==typeof e)return d(e,n);var t=Object.prototype.toString.call(e).slice(8,-1);"Object"===t&&e.con
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 2c 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 74 5b 72 5d 3b 69 66 28 6d 28 6f 29 26 26 69 28 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 67 65 74 28 6f 29 3b 76 6f 69 64 20 30 3d 3d 3d 61 3f 64 65 6c 65 74 65 20 74 5b 72 5d 3a 74 5b 72 5d 3d 61 7d 7d 7d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 61 74 68 73 3d 65 2e 70 61 74 68 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 74 3d 6e 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 5b 6e 2e 6c 65 6e 67 74 68 3e 30 3f 6e 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6e 75 6c 6c 2c 74 5d 7d 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 Data Ascii: ,t,r,i){var o=t&&t[r];if(m(o)&&i()){var a=this.get(o);void 0===a?delete t[r]:t[r]=a}}},e)}function v(e){return e.forEach((function(e){e.paths=e.paths.map((function(e){var n=e.split("."),t=n.pop();return[n.length>0?n.join("."):null,t]}))})),function(n,t){f
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 74 68 73 3a 66 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 6f 4b 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 65 2c 70 61 74 68 73 3a 6c 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 65 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 67 30 2c 70 61 74 68 73 3a 67 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 67 30 2c 65 29 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 28 65 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 29 2f 31 30 30 7d 7d 2c 7b 6e 61 6d 65 3a 63 2e 4a 74 2c 70 61 74 68 73 3a 5b 22 73 6f 75 72 63 65 2e 74 69 64 22 5d 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 4a 74 2c 65 29 7d 5d 2e 6d 61 70 28 70 29 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: ths:f,applies:b(c.oK,e)},{name:c.e,paths:l,applies:b(c.e,e)},{name:c.g0,paths:g,applies:b(c.g0,e),get:function(e){return Math.round(100*(e+Number.EPSILON))/100}},{name:c.Jt,paths:["source.tid"],applies:b(c.Jt,e)}].map(p)}var E=function(){var e=arguments.l
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 6f 2c 61 3d 21 30 2c 63 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 74 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 61 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 61 7c 7c 6e 75 6c 6c 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rray objects must have a [Symbol.iterator]() method.")}var o,a=!0,c=!1;return{s:function(){t=t.call(e)},n:function(){var e=t.next();return a=e.done,e},e:function(e){c=!0,o=e},f:function(){try{a\|\|null==t.return\|\|t.return()}finally{if(c)throw o}}}}function
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 64 6f 6e 65 3b 29 7b 76 61 72 20 66 3d 28 30 2c 72 2e 5a 29 28 63 2e 76 61 6c 75 65 2c 33 29 2c 6c 3d 66 5b 30 5d 2c 67 3d 66 5b 31 5d 2c 70 3d 66 5b 32 5d 3b 69 66 28 69 21 3d 3d 6c 26 26 6f 29 62 72 65 61 6b 3b 69 3d 6c 3b 76 61 72 20 76 3d 75 28 65 2c 67 2c 70 2c 6e 29 3b 69 66 28 76 29 7b 69 66 28 21 76 2e 61 6c 6c 6f 77 29 72 65 74 75 72 6e 20 64 28 76 29 2c 21 31 3b 6f 3d 76 7d 7d 7d 63 61 74 63 68 28 65 29 7b 73 2e 65 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 73 2e 66 28 29 7d 72 65 74 75 72 6e 20 6f 26 26 64 28 6f 29 2c 21 30 7d 5d 7d 28 29 2c 73 3d 28 30 2c 72 2e 5a 29 28 63 2c 32 29 2c 64 3d 73 5b 30 5d 2c 66 3d 73 5b 31 5d 7d 2c 31 33 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 45 24 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: done;){var f=(0,r.Z)(c.value,3),l=f[0],g=f[1],p=f[2];if(i!==l&&o)break;i=l;var v=u(e,g,p,n);if(v){if(!v.allow)return d(v),!1;o=v}}}catch(e){s.e(e)}finally{s.f()}return o&&d(o),!0}]}(),s=(0,r.Z)(c,2),d=s[0],f=s[1]},13667:function(e,n,t){t.d(n,{E$:function(
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 7d 2c 75 2e 58 33 2e 45 56 45 4e 54 2c 43 29 3b 54 5b 75 2e 58 33 2e 4e 41 54 49 56 45 5d 3d 49 3b 76 61 72 20 4f 3d 28 30 2c 67 2e 7a 33 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2e 61 64 2c 72 3d 65 2e 61 64 55 72 6c 2c 6f 3d 65 2e 63 70 6d 2c 61 3d 65 2e 6f 72 69 67 69 6e 61 6c 43 70 6d 2c 75 3d 65 2e 77 69 64 74 68 2c 63 3d 65 2e 68 65 69 67 68 74 2c 73 3d 7b 41 55 43 54 49 4f 4e 5f 50 52 49 43 45 3a 61 7c 7c 6f 2c 43 4c 49 43 4b 54 48 52 4f 55 47 48 3a 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 63 6c 69 63 6b 55 72 6c 29 7c 7c 22 22 7d 3b 72 65 74 75 72 6e 7b 61 64 3a 28 30 2c 69 2e 72 65 70 6c 61 63 65 4d 61 63 72 6f 73 29 28 74 2c 73 29 2c 61 64 55 72 6c 3a 28 30 2c 69 2e 72 65 70 6c 61 Data Ascii: },u.X3.EVENT,C);T[u.X3.NATIVE]=I;var O=(0,g.z3)("sync",(function(e,n){var t=e.ad,r=e.adUrl,o=e.cpm,a=e.originalCpm,u=e.width,c=e.height,s={AUCTION_PRICE:a\|\|o,CLICKTHROUGH:(null==n?void 0:n.clickUrl)\|\|""};return{ad:(0,i.replaceMacros)(t,s),adUrl:(0,i.repla
2025-01-14 16:01:24 UTC	1378	IN	Data Raw: 3b 74 72 79 7b 6e 26 26 65 3f 28 72 3d 66 2e 4b 2e 66 69 6e 64 42 69 64 42 79 41 64 49 64 28 6e 29 2c 65 21 3d 3d 64 6f 63 75 6d 65 6e 74 7c 7c 28 30 2c 69 2e 69 6e 49 66 72 61 6d 65 29 28 29 3f 6b 28 7b 72 65 6e 64 65 72 46 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 61 64 3f 28 65 2e 77 72 69 74 65 28 6e 2e 61 64 29 2c 65 2e 63 6c 6f 73 65 28 29 2c 41 28 7b 64 6f 63 3a 65 2c 62 69 64 3a 72 2c 61 64 49 64 3a 72 2e 61 64 49 64 7d 29 29 3a 28 30 2c 6c 2e 57 29 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 28 6e 2c 7b 73 65 6e 64 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 73 28 65 2c 6e 2c 72 29 7d 2c 6d 6b 46 72 61 6d 65 3a 69 2e 63 72 65 61 74 65 49 66 72 61 6d 65 Data Ascii: ;try{n&&e?(r=f.K.findBidByAdId(n),e!==document\|\|(0,i.inIframe)()?k({renderFn:function(n){n.ad?(e.write(n.ad),e.close(),A({doc:e,bid:r,adId:r.adId})):(0,l.W)(r).then((function(t){return t(n,{sendMessage:function(e,n){return s(e,n,r)},mkFrame:i.createIframe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	647	OUT	GET /adsense/search/ads.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:25 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 144297 Date: Tue, 14 Jan 2025 16:01:24 GMT Expires: Tue, 14 Jan 2025 16:01:24 GMT Cache-Control: private, max-age=3600 ETag: "12278805556980856774" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 16:01:25 UTC	672	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 36 36 31 34 36 33 35 39 34 35 31 36 34 30 39 30 32 37 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 73 65 61 72 63 68 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 33 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"6614635945164090273",packages:"search",module:"ads",version:"3",m:{cei:"17300002,17301431,17301
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f Data Ascii: okie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 Data Ascii: {return this.ce};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32A
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 72 65 74 75 72 6e 20 72 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 Data Ascii: +" is not an iterable or ArrayLike");}function pa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function qa(a){return ra(a,a)}function ra(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b)
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 3f 74 68 69 73 2e 6d 66 28 68 29 3a 74 68 69 73 2e 43 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 54 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 74 66 28 67 2c 68 29 3a 74 68 69 73 2e 43 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 54 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 31 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 64 3d 66 75 6e 63 74 69 6f Data Ascii: ?this.mf(h):this.Cd(h)}};b.prototype.mf=function(h){var g=void 0;try{g=h.then}catch(k){this.Tc(k);return}typeof g=="function"?this.tf(g,h):this.Cd(h)};b.prototype.Tc=function(h){this.Ud(2,h)};b.prototype.Cd=function(h){this.Ud(1,h)};b.prototype.Ud=functio
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 73 2e 67 62 28 6b 28 68 2c 6c 29 2c 6b 28 67 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 55 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 55 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 41 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 76 61 3d 3d 6e 75 Data Ascii: s.gb(k(h,l),k(g,m));return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.gb=function(h,g){function k(){switch(l.A){case 1:h(l.Ua);break;case 2:g(l.Ua);break;default:throw Error("Unexpected state: "+l.A);}}var l=this;this.va==nu
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 65 77 20 63 3b 63 61 28 6b 2c 68 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c Data Ascii: ew c;ca(k,h,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 3a 2d 31 2c 46 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a Data Ascii: :-1,F:void 0}}function e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Obj
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 Data Ascii: ){return c(this,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a inst
2025-01-14 16:01:25 UTC	1390	IN	Data Raw: 3b 0a 72 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e Data Ascii: ;r("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:fun

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	552	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:25 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-X5cWFgQf' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-14 16:01:25 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-14 16:01:25 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-14 16:01:25 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-14 16:01:25 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-14 16:01:25 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-14 16:01:25 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-14 16:01:25 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-14 16:01:25 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-14 16:01:25 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-14 16:01:25 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:24 UTC	543	OUT	GET /tag/n22abp4c18 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:24 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 16:01:24 GMT Content-Type: application/x-javascript Content-Length: 865 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=4115c716fcfb4c8fa3386f3f23f52b45.20250114.20260114; expires=Wed, 14 Jan 2026 16:01:24 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2 x-azure-ref: 20250114T160124Z-156796c549b549hthC1EWRcuu40000001t0g000000003s08 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2025-01-14 16:01:24 UTC	865	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:25 UTC	564	OUT	GET /styles/e1d66-87b79.css HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:25 UTC	924	IN	HTTP/1.1 200 OK Connection: close Content-Length: 111131 server: istio-envoy content-type: text/css last-modified: Mon, 30 Dec 2024 13:29:31 GMT etag: "6772a03b-1b21b" expires: Thu, 08 Jan 2026 13:40:18 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 0 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 526867 Date: Tue, 14 Jan 2025 16:01:25 GMT X-Served-By: cache-ams21062-AMS, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT X-Cache-Hits: 44, 0 X-Timer: S1736870485.135241,VS0,VE1 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 63 6f 76 65 72 2d 62 67 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 20 23 65 65 65 20 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 33 61 57 52 30 61 44 30 69 4d 54 49 34 4d 43 49 67 61 47 56 70 5a 32 68 30 50 53 49 33 4d 6a 41 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 78 4d 6a 67 77 49 44 63 79 4d 43 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 52 55 56 46 49 69 42 6b 50 53 4a 4e 4d 43 41 77 61 44 45 79 4f 44 42 32 4e 7a 49 77 53 44 42 36 49 69 38 2b 50 Data Ascii: :root{--cover-bg-placeholder: #eee url(data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTI4MCIgaGVpZ2h0PSI3MjAiIHZpZXdCb3g9IjAgMCAxMjgwIDcyMCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cGF0aCBmaWxsPSIjRUVFIiBkPSJNMCAwaDEyODB2NzIwSDB6Ii8+P
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 67 74 68 6d 73 2f 6d 69 6e 69 72 65 73 65 74 2e 63 73 73 20 2a 2f 68 74 6d 6c 2c 62 6f 64 79 2c 70 2c 6f 6c 2c 75 6c 2c 6c 69 2c 64 6c 2c 64 74 2c 64 64 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 66 69 67 75 72 65 2c 66 69 65 6c 64 73 65 74 2c 6c 65 67 65 6e 64 2c 74 65 78 74 61 72 65 61 2c 70 72 65 2c 69 66 72 61 6d 65 2c 68 72 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2c 69 6e 70 Data Ascii: \| MIT License \| github.com/jgthms/minireset.css */html,body,p,ol,ul,li,dl,dt,dd,blockquote,figure,fieldset,legend,textarea,pre,iframe,hr,h1,h2,h3,h4,h5,h6{margin:0;padding:0}h1,h2,h3,h4,h5,h6{font-weight:normal;font-size:100%}ul{list-style:none}button,inp
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 74 61 6e 74 7d 2e 70 62 2d 78 78 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 6d 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 6c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 6c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 6e 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 Data Ascii: tant}.pb-xxs{padding-bottom:8px !important}.pb-xs{padding-bottom:12px !important}.pb-s{padding-bottom:16px !important}.pb-m{padding-bottom:24px !important}.pb-l{padding-bottom:36px !important}.pb-xl{padding-bottom:48px !important}.pb-n{padding-bottom:0 !i
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 68 2d 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 68 2d 61 75 74 6f 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 76 2d 78 78 78 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 76 2d 78 78 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 20 21 69 6d 70 6f Data Ascii: nt;padding-right:48px !important}.ph-n{padding-left:0 !important;padding-right:0 !important}.ph-auto{padding-left:auto !important;padding-right:auto !important}.pv-xxxs{padding-top:4px !important;padding-bottom:4px !important}.pv-xxs{padding-top:8px !impo
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 74 6f 6d 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 78 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 78 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6e 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f Data Ascii: tom:8px !important}.mb-xs{margin-bottom:12px !important}.mb-s{margin-bottom:16px !important}.mb-m{margin-bottom:24px !important}.mb-l{margin-bottom:36px !important}.mb-xl{margin-bottom:48px !important}.mb-n{margin-bottom:0 !important}.mb-auto{margin-botto
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 68 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 76 2d 78 78 78 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 76 2d 78 78 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 76 2d 78 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d Data Ascii: ;margin-right:0 !important}.mh-auto{margin-left:auto !important;margin-right:auto !important}.mv-xxxs{margin-top:4px !important;margin-bottom:4px !important}.mv-xxs{margin-top:8px !important;margin-bottom:8px !important}.mv-xs{margin-top:12px !important;m
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 32 39 2e 39 34 65 6d 29 7b 2e 68 69 64 64 65 6e 2d 78 73 2d 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 30 65 6d 29 7b 2e 68 69 64 64 65 6e 2d 73 6d 2d 75 70 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 2e 39 34 65 6d 29 7b 2e 68 69 64 64 65 6e 2d 73 6d 2d 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 65 6d 29 7b 2e 68 69 64 64 65 6e 2d 6d 64 2d 75 70 7b 64 69 73 70 6c 61 79 3a 6e Data Ascii: tant}@media (max-width: 29.94em){.hidden-xs-down{display:none !important}}@media (min-width: 30em){.hidden-sm-up{display:none !important}}@media (max-width: 47.94em){.hidden-sm-down{display:none !important}}@media (min-width: 48em){.hidden-md-up{display:n
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 78 73 2d 36 7b 66 6c 65 78 2d 62 61 73 69 73 3a 35 30 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 78 73 2d 37 7b 66 6c 65 78 2d 62 61 73 69 73 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 78 73 2d 38 7b 66 6c 65 78 2d 62 61 73 69 73 3a 36 36 2e 36 36 36 36 36 36 36 36 36 Data Ascii: :0;max-width:41.6666666667%;padding:0 8px}.col-xs-6{flex-basis:50%;flex-grow:0;flex-shrink:0;max-width:50%;padding:0 8px}.col-xs-7{flex-basis:58.3333333333%;flex-grow:0;flex-shrink:0;max-width:58.3333333333%;padding:0 8px}.col-xs-8{flex-basis:66.666666666
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 68 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 66 6c 65 78 2d 62 61 73 69 73 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 66 6c 65 78 2d 62 61 73 69 73 3a 37 35 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 66 6c 65 78 2d 62 61 73 69 73 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 65 78 2d 67 72 Data Ascii: h:58.3333333333%;padding:0 8px}.col-sm-8{flex-basis:66.6666666667%;flex-grow:0;flex-shrink:0;max-width:66.6666666667%;padding:0 8px}.col-sm-9{flex-basis:75%;flex-grow:0;flex-shrink:0;max-width:75%;padding:0 8px}.col-sm-10{flex-basis:83.3333333333%;flex-gr
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 74 68 3a 37 35 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 6d 64 2d 31 30 7b 66 6c 65 78 2d 62 61 73 69 73 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 6d 64 2d 31 31 7b 66 6c 65 78 2d 62 61 73 69 73 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 63 6f 6c 2d 6d 64 2d 31 32 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 3b 66 6c 65 Data Ascii: th:75%;padding:0 8px}.col-md-10{flex-basis:83.3333333333%;flex-grow:0;flex-shrink:0;max-width:83.3333333333%;padding:0 8px}.col-md-11{flex-basis:91.6666666667%;flex-grow:0;flex-shrink:0;max-width:91.6666666667%;padding:0 8px}.col-md-12{flex-basis:100%;fle

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:25 UTC	564	OUT	GET /styles/40150-755d3.css HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:25 UTC	927	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18291 server: istio-envoy content-type: text/css last-modified: Tue, 17 Dec 2024 13:04:57 GMT etag: "676176f9-4773" expires: Wed, 31 Dec 2025 08:33:02 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 0 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1236503 Date: Tue, 14 Jan 2025 16:01:25 GMT X-Served-By: cache-ams2100114-AMS, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 2926, 0 X-Timer: S1736870485.234918,VS0,VE1 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 63 6f 76 65 72 2d 62 67 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 20 23 65 65 65 20 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 33 61 57 52 30 61 44 30 69 4d 54 49 34 4d 43 49 67 61 47 56 70 5a 32 68 30 50 53 49 33 4d 6a 41 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 78 4d 6a 67 77 49 44 63 79 4d 43 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 52 55 56 46 49 69 42 6b 50 53 4a 4e 4d 43 41 77 61 44 45 79 4f 44 42 32 4e 7a 49 77 53 44 42 36 49 69 38 2b 50 Data Ascii: :root{--cover-bg-placeholder: #eee url(data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTI4MCIgaGVpZ2h0PSI3MjAiIHZpZXdCb3g9IjAgMCAxMjgwIDcyMCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cGF0aCBmaWxsPSIjRUVFIiBkPSJNMCAwaDEyODB2NzIwSDB6Ii8+P
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 61 74 69 76 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 37 31 37 34 37 61 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 30 65 6d 29 7b 2e 61 70 70 2d 67 61 6c 6c 65 72 79 7b 6d 61 78 2d 77 69 64 74 68 3a 32 37 34 70 78 7d 7d 2e 61 70 70 2d 67 61 6c 6c 65 72 79 5f 5f 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 61 70 70 2d 67 61 6c 6c 65 72 79 5f 5f 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 36 2e 32 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 70 70 2d 67 61 6c 6c 65 72 79 5f 5f 6c 69 6e 6b 20 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 Data Ascii: ative;background:#71747a}@media (min-width: 30em){.app-gallery{max-width:274px}}.app-gallery__link{display:block}.app-gallery__link{position:relative;height:0;padding-bottom:56.25%;overflow:hidden}.app-gallery__link img{position:absolute;top:0;left:0;widt
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 30 65 6d 29 7b 2e 61 70 70 2d 6f 66 66 65 72 5f 5f 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 31 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 72 65 6d 7d 7d 2e 61 70 70 2d 6f 66 66 65 72 5f 5f 6f 66 66 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 72 65 6d 3b 62 61 63 6b 67 72 Data Ascii: ound-color:rgba(0,0,0,0.7);border-radius:4px}@media screen and (min-width: 70em){.app-offer__name{margin-bottom:0;padding:2px 12px;font-size:1.125rem}}.app-offer__offer{display:inline-block;margin-right:8px;padding:8px;color:#fff;font-size:1.125rem;backgr
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 64 65 76 65 6c 6f 70 65 72 2d 72 65 76 69 65 77 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 69 73 63 7d 2e 64 65 76 65 6c 6f 70 65 72 2d 72 65 76 69 65 77 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 64 65 76 65 6c 6f 70 65 72 2d 72 65 76 69 65 77 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 64 65 76 65 6c 6f 70 65 72 2d 72 65 76 69 65 77 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 64 65 76 65 6c 6f 70 65 72 2d 72 65 76 69 Data Ascii: developer-review li{margin-bottom:12px;margin-left:12px;list-style:disc}.developer-review li:last-child{margin-bottom:0}.developer-review li:last-child>*:last-child{margin-bottom:0}.developer-review strong{font-weight:600;font-style:normal}.developer-revi
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 38 70 78 7d 7d 2e 65 64 69 74 6f 72 2d 72 65 76 69 65 77 20 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 22 41 72 69 61 6c 2d 66 61 6c 6c 62 61 63 6b 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 65 64 69 74 6f 72 2d 72 65 76 69 65 77 20 68 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 36 70 78 7d 7d 2e 65 64 69 74 6f 72 2d 72 65 76 69 65 77 5f 5f 68 65 61 64 6c 69 6e 65 7b 6d 61 72 67 69 6e 3a 33 36 70 78 20 30 20 34 70 78 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 Data Ascii: margin-top:48px}}.editor-review h4{font-weight:600;font-family:"Montserrat","Arial-fallback",arial,sans-serif}@media (min-width: 64em){.editor-review h4{margin-top:36px}}.editor-review__headline{margin:36px 0 4px 0;font-size:1.125rem}@media (min-width: 64
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 61 72 74 69 63 6c 65 2d 63 61 72 64 5f 5f 6e 61 6d 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 30 30 36 61 64 63 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 65 6d 29 7b 2e 70 72 65 6d 69 75 6d 2d 61 72 74 69 63 6c 65 2d 63 61 72 64 5f 5f 6e 61 6d 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 7d 2e 70 72 65 6d 69 75 6d 2d 61 72 74 69 63 6c 65 2d 63 61 72 64 5f 5f 69 63 6f 6e 3e 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 70 72 65 6d 69 75 6d 2d 61 72 74 69 63 6c 65 2d 63 61 72 64 5f 5f 62 75 74 74 6f 6e 3e 61 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e Data Ascii: article-card__name{display:block;color:#006adc;text-align:center}@media (min-width: 48em){.premium-article-card__name{text-align:left}}.premium-article-card__icon>img{margin-bottom:0}.premium-article-card__button>a{position:static;color:#fff;white-space:n
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 68 65 61 64 65 72 2d 63 6f 6c 75 6d 6e 73 5f 5f 6d 61 69 6e 7b 66 6c 65 78 3a 31 20 61 75 74 6f 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 20 67 72 69 64 29 7b 2e 68 65 61 64 65 72 2d 63 6f 6c 75 6d 6e 73 5f 5f 6d 61 69 6e 7b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 31 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 3b 67 72 69 64 2d 61 72 65 61 3a 68 65 61 64 65 72 2d 6d 61 69 6e 7d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 68 65 61 64 65 72 2d 63 6f 6c 75 6d 6e 73 5f 5f 61 73 69 64 65 7b 66 6c 65 78 3a 30 20 30 20 32 39 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a Data Ascii: gin-bottom:0}}@media (min-width: 64em){.header-columns__main{flex:1 auto}@supports (display: grid){.header-columns__main{-ms-grid-row:1;-ms-grid-column:1;grid-area:header-main}}}@media (min-width: 64em){.header-columns__aside{flex:0 0 290px;margin-bottom:
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 6f 70 20 2e 68 65 61 64 65 72 2d 63 6f 6c 75 6d 6e 73 20 3e 20 2e 68 65 61 64 65 72 2d 63 6f 6c 75 6d 6e 73 5f 5f 66 6f 6f 74 65 72 7b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 33 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 70 61 6e 3a 31 7d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 30 65 6d 29 7b 2e 69 6e 74 65 72 6e 61 6c 2d 63 6f 6c 75 6d 6e 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 69 6e 74 65 72 6e 61 6c 2d 63 6f 6c 75 6d 6e 73 5f 5f 6d 61 69 6e 2c 2e 69 6e 74 65 72 6e 61 6c 2d 63 6f 6c 75 6d 6e 73 5f 5f 61 73 69 64 65 7b 66 6c 65 78 3a 31 20 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 Data Ascii: op .header-columns > .header-columns__footer{-ms-grid-row:3;-ms-grid-column:1;-ms-grid-column-span:1}}}@media (min-width: 70em){.internal-columns{display:flex;flex-wrap:nowrap}.internal-columns__main,.internal-columns__aside{flex:1 100%}}@media (min-width
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 38 30 35 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 20 67 72 69 64 29 7b 2e 70 72 6f 73 2d 61 6e 64 2d 63 6f 6e 73 5f 5f 63 6f 6c 75 6d 6e 7b 66 6c 65 78 3a 69 6e 69 74 69 61 6c 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 7d 2e 70 72 6f 73 2d 61 6e 64 2d 63 6f 6e 73 5f 5f 63 6f 6c 75 6d 6e 2d 2d 63 6f 6e 73 7b 63 6f 6c 6f 72 3a Data Ascii: 0px;margin-right:24px;margin-bottom:24px;padding:16px;color:#00805e;font-size:1rem;border:1px solid #e0e0e0;border-radius:8px}@supports (display: grid){.pros-and-cons__column{flex:initial;margin-right:0;margin-bottom:0}}.pros-and-cons__column--cons{color:
2025-01-14 16:01:25 UTC	1378	IN	Data Raw: 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 74 61 62 73 2d 73 63 72 6f 6c 6c 5f 5f 63 6f 6e 74 72 6f 6c 20 2e 74 61 62 73 2d 73 63 72 6f 6c 6c 5f 5f 69 63 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 7d 2e 74 61 62 73 2d 73 63 72 6f 6c 6c 5f 5f 63 6f 6e 74 72 6f 6c 2d 2d 72 69 67 68 74 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 20 23 66 66 66 20 36 35 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 31 30 30 25 29 7d 2e 74 61 62 73 2d 73 63 72 6f 6c 6c 5f 5f 63 6f 6e 74 72 6f 6c 2d 2d 72 69 67 68 74 20 2e 74 61 62 73 2d 73 63 72 6f 6c 6c 5f 5f Data Ascii: x;border-radius:50%}.tabs-scroll__control .tabs-scroll__icon:hover{background:#eee}.tabs-scroll__control--right{right:0;left:auto;padding:0 0 0 12px;background:linear-gradient(270deg, #fff 65%, transparent 100%)}.tabs-scroll__control--right .tabs-scroll__

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:26 UTC	595	OUT	GET /fonts/cb75f-83e1c.woff2 HTTP/1.1 Host: sc.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsoft-visio.en.softonic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:26 UTC	930	IN	HTTP/1.1 200 OK Connection: close Content-Length: 43584 server: istio-envoy content-type: font/woff2 last-modified: Tue, 03 Dec 2024 14:00:55 GMT etag: "674f0f17-aa40" expires: Thu, 04 Dec 2025 23:58:48 GMT cache-control: max-age=31536000,public access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Accept, Content-Type, If-None-Match access-control-allow-methods: GET, OPTIONS x-envoy-upstream-service-time: 0 x-envoy-decorator-operation: noodle-statics-statics-server.noodle-v1.svc.cluster.local:80/* Via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3513757 Date: Tue, 14 Jan 2025 16:01:26 GMT X-Served-By: cache-ams2100130-AMS, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 2955, 0 X-Timer: S1736870486.132293,VS0,VE13 Vary: Accept-Encoding x-device-type: common alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 40 00 0f 00 00 00 02 8f 20 00 00 a9 e2 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 26 1b 82 8c 72 1c 83 9e 10 06 60 00 81 6c 11 08 0a 83 d5 00 83 8a 01 0b 91 06 00 01 36 02 24 03 a2 08 04 20 05 8d 0a 07 d7 03 0c 07 5b 12 60 92 08 32 c7 38 a8 44 a8 56 35 97 ce b1 6d a5 3f 1e 05 d5 2a bb 0b 8c 63 85 f1 eb cd 5e c3 d4 e8 7e ad 4a c4 db 2e 3a 77 ab 42 77 8d 60 e9 b2 ff ff ff ff ff ff f7 24 0b 19 db ff 8d dd ff 36 00 06 a0 a1 9a 51 99 5a 61 9a 89 27 31 f1 94 ad 94 56 3c 7b 07 dc 13 ea cd 90 9b a1 01 8e 83 4e 54 b5 ca 50 ad 48 8a 60 6a 6c 9a bb ae 5d 56 95 5d a5 83 72 d7 47 65 06 49 c8 63 68 15 86 52 88 28 8c 86 52 de 7a bd 81 14 e3 28 9d 53 92 b8 2a 25 c9 69 21 3c 13 f6 6c fe 02 af d2 8d fd f8 Data Ascii: wOF2@ &r`l6$ [`28DV5m?c^~J.:wBw`$6QZa'1V<{NTPH`jl]V]rGeIchR(Rz(S%i!<l
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 05 cc a6 e6 d5 af c9 ba 03 05 cc 03 1a a1 20 e6 78 80 30 3c cf 5a b4 ba b3 fb 1f dc c2 fc a4 17 05 ab 21 b4 43 77 40 31 e4 8b 86 d2 dd 7e fa 4a 2d db ba be 24 ca 70 dc 35 59 52 88 8b 80 ac f7 e4 fd b2 ec df e5 ae b1 50 2e 28 b0 a8 57 54 82 c7 3a 5e 56 54 5c c8 3a ff 36 d5 f5 7f c9 3f bd 53 48 52 49 49 49 2a 2a 9d 12 5e 8b 3c 76 9a be 4e 8a 75 df b2 d2 3b 41 9e 4f 86 20 49 c1 73 c2 4a 31 08 76 00 a7 32 9d 82 92 4b b2 4b 01 20 39 e1 a9 88 34 2c 99 c6 0e 23 d2 c4 53 a7 bd cb d8 69 ec cc e4 3f dc bb e7 c6 c2 b1 74 1d f1 14 c7 bc 8d 49 6d 1d db c2 97 25 94 79 ae 21 cd 5b fd 71 be 95 59 8e df ff 57 55 7f 15 78 df 4b 21 d2 64 9e 1c a6 35 86 29 75 18 bd 65 c4 f9 93 a6 d1 02 01 ca 05 37 4d 76 9a 7e e9 7d 82 fe 64 6f 1c c6 4f 90 2d 15 9f d3 61 14 80 82 68 28 7a bb Data Ascii: x0<Z!Cw@1~J-$p5YRP.(WT:^VT\:6?SHRIII**^<vNu;AO IsJ1v2KK 94,#Si?tIm%y![qYWUxK!d5)ue7Mv~}doO-ah(z
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 1f a8 b0 fb 48 4d b2 4f 34 a4 fb 4c 93 d3 12 2d d3 7d b1 53 2e 77 9a 95 cf c3 b2 28 3c ad 8a c6 cf 1a 44 fc 6d 4c 2a d4 a6 14 c2 6c 45 2b dc 76 4a 44 da 51 a5 f9 fe a7 56 9c bd 34 48 72 28 d4 75 47 20 dc 74 b4 c6 6d 37 98 78 ec 88 cf c2 dd f6 54 92 bb c6 24 7b e4 05 8e ef 5e 4b f5 c3 8a 34 bf 06 84 fa e3 b8 32 5f 27 75 f9 39 65 cd 90 f3 62 b2 d3 25 71 d9 ed 8a 84 ec 71 4d 7b 1a 08 24 ff 1e 2c ff 13 10 0e 76 28 47 1c 30 8e 3a e1 1c 73 21 38 ee 46 72 c2 c3 c4 49 7f 33 a7 4d f8 f4 c3 46 ec a5 13 95 1d 5c 6b 18 29 68 1d a8 c2 36 b2 40 ad 9b 2d 4e 9b 39 12 b5 85 0f 43 3d fc 19 db 26 46 4c e5 12 25 55 21 5b 76 24 79 f2 22 2b 53 16 05 09 39 aa 3a f5 55 6b d2 54 ad 56 6d d5 e9 d2 53 83 61 8f aa f7 4c 5f 0d 68 26 6b 73 68 a6 6e 0b 16 fb ff e4 4e ae 27 a7 78 8a 09 Data Ascii: HMO4L-}S.w(<DmL*lE+vJDQV4Hr(uG tm7xT${^K42_'u9eb%qqM{$,v(G0:s!8FrI3MF\k)h6@-N9C=&FL%U![v$y"+S9:UkTVmSaL_h&kshnN'x
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: cd 8f e9 4a 35 c2 88 ea 80 bb e8 32 e6 ca 82 1f 1b 0e 5c 95 37 ce f1 bb 72 d7 72 66 6b e4 a1 48 99 aa 1b 5d 5d 38 7a 06 4a 87 0d 61 7c 89 ed 98 d0 a7 ef 8e 73 2e 35 ae 0a 42 67 8b 5c 50 25 64 9d 2c 86 f4 72 01 59 c9 09 79 0a 14 21 a3 aa 55 df 9b 87 7d 9a a8 dd 71 6e c0 ac f9 2c d5 d0 94 15 ac b5 05 31 8b 99 f7 f2 71 fd 59 66 db 70 3f d6 ad ff fc a6 9c 0d c1 5d 86 89 c3 b0 e8 80 dc 0c 31 19 62 f6 45 1e 84 48 31 07 67 41 05 3f 01 82 84 40 27 6c 27 11 c0 8a 0c 01 31 88 e2 25 48 ba e7 52 9a e2 bd 94 5b 25 f2 9a 2a 71 41 10 66 b4 ea aa 3f 24 59 c9 aa fd 71 72 71 c6 58 80 1e 17 a0 59 1e 61 22 29 7a a3 d9 ae ca 59 2b 22 74 b3 2d 74 62 07 a3 ea 1b a7 31 b2 e5 5d b7 90 52 4e d6 3e 9b 38 87 bd 12 c0 b8 20 04 bf 1b a3 f4 81 f1 cc 38 54 47 a6 4f 42 ef 9b 68 37 b8 e9 Data Ascii: J52\7rrfkH]]8zJa\|s.5Bg\P%d,rYy!U}qn,1qYfp?]1bEH1gA?@'l'1%HR[%*qAf?$YqrqXYa")zY+"t-tb1]RN>8 8TGOBh7
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 47 b6 7c 05 0a 15 65 44 c6 2e 66 b8 0c 58 0f 29 5b 52 2a e5 2a dd a8 0d 34 f7 dc cf 03 65 90 32 7c a4 1c 66 54 8e 02 25 1b a9 52 af 0c a8 7f a5 ca 7b ab dc 1e 9f 3c f5 4e 84 27 97 31 80 21 a3 13 69 c8 e5 a2 2b 39 3d 36 b3 04 16 89 bd 18 63 f6 6c c9 76 85 0c 1d f7 43 c7 48 40 d0 09 35 8f 57 50 36 cd 4d cf 99 4f 38 6a 3e a4 ad 41 a9 c9 d3 6a 13 86 97 36 ab e2 e5 b9 10 a4 3c f0 92 1a 4e 4b 93 ee 8c 8c fb 76 70 da fc 82 bf 4a a7 75 7f b4 fc 5f a8 9b b6 0a 12 42 08 21 64 96 d9 f2 eb b8 eb 7e d1 42 51 d0 9d dd 2f 99 45 bf c1 0c 85 61 a3 c6 4d 98 f4 ca 9b f5 d4 9a b7 4d 6b 42 1b ad 9a 34 53 5b 2d ea a8 31 e3 26 4c 9a 32 6d c6 6c 99 3b 66 b5 cb c2 53 82 0a 2d f3 3d ed a7 b1 4e 7d 58 46 11 0d b5 f1 c1 96 91 84 89 18 7f 12 d0 d0 86 1d 23 79 20 80 e0 29 d2 f2 79 8b Data Ascii: G\|eD.fX)[R**4e2\|fT%R{<N'1!i+9=6clvCH@5WP6MO8j>Aj6<NKvpJu_B!d~BQ/EaMMkB4S[-1&L2ml;fS-=N}XF#y )y
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 00 27 20 3a 81 f5 90 eb 78 1d 9a 5d 45 c1 3a 57 90 6a 12 0f 56 38 ac 85 24 59 e2 75 d3 b2 8a 14 4d af d3 46 0a 89 36 27 02 f9 4b 8d a4 59 41 d6 27 c2 80 0c 28 60 d8 88 68 e6 38 e5 df d9 05 18 ca f0 d5 97 a5 cb 78 56 75 fb 24 e0 3a 6e 0f 76 a3 0d ec 8c 83 14 09 00 00 00 00 00 80 b9 5f 6a 1e 46 c1 c1 5a 80 c5 79 92 77 14 93 83 0b 18 6d f7 ef 1e 6e 03 13 10 2c c0 c0 01 ac 18 80 c9 ff 0b 8d a7 29 5a a5 a4 85 f4 fe 37 ed 07 be 5f 46 42 8d 4c 36 52 42 2c 4e 53 e3 34 fe b6 99 ae 67 19 26 e2 f9 67 1f bd e9 67 21 72 53 1f 43 bc 3f 97 f1 f2 57 57 45 b4 45 45 9a 6c 48 42 52 8e b9 a6 cc c1 02 bd fd 1b 75 45 a2 fd 45 ea 58 ad 0e 32 41 b0 ba 7d 56 a6 53 75 08 7f 6a 9e fe fa 0d 49 ad 3b 18 3a 00 dc 51 dc b5 2b c2 dd 81 37 a8 d5 c2 2e ba 9d 32 9a 24 80 f0 dc f4 a2 5a 73 Data Ascii: ' :x]E:WjV8$YuMF6'KYA'(`h8xVu$:nv_jFZywmn,)Z7_FBL6RB,NS4g&gg!rSC?WWEEElHBRuEEX2A}VSujI;:Q+7.2$Zs
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: ad 4c 31 b5 d4 a0 bb a5 4d 4c 43 af 6b c1 e9 d7 cd 2f 3e 86 66 61 b9 97 cd 7c e7 3e f1 92 c2 7f d3 35 a5 7a 22 96 7f 09 30 f7 da 85 d7 9d 31 db 82 d8 cb 36 9a 3d 54 fa 97 63 94 a8 ab ae f9 7f f8 97 36 9c be bb 8a 8b d4 6e 6d 43 ea 03 5d e0 56 2f 72 d4 8c 81 e9 51 92 f5 7b 19 86 c9 8e 1e b1 83 db 26 67 f9 df f7 bf d0 b7 ff 77 5e af 50 ba c6 f4 3b 5e 01 03 c5 9f 68 5d fa 6b 06 ed f8 83 23 70 ed 1a 92 38 f0 ab a4 54 68 05 db 18 ad e5 ae 6c c1 1c 96 0b fa 15 65 2d 79 45 3e 8f 21 7f 7b 80 d7 11 33 dd e3 2b 64 d7 7f 6f 58 9a 62 70 b6 b5 26 f1 0d 87 ed ec f4 ed 73 62 81 57 5c ee ab 9a 5d 27 0f c6 07 95 2d 08 04 a5 9e 91 1e fb 09 79 b1 0b ad 0f 8c ff 02 f4 a4 7f 47 7e 98 08 52 8a 27 db a3 33 fe 4b 02 62 fc 6b f3 4a d6 ff 81 ff ef e0 b6 6f ff 39 78 2b 4b 8a 30 73 Data Ascii: L1MLCk/>fa\|>5z"016=Tc6nmC]V/rQ{&gw^P;^h]k#p8Thle-yE>!{3+doXbp&sbW\]'-yG~R'3KbkJo9x+K0s
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: e3 02 3c 74 09 a2 f2 eb 26 aa 6a d3 cd e4 4b ea c0 b9 6b f9 1c 19 96 23 e4 25 4f 13 04 17 8c 89 d9 d4 6f 96 42 a8 3b e8 2d 49 4c 04 bd d1 4a b4 63 c2 90 e3 9a d1 23 f6 65 0b 1e 2b 0a a8 93 6c 71 cf 0f b2 ce 5c 15 9a b9 da 58 3e b9 c1 a1 82 5f 10 92 c4 6b ab e6 7d fc 77 9b e1 eb ec af 87 89 5f 3e 1e c8 dd 68 1a 68 3f 68 3a 98 85 45 04 10 46 f2 f8 c9 e3 f7 89 04 10 bf 73 f9 f9 34 12 55 5f e5 7d 8b 46 ff 65 46 3e 0f ea 7c 2a 92 06 6d f8 cd 36 7f da 6d bf aa 9d d0 ce 43 3e d8 e5 e9 97 f7 89 a3 82 1a 43 91 ff ec 83 fa 84 45 44 c5 c4 25 a4 26 87 c2 f7 6a 46 cf 61 d7 87 ba c4 a7 21 4a f9 0d 6f 05 f7 6d 4f 07 0e 14 43 bb f7 66 83 38 d0 07 26 1c ff 75 6a 73 d6 ef a7 7c 3a e7 94 33 f5 0e e3 cb 66 fb 6c 10 35 81 ff 3a c2 24 6b 8f 63 6c e6 90 da f9 dc 15 4c 00 cf eb Data Ascii: <t&jKk#%OoB;-ILJc#e+lq\X>_k}w_>hh?h:EFs4U_}FeF>\|*m6mC>CED%&jFa!JomOCf8&ujs\|:3fl5:$kclL
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 9a 92 a4 68 7b 52 13 b3 44 a1 6b 9a 99 d9 58 b2 94 38 5f 89 fa 64 f6 70 36 c6 f2 7e 22 bf 1a 44 db bb 26 00 48 92 a2 ed 87 27 88 f6 1b 66 66 36 56 2b 51 bd 92 ea 93 d9 45 ca 00 00 00 00 00 00 00 80 24 49 92 24 49 92 24 49 92 24 49 92 a4 68 5b 0a cc 0a db b6 14 98 25 0a 5d 13 00 24 49 45 db 52 c4 2c 51 e8 9a 66 66 76 21 33 33 33 33 b3 b9 47 6a 02 00 49 52 d4 64 66 66 66 66 76 bd 1f 2f b7 3c f2 71 fa d3 68 f9 99 ba 7a c9 69 91 36 d2 f4 55 1a 00 24 49 69 ba 59 20 cd 2f 98 99 99 7a d1 1a 9d 0e bb 35 ec d6 b0 5b c9 da 36 88 d2 64 fa 72 43 be bb 80 04 10 7e 13 6a 5f c7 1c 7e 9d f9 8f de 85 bb f3 93 83 ac 00 9a 67 17 c0 f7 83 7e 69 46 8d cd ef d1 01 e4 b3 3f 1f 74 a1 0d 2b 40 ae 66 7d 14 97 35 6e 87 50 42 32 47 85 bd 24 fa d6 db 67 5a 80 91 04 da 86 7c bf 56 a2 Data Ascii: h{RDkX8_dp6~"D&H'ff6V+QE$I$I$I$Ih[%]$IER,Qffv!3333GjIRdffffv/<qhzi6U$IiY /z5[6drC~j_~g~iF?t+@f}5nPB2G$gZ\|V
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 65 3b ae e7 bf 81 51 9c a4 59 5e 94 55 dd b4 5d 3f 8c d3 bc ac db 7e 9c d7 fd 7a 3e f2 82 38 89 24 93 8f fc 14 a4 3e 0a 8b 88 8a 89 4b 48 c9 70 65 f5 2b 28 a9 a8 69 68 19 34 64 c4 98 71 93 3a 7a f2 e0 11 10 91 90 15 a1 a1 63 60 62 61 e3 e0 e1 13 90 90 92 53 50 d1 d0 29 a6 67 50 c1 a8 8a 89 59 8d 3a f5 9a 34 eb 80 c1 91 28 0c 8e 40 a2 d0 18 2c 2e 5f 28 96 ca 95 6a ad be 81 91 89 a9 99 85 95 8d 1d be 4e dd 1e 13 e8 d5 6f d0 90 61 a3 c6 4d 98 f4 ca 1b 53 a6 cd 9a b7 e8 83 4f 96 7c f5 cb 6f 7f ad 4d 84 58 0a a5 4a ad d5 1b cd b6 62 c5 4b 94 0c 2d 0d 46 a6 6c 58 10 46 71 92 66 79 51 56 75 d3 76 fd 30 4e f3 b2 6e fb 71 5e f7 f3 7e be 81 60 28 1c 89 c6 e2 89 64 2a 9d c9 e6 f2 85 62 a9 5c a9 d6 ea 19 18 99 98 59 58 d9 d8 91 34 cb 8b b2 aa 9b b6 eb 87 71 9a 97 75 Data Ascii: e;QY^U]?~z>8$>KHpe+(ih4dq:zc`baSP)gPY:4(@,._(jNoaMSO\|oMXJbK-FlXFqfyQVuv0Nnq^~`(d*b\YX4qu

Timestamp	Bytes transferred	Direction	Data
2025-01-14 16:01:26 UTC	688	OUT	GET /images/t_app-icon-s/p/5bb6cf2e-96d0-11e6-a753-00163ec9f5fa/3678845012/picasa-Download-Picasa.jpg HTTP/1.1 Host: images.sftcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft-visio.en.softonic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 16:01:26 UTC	503	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3139 Cache-Control: public,max-age=31536000 Content-Type: image/avif Etag: "jej8+hOyRl0NDpI8GPOvwB66PsqS6jgO1wrv6/CJeOw" Expires: Fri, 19 Sep 2025 08:37:50 GMT Fastly-Stats: io=1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4870431 Date: Tue, 14 Jan 2025 16:01:26 GMT Vary: Accept Strict-Transport-Security: max-age=63072000; includeSubDomains; preload alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 16 00 00 0b 2d 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 70 00 00 00 70 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 40 08 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 17 69 70 6d 61 Data Ascii: ftypavifavifmif1miafmeta(hdlrpictlibavifpitmilocD-(iinfinfeav01ColorjiprpKipcoispepppixiav1C@colrnclxipma
2025-01-14 16:01:26 UTC	1378	IN	Data Raw: 7a 63 eb 9e 7d f8 f0 d5 e4 aa b2 f8 96 29 3d d4 2e e2 11 18 82 59 c5 23 c0 0a a3 98 9a 32 86 6e 7d a3 0b 1e df 7e b1 e3 92 67 9f 59 15 27 8e 84 5d b0 c9 6a 01 68 24 bf 92 76 01 cd 6a 82 fa 09 b4 b1 91 08 f3 1a 43 b6 97 a3 81 dd 6e 78 3f ea 42 5a 60 a0 86 b7 ca 8d 84 d5 3a a3 b8 2e 39 3a 61 f2 99 a4 f1 cc b7 55 4f e8 ce ec 18 04 27 10 38 11 a7 06 86 77 ce 7f 5d e2 3a a6 16 2f a1 1d 1a 25 70 95 86 97 bd ea 1b 1c 5f 48 46 0d 61 44 50 34 a1 be ab ce 93 93 2a c9 52 e1 3f 69 e2 ff 00 c1 87 f4 49 db 7e 3e bc 41 e1 21 c3 e7 60 1f 1d 1f b3 30 50 7b 4e dc a5 b0 c9 05 e7 a1 01 84 28 4c 83 72 a4 de 7c fa e0 d1 f9 0c 67 a8 ef 5e 03 1e b2 d1 0e c8 1f 9e bc e5 c9 74 5f ee 12 44 8d 8f e9 67 09 e1 bc 0b 09 ca ed 35 66 7d 65 ba e7 c6 6a 96 c9 0c 18 61 38 3d 6d 78 a5 9c 9a Data Ascii: zc})=.Y#2n}~gY']jh$vjCnx?BZ`:.9:aUO'8w]:/%p_HFaDP4*R?iI~>A!`0P{N(Lr\|g^t_Dg5f}eja8=mx
2025-01-14 16:01:26 UTC	383	IN	Data Raw: 10 71 a2 12 9d 30 e5 82 51 42 92 c0 92 ec c8 8b dd 2a c4 85 17 75 fc c4 62 f0 9d 04 22 ed 07 dd 1a 5d 8f 2b e0 33 ad d7 7b e8 ee d5 64 f5 eb c7 0d 14 78 44 61 6c 78 95 2e a8 a3 57 09 b4 27 40 f9 f0 5d 0b 9a 22 f6 18 d3 8e f1 39 a8 43 9c 38 e8 90 e9 e2 84 33 83 a9 b4 34 50 ff b8 f7 1b 8b 46 9b 57 87 eb 1c 8c f3 17 22 55 ae 16 5e 63 b7 bb d4 47 cb 07 cf 5a 4b 39 13 67 fa cb 18 99 f2 3f 29 0d 2f 9b 88 a0 86 ee 52 1e ad ad c1 06 b4 3d 72 e5 ab be 5a e3 e8 ed ba fd b1 f1 25 e7 9d d4 9e df cb 18 2c 80 0a 01 9b 66 dd 4c 78 5e e9 59 e9 b1 6b 22 29 88 8b 9c c4 ee f9 54 fb d6 42 ff 55 71 8b 36 52 54 3a d7 49 9d 6d c4 9e 82 cd c1 0f 4d c4 ed 9b 7b ea 33 47 ef 13 f8 66 93 36 4f 90 cf 34 7b 66 0f 18 08 96 0d e9 84 26 f9 e4 94 e4 5f fe 9c 8f ff 56 7f 33 8c 03 9e 0f 49 Data Ascii: q0QB*ub"]+3{dxDalx.W'@]"9C834PFW"U^cGZK9g?)/R=rZ%,fLx^Yk")TBUq6RT:ImM{3Gf6O4{f&_V3I