Edit tour

Windows Analysis Report
http://www.pdf-fast.com

Overview

General Information

Sample URL:	http://www.pdf-fast.com
Analysis ID:	1671088
Infos:

Detection

Score:	22
Range:	0 - 100
Confidence:	80%

Signatures

AI detected landing page (webpage, office document or email)

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

PE file contains an invalid checksum

PE file does not import any functions

PE file overlay found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2196 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5024 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4368 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.pdf-fast.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /ccm/collect?tid=AW-16714313352&en=page_view&dl=https%3A%2F%2Fwww.pdf-fast.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1080446964.1745330527&dt=PDFast%20-%20PDF&auid=271117676.1745330527&navt=n&npa=0&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&tft=1745330526732&tfd=2807&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.pdf-fast.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:02:08 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingServer: BunnyCDN-LA1-899CDN-PullZone: 3012278CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7CDN-RequestCountryCode: USAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchCache-Control: no-cacheCDN-StorageBalancer: LA-1052CDN-StorageServer: DE-638CDN-ProxyVer: 1.23CDN-RequestPullSuccess: TrueCDN-RequestPullCode: 404CDN-CachedAt: 04/22/2025 14:02:08CDN-EdgeStorageId: 993CDN-RequestId: ebfeb7171b6875702e0e396fe1940e5dCDN-Cache: MISSCDN-Status: 404CDN-RequestTime: 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:02:09 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingServer: BunnyCDN-LA1-899CDN-PullZone: 3012278CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7CDN-RequestCountryCode: USAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchCache-Control: no-cacheCDN-StorageBalancer: LA-1052CDN-StorageServer: DE-633CDN-ProxyVer: 1.23CDN-RequestPullSuccess: TrueCDN-RequestPullCode: 404CDN-CachedAt: 04/22/2025 14:02:09CDN-EdgeStorageId: 985CDN-RequestId: 2aec690c07960cea3b75711fe3743f32CDN-Cache: MISSCDN-Status: 404CDN-RequestTime: 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:02:18 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingServer: BunnyCDN-LA1-899CDN-PullZone: 3012278CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7CDN-RequestCountryCode: USAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchCache-Control: no-cacheCDN-StorageBalancer: LA-1050CDN-StorageServer: DE-1021CDN-ProxyVer: 1.23CDN-RequestPullSuccess: TrueCDN-RequestPullCode: 404CDN-CachedAt: 04/22/2025 14:02:18CDN-EdgeStorageId: 1108CDN-RequestId: e95ba8695952e31fe776d97a217160fcCDN-Cache: MISSCDN-Status: 404CDN-RequestTime: 1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:02:19 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingServer: BunnyCDN-LA1-899CDN-PullZone: 3012278CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7CDN-RequestCountryCode: USAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-MatchCache-Control: no-cacheCDN-StorageBalancer: LA-1050CDN-StorageServer: DE-633CDN-ProxyVer: 1.23CDN-RequestPullSuccess: TrueCDN-RequestPullCode: 404CDN-CachedAt: 04/22/2025 14:02:19CDN-EdgeStorageId: 1001CDN-RequestId: 6b7e0872779d177bcaa4abb6969c0569CDN-Cache: MISSCDN-Status: 404CDN-RequestTime: 2

Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://crl.globalsign.com/codesigningrootr45.crl0U
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://ocsp.globalsign.com/codesigningrootr450F
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://ocsp.globalsign.com/gsgccr45evcodesignca20200U
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://secure.globalsign.com/cacert/codesigningrootr45.crt0A
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_72.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_77.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_66.3.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_77.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://google.com
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://google.com/pagead/form-data
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://m.youtube.com
Source: chromecache_72.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_63.3.dr, chromecache_71.3.dr, chromecache_80.3.dr, chromecache_73.3.dr, chromecache_70.3.dr	String found in binary or memory: https://www.clarity.ms/tag/
Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: https://www.globalsign.com/repository/0
Source: chromecache_72.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_78.3.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/16714313352/?random
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://www.google.com/pagead/form-data
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_72.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_72.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_63.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-16714313352
Source: chromecache_63.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_63.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TJG9ZSF8
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.244.49.179:443 -> 192.168.2.5:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 38.32.110.58:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 38.32.110.58:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.244.49.179:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.244.49.179:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.30.30:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.154.95:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.57.85.160:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 38.32.110.58:443 -> 192.168.2.5:49736 version: TLS 1.2

Source: 75a4e2aa-9741-4b20-9266-c1a9c5f25091.tmp.0.dr

Static PE information: No import functions for PE file found

Source: 75a4e2aa-9741-4b20-9266-c1a9c5f25091.tmp.0.dr

Static PE information: Data appended to the last section found

Source: classification engine

Classification label: sus22.win@28/45@28/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\cf4cbca2-931b-43ea-b80f-ca22e9abcfca.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2196 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5024 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.pdf-fast.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4368 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2196 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5024 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1960,i,2195099566500162459,2220711383887196788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4368 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: C:\ReleaseAI\win\Release\stubs\x86\ExternalUi.pdb source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr

Source: 75a4e2aa-9741-4b20-9266-c1a9c5f25091.tmp.0.dr

Static PE information: real checksum: 0x6d0fa2 should be: 0x92737

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\75a4e2aa-9741-4b20-9266-c1a9c5f25091.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 574569.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 82	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 986479.crdownload	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 82
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 82			Jump to dropped file

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.pdf-fast.com	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner
C:\Users\user\Downloads\Unconfirmed 574569.crdownload	11%	ReversingLabs
C:\Users\user\Downloads\Unconfirmed 986479.crdownload	11%	ReversingLabs
Chrome Cache Entry: 82	11%	ReversingLabs

Source	Detection	Scanner	Label
https://www.pdf-fast.com/css/Inter-Regular.DJOZHnwz.woff?v=3.19	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/media/file_arrow.mp3	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/PDFast%20Installer.exe/first	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/images/623b1cf28e68360ae9ee63aa7a59f61df2d1bf7c-77x80.svg	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/css/site.css	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/css/Inter-Regular.CKDp9E3C.woff2?v=3.19	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/css/Inter-SemiBold.Ctx7G98q.woff2?v=3.19	0%	Avira URL Cloud	safe
https://pdf-fast.com/downloads/PDFast.exe	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/images/pdffast-logo.png	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/css/Inter-SemiBold.BHlX_6qk.woff?v=3.19	0%	Avira URL Cloud	safe
https://www.pdf-fast.com/css/default.css	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
pdf-fast-website.b-cdn.net	143.244.49.179	true	false	high
googleads.g.doubleclick.net	142.250.69.2	true	false	high
vmss-clarity-ingest-eus2-b.eastus2.cloudapp.azure.com	20.57.85.160	true	false	high
publickeyservice-a.pa-3.gcp.privacysandboxservices.com	34.54.30.30	true	false	high
www.google.com	192.178.49.196	true	false	high
td.doubleclick.net	142.250.69.2	true	false	high
s-part-0043.t-0009.t-msedge.net	13.107.246.71	true	false	high
publickeyservice.pa-3.aws.privacysandboxservices.com	18.164.154.95	true	false	high
www.pdf-fast.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
publickeyservice.pa.gcp.privacysandboxservices.com	unknown	unknown	false	high
pdf-fast.com	unknown	unknown	false	high
e.clarity.ms	unknown	unknown	false	high
publickeyservice.pa.aws.privacysandboxservices.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.pdf-fast.com/css/Inter-SemiBold.Ctx7G98q.woff2?v=3.19	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/css/site.css	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/PDFast%20Installer.exe/first	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/images/623b1cf28e68360ae9ee63aa7a59f61df2d1bf7c-77x80.svg	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/css/Inter-Regular.DJOZHnwz.woff?v=3.19	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/media/file_arrow.mp3	true	Avira URL Cloud: safe	unknown
https://pdf-fast.com/downloads/PDFast.exe	false	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/css/Inter-Regular.CKDp9E3C.woff2?v=3.19	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/images/pdffast-logo.png	true	Avira URL Cloud: safe	unknown
https://e.clarity.ms/collect	false		high
https://www.clarity.ms/s/0.8.1/clarity.js	false		high
https://publickeyservice.pa.aws.privacysandboxservices.com/.well-known/protected-auction/v1/public-keys	false		high
https://www.clarity.ms/tag/oye40w4bq1	false		high
https://www.pdf-fast.com/	true		unknown
https://www.pdf-fast.com/css/Inter-SemiBold.BHlX_6qk.woff?v=3.19	true	Avira URL Cloud: safe	unknown
https://www.pdf-fast.com/css/default.css	true	Avira URL Cloud: safe	unknown
https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-keys	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ad.doubleclick.net/activity;register_conversion=1;	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://sectigo.com/CPS0	Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	false	high
http://ocsp.sectigo.com0	Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_77.3.dr	false	high
https://googleads.g.doubleclick.net	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://google.com/pagead/form-data	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://getbootstrap.com/)	chromecache_77.3.dr	false	high
https://www.clarity.ms/tag/	chromecache_63.3.dr, chromecache_71.3.dr, chromecache_80.3.dr, chromecache_73.3.dr, chromecache_70.3.dr	false	high
https://www.google.com/pagead/1p-user-list/16714313352/?random	chromecache_78.3.dr	false	high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://cct.google/taggy/agent.js	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://www.youtube.com	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://www.google.com	chromecache_72.3.dr	false	high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	false	high
https://ad.doubleclick.net/activity;	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://www.google.com/travel/flights/click/conversion	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://td.doubleclick.net	chromecache_69.3.dr, chromecache_72.3.dr	false	high
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	false	high
https://m.youtube.com	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://google.com	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://www.google.com/ccm/collect	chromecache_69.3.dr, chromecache_72.3.dr	false	high
https://github.com/microsoft/clarity	chromecache_66.3.dr	false	high
https://adservice.google.com/pagead/regclk?	chromecache_72.3.dr	false	high
https://www.google.com/pagead/form-data	chromecache_69.3.dr, chromecache_72.3.dr	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.54.30.30	publickeyservice-a.pa-3.gcp.privacysandboxservices.com	United States	2686	ATGS-MMD-ASUS	false
142.250.69.4	unknown	United States	15169	GOOGLEUS	false
18.164.154.95	publickeyservice.pa-3.aws.privacysandboxservices.com	United States	3	MIT-GATEWAYSUS	false
192.178.49.196	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.71	s-part-0043.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.69.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
20.57.85.160	vmss-clarity-ingest-eus2-b.eastus2.cloudapp.azure.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
143.244.49.179	pdf-fast-website.b-cdn.net	United States	174	COGENT-174US	false
38.32.110.58	unknown	United States	174	COGENT-174US	false

Private

IP
192.168.2.17
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1671088
Start date and time:	2025-04-22 16:01:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.pdf-fast.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.win@28/45@28/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 142.250.68.238, 142.251.2.84, 142.250.68.227, 142.250.69.14, 192.178.49.168, 192.178.49.195, 34.104.35.123, 142.250.69.3, 184.29.183.29, 4.245.163.56, 150.171.28.254
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com, ax-ring.msedge.net, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.pdf-fast.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	589824
Entropy (8bit):	6.251558712143116
Encrypted:	false
SSDEEP:	12288:TXdWNW2CJBnm9Dybn1lw1BH7xt/lKCJioiP:TtWNQJtm9YMfxt/l3xiP
MD5:	DAB9070ABFC7AF79E823C6393496D235
SHA1:	78FC50FED1B7EB4099E8FE2DE7D541DE96757431
SHA-256:	51C0EF69AFA9ABBB1F35E5D8F070FE078EAD1EEC2207B23114E6AD5EF3EDE7E7
SHA-512:	DDF6D9513ED50DFA9D4D35331F3A7B282AFBE3C75AAF068B90BFC20A71D2EED1C54270F29DA51CB3C26501FA5E161486C731ED22FEF6231D4AA8C1CCABAC16ED
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........."2..La..La..La".O`..La".I`J.La".J`..LaU.H`..LaU.O`..LaU.I`..La".H`..La".M`..La".K`..La..Ma..La.E`..La.a..La...a..La.N`..LaRich..La........PE..L....9.d.........."....$..&.........b.........&...@..........................06.......m...@.................................T./.(.....0..............{l. +....3.......).p...................@.).....`.&.@.............&......w/......................text.....&.......&................. ..`.rdata..Z.....&.......&.............@..@.data...@...../..<..../.............@....rsrc.........0......./.............@..@.reloc........3.......2.............@..B........................................................................................................................................................................................................................................................................................

Source: https://www.pdf-fast.com/	Joe Sandbox AI: Page contains button: 'Accept & Download' Source: '0.0.pages.csv'
Source: https://www.pdf-fast.com/	Joe Sandbox AI: Page contains button: 'Accept & Download' Source: '0.2.pages.csv'

Source: https://www.pdf-fast.com/	HTTP Parser: No favicon
Source: https://www.pdf-fast.com/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/default.css HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/site.css HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/623b1cf28e68360ae9ee63aa7a59f61df2d1bf7c-77x80.svg HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/pdffast-logo.png HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/file_arrow.mp3 HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.pdf-fast.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /images/623b1cf28e68360ae9ee63aa7a59f61df2d1bf7c-77x80.svg HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/oye40w4bq1 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/pdffast-logo.png HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/Inter-SemiBold.Ctx7G98q.woff2?v=3.19 HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveOrigin: https://www.pdf-fast.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.pdf-fast.com/css/default.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/Inter-Regular.CKDp9E3C.woff2?v=3.19 HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveOrigin: https://www.pdf-fast.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.pdf-fast.com/css/default.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/16714313352?random=1745330526717&cv=11&fst=1745330526717&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/16714313352/?random=1745330526717&cv=11&fst=1745330526717&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.8.1/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CLID=955fd3cfd2d14f1ca99e487027b26bb9.20250422.20260422
Source: global traffic	HTTP traffic detected: GET /css/Inter-Regular.DJOZHnwz.woff?v=3.19 HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveOrigin: https://www.pdf-fast.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.pdf-fast.com/css/default.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.271117676.1745330527
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/16714313352/?random=1745330526717&cv=11&fst=1745330400000&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyz7T8-juS2bZFFxyhgOaj_ZW1To4wvsA&random=3641734344&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/protected-auction/v1/public-keys HTTP/1.1Host: publickeyservice.pa.gcp.privacysandboxservices.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/protected-auction/v1/public-keys HTTP/1.1Host: publickeyservice.pa.aws.privacysandboxservices.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/16714313352/?random=1745330526717&cv=11&fst=1745330400000&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyz7T8-juS2bZFFxyhgOaj_ZW1To4wvsA&random=3641734344&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PDFast%20Installer.exe/first HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /downloads/PDFast.exe HTTP/1.1Host: pdf-fast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /css/Inter-SemiBold.BHlX_6qk.woff?v=3.19 HTTP/1.1Host: www.pdf-fast.comConnection: keep-aliveOrigin: https://www.pdf-fast.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.pdf-fast.com/css/default.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /PDFast%20Installer.exe/first HTTP/1.1Host: www.pdf-fast.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.pdf-fast.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect

Source: Unconfirmed 986479.crdownload.0.dr, chromecache_82.3.dr, Unconfirmed 574569.crdownload.0.dr	String found in binary or memory: VFlashWindowExFlashWindowGetPackagePathhttp://www.google.comTESTtin9999.tmphttp://www.yahoo.comhttp://www.example.com.part= "GETattachmentDLD123filenamecharsetutf-16ISO-8859-1POSTutf-8Local Network ServerFTP ServerUS-ASCIIAdvancedInstallerRange: bytes=%u- equals www.yahoo.com (Yahoo)
Source: chromecache_72.3.dr	String found in binary or memory: Wt();Do(function(){a();Ao(b)\|\|Pm(a,b)},b)},Wt=function(){return[N.m.R,N.m.U]},Xt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Yt=/^www\.googleadservices\.com$/,bu=/^gad_source[_=](\d+)$/;function gu(){return Lo("dedupe_gclid",function(){return zr()})};var hu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,iu=/^www.googleadservices.com$/;function ju(a){a\|\|(a=ku());return a.qo?!1:a.on\|\|a.pn\|\|a.sn\|\|a.qn\|\|a.Hf\|\|a.Xm\|\|a.rn\|\|a.fn?!0:!1}function ku(){var a={},b=es(!0);a.qo=!!b._up;var c=ut();a.on=c.aw!==void 0;a.pn=c.dc!==void 0;a.sn=c.wbraid!==void 0;a.qn=c.gbraid!==void 0;a.rn=c.gclsrc==="aw.ds";a.Hf=Ut().Hf;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.fn=hu.test(d);a.Xm=iu.test(d);return a};var lu=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_69.3.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=OE(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=zb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},RE=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_69.3.dr, chromecache_72.3.dr	String found in binary or memory: return f}hI.K="internal.enableAutoEventOnTimer";var $b=ua(["data-gtm-yt-inspected-"]),jI=["www.youtube.com","www.youtube-nocookie.com"],kI,lI=!1; equals www.youtube.com (Youtube)
Source: chromecache_69.3.dr	String found in binary or memory: var wH=function(a,b,c,d,e){var f=lE("fsl",c?"nv.mwt":"mwt",0),g;g=c?lE("fsl","nv.ids",[]):lE("fsl","ids",[]);if(!g.length)return!0;var k=qE(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!IC(k,KC(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.pdf-fast.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.pa.gcp.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.pa.aws.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: e.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: pdf-fast.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 22, 2025 16:01:59.602421045 CEST	53	49284	1.1.1.1	192.168.2.5
Apr 22, 2025 16:01:59.608652115 CEST	53	63078	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:00.415112019 CEST	53	63447	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:00.720508099 CEST	53	52463	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:03.917229891 CEST	53532	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:03.917435884 CEST	65233	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:04.058038950 CEST	53	53532	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:04.058065891 CEST	53	65233	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:04.757905960 CEST	49260	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:04.758255005 CEST	61631	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:04.775372982 CEST	65224	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:04.775635958 CEST	54161	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:04.961926937 CEST	53	65224	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:04.966167927 CEST	53	49260	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:04.988055944 CEST	53	54161	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:04.992621899 CEST	53	61631	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:06.087830067 CEST	53	57096	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:06.596194029 CEST	63571	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:06.596462965 CEST	55434	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:06.637877941 CEST	60583	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:06.638021946 CEST	61730	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:06.746262074 CEST	53	55434	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:06.775667906 CEST	53	63571	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:06.779000998 CEST	53	60583	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:06.779045105 CEST	53	61730	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:07.583210945 CEST	60712	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:07.583446980 CEST	50555	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:07.724013090 CEST	53	60712	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:07.724395037 CEST	53	50555	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:07.796017885 CEST	64944	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:07.796017885 CEST	63465	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:07.829775095 CEST	53	53847	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:07.936306953 CEST	53	64944	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:07.936325073 CEST	53	63465	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:08.708292007 CEST	54075	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:08.708930969 CEST	62188	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:08.848597050 CEST	53	54075	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:08.849097967 CEST	53	62188	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.217317104 CEST	61025	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.217541933 CEST	59631	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.217951059 CEST	63680	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.218077898 CEST	53812	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.298701048 CEST	59278	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.298913002 CEST	61316	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.357603073 CEST	53	61025	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.357988119 CEST	53	63680	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.358257055 CEST	53	59631	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.401119947 CEST	53	53812	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.444168091 CEST	53	59278	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.451103926 CEST	53	61316	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.579920053 CEST	53195	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.580276966 CEST	61474	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:09.720045090 CEST	53	53195	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:09.720366001 CEST	53	61474	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:17.501034975 CEST	57809	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:17.501287937 CEST	49657	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:02:17.645981073 CEST	53	57809	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:17.713964939 CEST	53	49657	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:17.981671095 CEST	53	57203	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:36.780127048 CEST	53	52743	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:56.408049107 CEST	138	138	192.168.2.5	192.168.2.255
Apr 22, 2025 16:02:59.423331022 CEST	53	51398	1.1.1.1	192.168.2.5
Apr 22, 2025 16:02:59.917625904 CEST	53	50166	1.1.1.1	192.168.2.5
Apr 22, 2025 16:03:02.339126110 CEST	53	63600	1.1.1.1	192.168.2.5
Apr 22, 2025 16:03:11.466851950 CEST	57586	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:03:11.467138052 CEST	53531	53	192.168.2.5	1.1.1.1
Apr 22, 2025 16:03:11.607429028 CEST	53	53531	1.1.1.1	192.168.2.5
Apr 22, 2025 16:03:11.607870102 CEST	53	57586	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 22, 2025 16:02:09.401245117 CEST	192.168.2.5	1.1.1.1	c281	(Port unreachable)	Destination Unreachable
Apr 22, 2025 16:02:17.714042902 CEST	192.168.2.5	1.1.1.1	c247	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:05 UTC	666	OUT	GET / HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:05 UTC	664	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:05 GMT Content-Type: text/html Content-Length: 22715 Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Cache-Control: public, max-age=10800 Last-Modified: Mon, 24 Mar 2025 16:06:12 GMT CDN-StorageServer: LA-1052 CDN-FileServer: 1050 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 206 CDN-CachedAt: 04/22/2025 12:11:55 CDN-EdgeStorageId: 1114 CDN-RequestId: 1538220c71c11a81171035d315d1c6a4 CDN-Cache: HIT CDN-Status: 200 CDN-RequestTime: 2 Accept-Ranges: bytes
2025-04-22 14:02:05 UTC	15928	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0a 20 20 20 20 20 20 20 20 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 Data Ascii: <!DOCTYPE html><html lang="en"><head> <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.asy
2025-04-22 14:02:05 UTC	6787	IN	Data Raw: 34 25 32 30 31 2e 32 38 32 4c 39 2e 31 32 34 25 32 30 31 35 35 2e 34 36 33 61 2e 38 36 31 2e 38 36 31 25 32 30 30 25 32 30 30 25 32 30 31 2d 31 2e 31 35 31 2e 32 37 35 2e 38 36 32 2e 38 36 32 25 32 30 30 25 32 30 30 25 32 30 31 2d 2e 33 34 35 2d 31 2e 31 33 31 4c 38 35 2e 37 32 35 25 32 30 31 39 2e 34 31 33 61 2e 38 36 33 2e 38 36 33 25 32 30 30 25 32 30 30 25 32 30 31 25 32 30 2e 37 35 2d 2e 34 32 35 7a 4d 37 30 2e 38 34 32 25 32 30 32 32 2e 32 37 37 61 2e 38 32 2e 38 32 25 32 30 30 25 32 30 30 25 32 30 31 25 32 30 2e 34 33 31 2e 31 31 38 2e 38 35 37 2e 38 35 37 25 32 30 30 25 32 30 30 25 32 30 31 25 32 30 2e 33 32 25 32 30 31 2e 31 37 4c 34 2e 31 36 37 25 32 30 31 34 30 2e 32 37 32 61 2e 38 34 2e 38 34 25 32 30 30 25 32 30 30 25 32 30 31 2d 2e 32 32 2e Data Ascii: 4%201.282L9.124%20155.463a.861.861%200%200%201-1.151.275.862.862%200%200%201-.345-1.131L85.725%2019.413a.863.863%200%200%201%20.75-.425zM70.842%2022.277a.82.82%200%200%201%20.431.118.857.857%200%200%201%20.32%201.17L4.167%20140.272a.84.84%200%200%201-.22.

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:06 UTC	553	OUT	GET /css/default.css HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:06 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:06 GMT Content-Type: text/css Content-Length: 233620 Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=10800 ETag: "67e182fd-39094" Last-Modified: Mon, 24 Mar 2025 16:06:21 GMT CDN-StorageServer: LA-1050 CDN-FileServer: 963 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/22/2025 14:02:06 CDN-EdgeStorageId: 1000 CDN-RequestId: 0ef2f45cae185dd2095406fcea9cedd9 CDN-Cache: MISS CDN-Status: 200 CDN-RequestTime: 2 Accept-Ranges: bytes
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6d 64 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 6d 64 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 Data Ascii: x:0 0 auto;width:20%}.row-cols-md-6>*{flex:0 0 auto;width:16.66666667%}.col-md-auto{flex:0 0 auto;width:auto}.col-md-1{flex:0 0 auto;width:8.33333333%}.col-md-2{flex:0 0 auto;width:16.66666667%}.col-md-3{flex:0 0 auto;width:25%}.col-md-4{flex:0 0 auto;wid
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 33 37 35 72 65 6d 20 32 2e 32 35 72 65 6d 20 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 36 62 37 66 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 23 30 64 36 65 66 64 34 30 3b 6f 75 Data Ascii: 375rem 2.25rem .375rem .75rem;transition:border-color .15s ease-in-out,box-shadow .15s ease-in-out;width:100%}@media (prefers-reduced-motion:reduce){.form-select{transition:none}}.form-select:focus{border-color:#86b7fe;box-shadow:0 0 0 .25rem #0d6efd40;ou
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 68 2e 34 4c 36 20 36 2e 35 7a 27 2f 25 33 45 25 33 43 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 38 2e 32 27 20 72 3d 27 2e 36 27 20 66 69 6c 6c 3d 27 25 32 33 64 63 33 35 34 35 27 20 73 74 72 6f 6b 65 3d 27 6e 6f 6e 65 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 20 63 61 6c 63 28 2e 33 37 35 65 6d 20 2b 20 2e 31 38 37 35 72 65 6d 29 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 61 6c 63 28 2e 37 35 65 6d 20 2b 20 2e 33 37 35 72 65 6d 29 20 63 61 6c 63 28 2e 37 35 65 6d 20 2b 20 2e 33 37 35 72 65 6d 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 Data Ascii: h.4L6 6.5z'/%3E%3Ccircle cx='6' cy='8.2' r='.6' fill='%23dc3545' stroke='none'/%3E%3C/svg%3E");background-position:right calc(.375em + .1875rem) center;background-repeat:no-repeat;background-size:calc(.75em + .375rem) calc(.75em + .375rem);border-color:va
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 62 73 2d 70 6f 70 70 65 72 5d 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 73 6d 2d 65 6e 64 7b 2d 2d 62 73 2d 70 6f 73 69 74 69 6f 6e 3a 65 6e 64 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 73 6d 2d 65 6e 64 5b 64 61 74 61 2d 62 73 2d 70 6f 70 70 65 72 5d 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 6d 64 2d 73 74 61 72 74 7b 2d 2d 62 73 2d 70 6f 73 69 74 69 6f 6e 3a 73 74 61 72 74 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 6d 64 2d 73 74 61 72 74 5b 64 61 74 61 2d 62 73 2d 70 6f 70 70 65 72 5d 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 64 Data Ascii: bs-popper]{left:0;right:auto}.dropdown-menu-sm-end{--bs-position:end}.dropdown-menu-sm-end[data-bs-popper]{left:auto;right:0}}@media (min-width:768px){.dropdown-menu-md-start{--bs-position:start}.dropdown-menu-md-start[data-bs-popper]{left:0;right:auto}.d
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 78 6c 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 78 6c 20 2e 6e 61 76 62 61 72 2d 6e 61 76 2d 73 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 78 6c 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 7b 64 69 73 70 6c 61 Data Ascii: nu{position:absolute}.navbar-expand-xl .navbar-nav .nav-link{padding-left:var(--bs-navbar-nav-link-padding-x);padding-right:var(--bs-navbar-nav-link-padding-x)}.navbar-expand-xl .navbar-nav-scroll{overflow:visible}.navbar-expand-xl .navbar-collapse{displa
2025-04-22 14:02:06 UTC	16384	IN	Data Raw: 75 73 29 7d 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 67 7b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 78 3a 31 2e 35 72 65 6d 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 79 3a 2e 37 35 72 65 6d 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c 67 29 7d 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 73 6d 7b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 78 3a 2e 35 72 65 6d 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 79 3a 2e 32 35 72 65 6d Data Ascii: us)}.pagination-lg{--bs-pagination-padding-x:1.5rem;--bs-pagination-padding-y:.75rem;--bs-pagination-font-size:1.25rem;--bs-pagination-border-radius:var(--bs-border-radius-lg)}.pagination-sm{--bs-pagination-padding-x:.5rem;--bs-pagination-padding-y:.25rem
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 72 6b 7b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 Data Ascii: rk{--bs-list-group-color:var(--bs-dark-text-emphasis);--bs-list-group-bg:var(--bs-dark-bg-subtle);--bs-list-group-border-color:var(--bs-dark-border-subtle);--bs-list-group-action-hover-color:var(--bs-emphasis-color);--bs-list-group-action-hover-bg:var(--b
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 3a 61 66 74 65 72 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 74 74 6f 6d 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2d 77 69 64 74 68 29 2a 2e 35 29 20 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2d 68 65 69 67 68 74 29 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 74 74 6f 6d 3e 2e 70 6f 70 6f 76 65 72 2d Data Ascii: er-bottom>.popover-arrow:after,.bs-popover-bottom>.popover-arrow:before{border-width:0 calc(var(--bs-popover-arrow-width)*.5) var(--bs-popover-arrow-height)}.bs-popover-auto[data-popper-placement^=bottom]>.popover-arrow:before,.bs-popover-bottom>.popover-
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 2c 2e 6f 66 66 63 61 6e 76 61 73 2d 78 78 6c 2e 73 68 6f 77 2c 2e 6f 66 66 63 61 6e 76 61 73 2d 78 78 6c 2e 73 68 6f 77 69 6e 67 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 34 30 30 70 78 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d 78 78 6c 7b 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 68 65 69 67 68 74 3a 61 75 74 6f 3b 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6f 66 66 63 61 6e 76 61 73 2d 78 78 6c 20 2e 6f 66 66 63 61 6e 76 61 73 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6f 66 66 63 61 6e 76 Data Ascii: ,.offcanvas-xxl.show,.offcanvas-xxl.showing{visibility:visible}}@media (min-width:1400px){.offcanvas-xxl{--bs-offcanvas-height:auto;--bs-offcanvas-border-width:0;background-color:transparent!important}.offcanvas-xxl .offcanvas-header{display:none}.offcanv

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:06 UTC	550	OUT	GET /css/site.css HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:06 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:06 GMT Content-Type: text/css Content-Length: 18082 Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=10800 ETag: "67e182ff-46a2" Last-Modified: Mon, 24 Mar 2025 16:06:23 GMT CDN-StorageServer: LA-1050 CDN-FileServer: 1050 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/22/2025 14:02:06 CDN-EdgeStorageId: 992 CDN-RequestId: 74f07361db59af712b2e667b6f0b1b79 CDN-Cache: MISS CDN-Status: 200 CDN-RequestTime: 1 Accept-Ranges: bytes
2025-04-22 14:02:06 UTC	15371	IN	Data Raw: 2e 63 6f 6c 5b 64 61 74 61 2d 76 2d 65 64 37 33 65 32 36 66 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 34 30 36 33 30 61 37 31 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 31 61 31 62 30 63 39 63 29 7d 2e 68 65 61 64 65 72 5b 64 61 74 61 2d 76 2d 65 64 37 33 65 32 36 66 5d 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 65 72 2d 2d 6e 6f 74 2d 74 72 61 6e 73 70 61 72 65 6e 74 5b 64 61 74 61 2d 76 2d 65 64 37 33 65 32 36 66 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 31 65 31 31 63 36 37 32 29 7d 2e 68 65 61 64 65 72 2d 2d 62 6f 74 74 6f 6d 2d 62 6f 72 64 65 72 5b 64 61 74 61 2d 76 2d 65 64 37 33 65 32 36 66 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 Data Ascii: .col[data-v-ed73e26f]{display:flex;justify-content:var(--40630a71);margin-left:var(--1a1b0c9c)}.header[data-v-ed73e26f]{width:100%}.header--not-transparent[data-v-ed73e26f]{background:var(--1e11c672)}.header--bottom-border[data-v-ed73e26f]{border-bottom:1
2025-04-22 14:02:06 UTC	2711	IN	Data Raw: 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 37 29 3b 20 2f 2a 20 44 61 72 6b 20 73 65 6d 69 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 6f 76 65 72 6c 61 79 20 2a 2f 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2f 2a 20 49 6e 69 74 69 61 6c 6c 79 20 68 69 64 64 65 6e 20 2a 2f 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 3b 20 2f 2a 20 45 6e 73 75 72 65 20 69 74 27 73 20 61 62 6f 76 65 20 65 76 65 72 Data Ascii: overlay { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background-color: rgba(0, 0, 0, 0.7); /* Dark semi-transparent overlay / display: none; / Initially hidden / z-index: 1000; / Ensure it's above ever

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:06 UTC	641	OUT	GET /images/623b1cf28e68360ae9ee63aa7a59f61df2d1bf7c-77x80.svg HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:06 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:06 GMT Content-Type: image/svg+xml Content-Length: 7254 Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=10800 ETag: "67e18302-1c56" Last-Modified: Mon, 24 Mar 2025 16:06:26 GMT CDN-StorageServer: LA-1053 CDN-FileServer: 1051 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/22/2025 14:02:06 CDN-EdgeStorageId: 998 CDN-RequestId: 781926dd336416583fb4dcdfb3f40f39 CDN-Cache: MISS CDN-Status: 200 CDN-RequestTime: 1 Accept-Ranges: bytes
2025-04-22 14:02:06 UTC	7254	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 37 20 38 30 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 77 69 64 74 68 3d 22 37 37 70 78 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 39 45 31 46 30 42 45 44 2d 43 43 31 30 2d 34 37 32 41 2d 42 42 45 44 2d 45 32 41 42 43 38 43 37 38 41 43 43 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 Data Ascii: <svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 77 80" height="80px" width="77px"> <title>9E1F0BED-CC10-472A-BBED-E2ABC8C78ACC</title> <g fill-rule="evenodd" fill="none" stroke-width="1

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:06 UTC	607	OUT	GET /images/pdffast-logo.png HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:07 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:07 GMT Content-Type: image/png Content-Length: 3511 Connection: close Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=10800 Last-Modified: Mon, 24 Mar 2025 16:06:31 GMT CDN-StorageServer: LA-1052 CDN-FileServer: 1050 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 206 CDN-CachedAt: 04/22/2025 12:11:55 CDN-EdgeStorageId: 996 CDN-RequestId: 51d1982f2cb07d393e54265adb4c6ac8 CDN-Cache: HIT CDN-Status: 200 CDN-RequestTime: 0 Accept-Ranges: bytes
2025-04-22 14:02:07 UTC	3511	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 9a 00 00 00 25 08 06 00 00 00 ba 63 f0 b7 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0d 4c 49 44 41 54 78 01 ed 5c dd 6e 1b c7 15 3e 33 b3 a4 15 a3 68 58 20 57 ed 45 d8 07 28 22 3f 81 a9 8b 02 b6 68 c7 d2 65 1d 17 96 9e c0 e4 13 58 7a 02 4a 4f 20 09 45 93 4b c9 49 29 05 28 50 33 4f 10 e5 b2 57 59 03 ed 5d 8b 32 68 e3 9f 25 77 a6 e7 2c b9 d4 ee 72 ce ec ec 52 0e 6c 20 1f 20 9b e4 0e cf ec cf 99 f3 f3 9d 33 14 f0 9e 62 f2 d5 9d 8e 90 ea 79 d9 38 01 26 34 42 84 60 cc c9 24 d2 a3 0f b6 bf 0e b9 b1 d3 2f ef 6d 81 32 a7 e5 32 e1 d2 08 83 32 e1 59 99 cc d9 b9 6e 1e 08 29 9e 40 0d a8 e8 c7 5f 89 Data Ascii: PNGIHDR%cpHYssRGBgAMAaLIDATx\n>3hX WE("?heXzJO EKI)(P3OWY]2h%w,rRl 3by8&4B`$/m222Yn)@_

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:06 UTC	556	OUT	GET /media/file_arrow.mp3 HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive sec-ch-ua-platform: "Windows" Accept-Encoding: identity;q=1, ;q=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.pdf-fast.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2025-04-22 14:02:07 UTC	998	IN	HTTP/1.1 206 Partial Content Date: Tue, 22 Apr 2025 14:02:07 GMT Content-Type: audio/mpeg Content-Length: 101805 Connection: close Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=10800 Last-Modified: Mon, 24 Mar 2025 16:06:41 GMT CDN-StorageServer: LA-1052 CDN-FileServer: 667 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 206 CDN-CachedAt: 04/22/2025 12:11:55 CDN-EdgeStorageId: 1108 CDN-RequestId: 58b01c3a9dcc81445de445d23b6cbd79 CDN-Cache: HIT CDN-Status: 200 CDN-RequestTime: 2 Content-Range: bytes 0-101804/101805
2025-04-22 14:02:07 UTC	7240	IN	Data Raw: 49 44 33 04 00 00 00 00 00 23 54 53 53 45 00 00 00 0f 00 00 03 4c 61 76 66 35 39 2e 31 36 2e 31 30 30 00 00 00 00 00 00 00 00 00 00 00 ff f3 e4 c0 00 00 00 00 00 00 00 00 00 49 6e 66 6f 00 00 00 0f 00 00 00 d3 00 01 8d 80 00 04 07 09 0c 0e 10 13 15 18 1b 1e 20 23 25 27 2a 2c 2f 32 35 37 39 3c 3e 41 43 46 49 4c 4e 50 53 55 58 5a 5c 60 63 65 67 6a 6c 6f 71 73 77 79 7c 7e 81 83 86 88 8a 8e 90 93 95 98 9a 9c 9f a1 a5 a7 aa ac af b1 b3 b6 b8 bc be c1 c3 c6 c8 ca cd cf d3 d5 d8 da dc df e1 e4 e6 ea ec ef f1 f3 f6 f8 fb fd 00 00 00 00 4c 61 76 63 35 39 2e 31 38 00 00 00 00 00 00 00 00 00 00 00 00 24 03 b0 00 00 00 00 00 01 8d 80 4e c2 49 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ID3#TSSELavf59.16.100Info #%'*,/2579<>ACFILNPSUXZ\`cegjloqswy\|~Lavc59.18$NI
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 14 0f 0b 81 27 ff f3 e4 c4 f9 73 44 3a 3d 62 f7 76 58 a3 8e 85 e9 98 0c 37 0e 30 57 83 43 a9 72 9b e9 50 bd d4 dd 2e 66 e6 d7 c4 7b 93 f0 d6 77 a2 72 28 36 07 8b bb 09 b4 bd 53 4d 22 13 95 5f 30 c8 25 dc cd cc 70 50 82 b3 0d 6a a2 20 23 07 08 01 23 3b 62 00 14 1d 66 8f 39 8d 83 08 c2 58 0c 30 5d 54 6e 63 ce 9b c0 c9 9c 54 3c 4e 22 de c3 92 24 d2 6e 4d 8a 51 17 82 25 ec 41 c2 6b f0 b6 5a b2 54 e9 be 82 20 28 69 af 40 4c 3a 25 23 a2 5e 2d 39 82 a5 ea c1 34 a2 c0 1b 30 12 0e 60 ce ca e5 b7 75 41 9d 26 0c b1 94 16 1b 83 de d7 19 31 9a ec 09 43 0d 3e b2 da cf cb b3 1e 67 4e b4 be 5b 94 6a 79 87 33 6f 92 c3 11 72 e1 02 80 9d a4 ef 66 ad 61 79 80 00 4b dc c4 d9 0a 56 b2 26 a5 04 ac 2a a5 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: 'sD:=bvX70WCrP.f{wr(6SM"_0%pPj ##;bf9X0]TncT<N"$nMQ%AkZT (i@L:%#^-940`uA&1C>gN[jy3orfayKV&*LAME3.100UUUUUUUUUUUUUUUU
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 0b ec 08 3c 79 12 d9 03 4a 34 97 0b 14 6c 8d 01 19 b1 1b e1 37 17 84 c2 34 bd e0 a5 55 30 11 70 55 29 fa 6a 2a 5f c0 b8 23 45 19 4a 8f 12 b6 4b 98 6f c8 34 d0 8c c3 6c 80 a9 83 49 23 21 bf 50 96 c6 01 a6 82 a6 a0 ac 68 46 91 c6 90 e8 29 30 91 4a dc 5d a9 70 34 a4 0d 74 cc 21 52 a1 28 98 a1 a3 61 da 80 c2 26 7a c6 b8 c2 04 ca 21 33 d4 2e 98 40 2e 08 00 d3 25 23 6d a2 b2 52 45 77 05 0b 12 44 1a 01 78 93 15 a4 30 70 30 22 13 09 96 31 8f 08 24 10 89 a2 53 12 32 da 03 26 02 a4 c3 50 38 34 12 00 9e 4c 41 4d 45 33 2e 31 30 30 aa aa 16 4d 44 10 6b c3 0e 94 c9 0c 03 23 12 28 44 2d 44 1d f6 c3 00 45 a4 b0 86 bc ca 59 93 09 59 2c f1 c3 77 1f f7 e1 e6 72 5f 68 94 32 ef 3b ad 79 41 41 a0 0b 34 75 c4 2c 15 3a 02 14 1d 9c 3c 6b 29 0e 24 22 19 12 05 b1 86 92 90 c0 41 81 Data Ascii: <yJ4l74U0pU)j*_#EJKo4lI#!PhF)0J]p4t!R(a&z!3.@.%#mREwDx0p0"1$S2&P84LAME3.100MDk#(D-DEYY,wr_h2;yAA4u,:<k)$"A
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 1e 5e bc e4 30 04 a2 56 ca 54 ad b1 c8 cb f6 ad 89 24 87 a9 3e d3 18 b2 61 4c ac 55 85 54 ed a4 aa 1b b6 f3 c6 26 e8 9f ba d2 76 c2 d7 d7 9b e6 e4 3f d2 6b 50 2d f9 25 3c aa 49 65 c3 71 e7 63 92 5e 4b 62 4a 69 0a 65 0c e1 95 3e 6c 35 62 bc 90 13 26 87 24 ad 6d a4 29 f6 ee d8 9c 48 71 4e d8 7b 5e 6a ad 15 91 ac 2a 8d 3e 89 17 95 12 0b 3d 88 cc cd 48 cc ce 84 c9 9c 0c 39 38 f1 be 0d d2 54 fd 51 ce d5 8c d6 99 0c 00 64 d4 4a cc 38 2c c3 44 8c 40 0c c4 c9 80 c3 80 a1 c3 15 19 14 00 32 d2 da 64 66 56 72 e6 18 18 a0 2b 31 89 14 6a 48 98 f3 c6 98 c1 b3 08 0a 6e 66 c6 98 84 c2 de 03 0a 28 b1 33 33 10 5c cc 0e 16 2e c4 cc a1 b4 71 04 07 37 c5 c1 a0 10 e8 0a 0c af 81 00 00 c4 c7 91 8f 02 08 38 a0 29 d8 e4 10 8f 2f 08 f2 20 30 d0 20 f1 50 09 a2 e4 23 c3 71 53 72 f4 Data Ascii: ^0VT$>aLUT&v?kP-%<Ieqc^KbJie>l5b&$m)HqN{^j*>=H98TQdJ8,D@2dfVr+1jHnf(33\.q78)/ 0 P#qSr
2025-04-22 14:02:07 UTC	9144	IN	Data Raw: d3 4c 58 ca 03 54 3e fb 34 58 76 cf 05 c9 19 24 0e ff d1 ae d9 3c 0a d8 e5 ab 0f 0f bc ad 25 d8 7a 57 3b 76 88 55 32 48 dc 31 ac 94 39 88 bb 32 aa 8d 34 1d 1f 34 60 ba 30 d4 dc 35 55 1c 31 b9 62 31 10 9e 30 bd 5a 31 68 9f 30 31 f2 34 9c 6e 32 65 9a 1e 28 8c 59 28 c1 41 00 2f a8 c0 86 12 34 7c a9 ed 78 0c dc 90 78 15 48 33 45 37 9b 61 08 07 78 1a 83 49 74 90 51 40 69 93 96 0e 10 8e 18 a1 09 9f 04 85 80 c6 01 4c 14 91 6d 01 80 87 40 84 03 46 04 12 d7 93 e8 88 05 3a 13 20 bd 6b 31 07 18 bb c6 10 10 bb c8 80 9a 32 36 96 f8 30 80 b4 ca 76 aa e5 92 26 33 2f d3 b7 36 fb c8 91 ed a9 2e a4 00 28 23 4e 5d 25 ad 69 4b 0e b9 c1 c2 c3 cb 85 9b 69 6f db ac fa ca a1 53 90 34 5d 98 a9 c9 6f 16 a4 95 8c b2 a4 14 6a 65 90 65 a6 34 2c e5 24 58 18 50 c1 10 80 43 20 e0 a8 4b Data Ascii: LXT>4Xv$<%zW;vU2H19244`05U1b10Z1h014n2e(Y(A/4\|xxH3E7axItQ@iLm@F: k1260v&3/6.(#N]%iKioS4]ojee4,$XPC K
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 80 59 5a 49 c6 d0 ad 9d bd 49 27 26 41 68 1e 22 ad d5 60 0c 00 00 ec c0 2c 00 cc 20 c1 50 d2 91 08 8c 7d 44 c8 04 2c 86 2a 47 9c 6a aa 6e 46 14 02 62 62 b4 31 e6 65 ea b0 68 46 28 86 11 40 a6 60 ee 11 e6 0a c2 38 61 f2 04 e6 03 40 30 60 2a 07 46 a8 68 98 18 30 0c 10 98 cd 5c 6d 92 92 27 8b 0d 0c 08 6d 1e 4e a0 38 00 12 30 b1 74 a0 a2 5c e3 06 09 4c 0a 20 65 e4 41 83 2e 17 cb 80 f0 18 00 54 68 92 a2 d6 48 c1 11 dc d0 83 10 80 19 86 03 c6 3e 5b 99 f0 3a 62 22 31 88 0a 27 0f b4 13 5e cc 80 2a 33 6e 20 ed 29 40 08 44 40 16 31 d2 d4 d3 03 71 08 49 3a 4c ee c2 32 d0 54 c1 20 63 08 01 0c ce 56 31 08 20 88 72 10 4b 31 e0 94 04 48 1a 30 00 4b e6 a2 3d 80 4e 03 00 83 68 b5 0c c6 1a 30 e0 34 c0 a1 13 ce 00 83 90 c0 49 33 20 b2 e2 16 1b 05 72 9a 4e 91 89 18 94 29 ec Data Ascii: YZII'&Ah"`, P}D,GjnFbb1ehF(@`8a@0`Fh0\m'mN80t\L eA.ThH>[:b"1'^*3n )@D@1qI:L2T cV1 rK1H0K=Nh04I3 rN)
2025-04-22 14:02:07 UTC	16384	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 ff f3 e4 c4 00 00 00 03 48 00 00 00 00 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUHLAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUU
2025-04-22 14:02:07 UTC	3501	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 ff f3 e4 c4 00 00 00 03 48 00 00 00 00 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUHLAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:07 UTC	569	OUT	GET /tag/oye40w4bq1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:07 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:07 GMT Content-Type: application/x-javascript Content-Length: 674 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=955fd3cfd2d14f1ca99e487027b26bb9.20250422.20260422; expires=Wed, 22 Apr 2026 14:02:07 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64 x-azure-ref: 20250422T140207Z-r185b9c9945rmbgfhC1PHXqy3g0000000pa00000000049a9 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2025-04-22 14:02:07 UTC	674	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:07 UTC	608	OUT	GET /css/Inter-SemiBold.Ctx7G98q.woff2?v=3.19 HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive Origin: https://www.pdf-fast.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.pdf-fast.com/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:18 UTC	931	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:02:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: no-cache CDN-StorageBalancer: LA-1050 CDN-StorageServer: DE-1021 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 04/22/2025 14:02:18 CDN-EdgeStorageId: 1108 CDN-RequestId: e95ba8695952e31fe776d97a217160fc CDN-Cache: MISS CDN-Status: 404 CDN-RequestTime: 1
2025-04-22 14:02:18 UTC	556	IN	Data Raw: 32 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 5b 61 5d 3d 63 5b 61 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 63 5b 61 5d 2e 71 3d 63 5b 61 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 3b 74 2e 61 73 79 6e 63 3d 31 3b 74 2e Data Ascii: 225<!DOCTYPE html><html><head> <title>404 Not Found</title> <script type="text/javascript"> (function(c,l,a,r,i,t,y){ c[a]=c[a]\|\|function(){(c[a].q=c[a].q\|\|[]).push(arguments)}; t=l.createElement(r);t.async=1;t.
2025-04-22 14:02:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:07 UTC	607	OUT	GET /css/Inter-Regular.CKDp9E3C.woff2?v=3.19 HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive Origin: https://www.pdf-fast.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.pdf-fast.com/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:08 UTC	929	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:02:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: no-cache CDN-StorageBalancer: LA-1052 CDN-StorageServer: DE-638 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 04/22/2025 14:02:08 CDN-EdgeStorageId: 993 CDN-RequestId: ebfeb7171b6875702e0e396fe1940e5d CDN-Cache: MISS CDN-Status: 404 CDN-RequestTime: 2
2025-04-22 14:02:08 UTC	556	IN	Data Raw: 32 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 5b 61 5d 3d 63 5b 61 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 63 5b 61 5d 2e 71 3d 63 5b 61 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 3b 74 2e 61 73 79 6e 63 3d 31 3b 74 2e Data Ascii: 225<!DOCTYPE html><html><head> <title>404 Not Found</title> <script type="text/javascript"> (function(c,l,a,r,i,t,y){ c[a]=c[a]\|\|function(){(c[a].q=c[a].q\|\|[]).push(arguments)}; t=l.createElement(r);t.async=1;t.
2025-04-22 14:02:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:08 UTC	1556	OUT	GET /td/rul/16714313352?random=1745330526717&cv=11&fst=1745330526717&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:08 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 22 Apr 2025 14:02:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 22-Apr-2025 14:17:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-22 14:02:08 UTC	539	IN	Data Raw: 36 63 38 34 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 69 67 5f 6c 69 73 74 3d 7b 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 34 73 32 37 31 31 31 37 36 37 36 2e 31 37 34 35 33 33 30 35 32 37 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 Data Ascii: 6c84<html><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s271117676.1745330527","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","d
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 38 38 34 37 37 39 39 39 34 31 22 5d 2c 6e 75 6c 6c 2c 31 37 34 35 33 33 30 35 32 38 32 37 33 30 32 30 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 37 38 37 31 31 36 36 30 39 34 37 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 33 39 34 38 32 35 30 33 36 38 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 Data Ascii: serBiddingSignals":[["8847799941"],null,1745330528273020],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=178711660947\u0026cr_id=739482503683\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 36 63 72 5f 69 64 3d 37 33 39 34 38 32 35 30 33 36 38 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 32 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 37 38 37 31 31 36 36 30 39 34 37 22 2c 22 37 33 39 34 38 32 35 30 33 36 38 30 22 2c 22 32 22 2c 22 32 32 32 39 35 34 33 36 36 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 38 34 37 37 39 39 39 34 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a Data Ascii: 6cr_id=739482503680\u0026cv_id=2\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j8847799941!4s*2A","metadata":["178711660947","739482503680","2","22295436601",null,null,null,null,null,null,"8847799941"],"adRenderId":
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 22 3a 5b 22 31 37 38 37 31 31 36 36 30 39 34 37 22 2c 22 37 33 35 32 33 39 34 34 30 39 39 35 22 2c 6e 75 6c 6c 2c 22 32 32 32 39 35 34 33 36 36 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 38 34 37 37 39 39 39 34 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 2d 78 6d 6e 54 64 54 4b 54 65 67 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 38 35 30 35 30 37 33 36 33 30 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 33 Data Ascii: ":["178711660947","735239440995",null,"22295436601",null,null,null,null,null,null,"8847799941"],"adRenderId":"-xmnTdTKTeg","buyerReportingId":"1j8847799941!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=185050736308\u0026cr_id=73
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 38 30 39 30 31 36 38 33 35 35 30 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 34 31 37 37 30 35 38 37 31 34 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 38 30 39 Data Ascii: 847799941!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=180901683550\u0026cr_id=741770587142\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j8847799941!4s2A","metadata":["1809
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 37 35 32 36 32 30 37 33 35 33 34 22 2c 22 37 33 39 35 36 38 34 36 35 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 32 33 34 38 33 30 36 37 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 38 34 37 37 39 39 39 34 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 4d 6e 76 50 32 7a 5a 44 6f 44 34 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 38 38 34 37 37 39 39 39 34 31 21 Data Ascii: D_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j8847799941!4s*2A","metadata":["175262073534","739568465432",null,"22348306775",null,null,null,null,null,null,"8847799941"],"adRenderId":"MnvP2zZDoD4","buyerReportingId":"1j8847799941!
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 31 39 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 38 34 37 37 39 39 39 34 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 31 65 79 35 79 62 5f 4e 44 44 34 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 37 37 33 34 31 32 32 31 31 33 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 34 31 37 37 30 35 38 37 31 38 34 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d Data Ascii: 199",null,null,null,null,null,null,"8847799941"],"adRenderId":"1ey5yb_NDD4","buyerReportingId":"1j8847799941!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=177341221135\u0026cr_id=741770587184\u0026cv_id=1\u0026format=${AD_WIDTH}
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 37 37 33 34 31 32 32 31 31 33 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 34 31 37 37 30 35 38 37 31 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 37 37 33 34 31 32 32 31 31 33 35 22 2c 22 37 34 31 37 37 30 35 38 37 31 37 35 22 2c 6e 75 6c 6c 2c 22 32 32 33 36 39 39 33 31 31 39 39 22 2c 6e 75 6c 6c 2c Data Ascii: leclick.net/td/adfetch/gda?adg_id=177341221135\u0026cr_id=741770587175\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j8847799941!4s*2A","metadata":["177341221135","741770587175",null,"22369931199",null,
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 37 37 32 31 33 34 36 31 34 31 39 22 2c 22 37 34 31 37 37 30 35 38 37 31 30 39 22 2c 22 31 22 2c 22 32 32 33 36 39 39 33 31 39 36 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 38 34 37 37 39 39 39 34 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 39 41 43 42 2d 53 55 78 39 6f 67 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e Data Ascii: u0026seat=2\u0026rp_id=r1j8847799941!4s2A","metadata":["177213461419","741770587109","1","22369931967",null,null,null,null,null,null,"8847799941"],"adRenderId":"9ACB-SUx9og","buyerReportingId":"1j8847799941!4s2A"},{"renderUrl":"https://tdsf.doubleclick.
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 34 34 64 5a 52 48 66 61 6a 58 45 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 38 38 34 37 37 39 39 39 34 31 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 37 37 32 31 33 34 36 31 34 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 34 31 37 37 30 35 38 37 30 39 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 Data Ascii: "adRenderId":"44dZRHfajXE","buyerReportingId":"1j8847799941!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=177213461419\u0026cr_id=741770587097\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:08 UTC	1261	OUT	GET /pagead/viewthroughconversion/16714313352/?random=1745330526717&cv=11&fst=1745330526717&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:08 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 22 Apr 2025 14:02:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 22-Apr-2025 14:17:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-22 14:02:08 UTC	482	IN	Data Raw: 66 31 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 62 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 64 5d 3d 62 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 Data Ascii: f18(function(){var s = {};(function(){var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,d,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[d]=b.value;return a};function l(a){a=["object"==typeof globalThis&&globalT
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 72 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 64 2c 62 29 7b 69 66 28 21 62 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 62 3d 74 5b 64 5d 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 64 5d 3b 62 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 62 21 3d 3d 76 6f 69 64 20 30 3f 62 3a 61 5b 64 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 64 2c 62 29 7b 69 66 28 64 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 72 3f 67 3d 72 3a 67 3d 70 Data Ascii: peof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},t={};function u(a,d,b){if(!b\|\|a!=null){b=t[d];if(b==null)return a[d];b=a[b];return b!==void 0?b:a[d]}} function v(a,d,b){if(d)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in r?g=r:g=p
2025-04-22 14:02:08 UTC	1324	IN	Data Raw: 64 3d 6e 75 6c 6c 7d 3b 64 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 64 2e 73 72 63 3d 61 7d 20 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 74 72 79 7b 76 61 72 20 64 3d 41 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 41 2e 73 65 6e 64 42 65 61 63 6f 6e 28 61 29 7d 63 61 74 63 68 28 62 29 7b 79 2e 54 41 47 47 49 4e 47 3d 79 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 79 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 64 7c 7c 46 28 61 29 7d 3b 76 61 72 20 47 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 76 61 72 20 64 3d 61 2e 73 65 61 72 63 68 28 47 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 64 3b Data Ascii: d=null};d.onerror=function(){d.onerror=null};d.src=a} function E(a){try{var d=A.sendBeacon&&A.sendBeacon(a)}catch(b){y.TAGGING=y.TAGGING\|\|[],y.TAGGING[15]=!0}d\|\|F(a)};var G=/#\|$/;function H(a){var d=a.search(G),b;a:{for(b=0;(b=a.indexOf("fmt",b))>=0&&b<d;
2025-04-22 14:02:08 UTC	741	IN	Data Raw: 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 31 30 32 38 30 33 32 37 39 7e 31 30 32 38 31 33 31 30 39 7e 31 30 32 38 38 37 38 30 30 7e 31 30 32 39 32 36 30 36 32 7e 31 30 33 30 32 37 30 31 36 7e 31 30 33 30 35 31 39 35 33 7e 31 30 33 30 35 35 34 36 35 7e 31 30 33 30 37 37 39 35 30 7e 31 30 33 31 30 36 33 31 34 7e 31 30 33 31 30 36 33 31 36 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 70 64 66 2d 66 61 73 74 2e 63 6f 6d 25 32 46 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 Data Ascii: 26dma\x3d0\x26tag_exp\x3d102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.pdf-fast.com%2F\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3
2025-04-22 14:02:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:08 UTC	638	OUT	GET /s/0.8.1/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: CLID=955fd3cfd2d14f1ca99e487027b26bb9.20250422.20260422
2025-04-22 14:02:08 UTC	550	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:08 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 71973 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 19 Mar 2025 20:16:05 GMT ETag: "0x8DD6722E0B7F6F4" x-ms-request-id: deab9b93-001e-0079-7a0e-acd2ff000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20250422T140208Z-r185b9c99452kw7thC1PHXqskc0000000h2g000000005ng8 Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 79034942 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-22 14:02:08 UTC	15834	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 38 2e 31 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 61 64 64 28 29 7b 72 65 74 75 72 6e 20 58 61 7d 2c 67 65 74 20 67 65 74 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 2c 67 65 74 20 67 65 74 4e 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 71 61 7d 2c 67 65 74 20 67 65 74 56 61 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c Data Ascii: /* clarity-js v0.8.1: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get add(){return Xa},get get(){return Fa},get getId(){return Pa},get getNode(){return qa},get getValue(){return Ua},
2025-04-22 14:02:08 UTC	16384	IN	Data Raw: 29 29 2c 77 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 77 69 64 74 68 29 2c 68 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 68 65 69 67 68 74 29 7d 29 7d 72 65 74 75 72 6e 20 65 7d 28 63 29 3b 30 3d 3d 3d 6e 2e 64 65 74 61 69 6c 26 26 64 26 26 28 69 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 64 2e 78 2b 64 2e 77 2f 32 29 2c 6f 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 64 2e 79 2b 64 2e 68 2f 32 29 29 3b 76 61 72 20 66 3d 64 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 69 2d 64 2e 78 29 2f 64 2e 77 2a 33 32 37 36 37 29 2c 30 29 3a 30 2c 70 3d 64 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 6f 2d 64 2e 79 29 2f 64 2e 68 2a 33 32 37 36 37 29 2c 30 29 3a 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 69 26 26 6e 75 6c 6c 21 3d 3d 6f 29 7b 76 61 Data Ascii: )),w:Math.floor(a.width),h:Math.floor(a.height)})}return e}(c);0===n.detail&&d&&(i=Math.round(d.x+d.w/2),o=Math.round(d.y+d.h/2));var f=d?Math.max(Math.floor((i-d.x)/d.w32767),0):0,p=d?Math.max(Math.floor((o-d.y)/d.h32767),0):0;if(null!==i&&null!==o){va
2025-04-22 14:02:09 UTC	16384	IN	Data Raw: 69 63 6c 65 22 3a 63 61 73 65 22 72 65 63 69 70 65 22 3a 76 69 28 35 2c 74 5b 61 5d 29 2c 76 69 28 38 2c 74 2e 63 72 65 61 74 6f 72 29 2c 76 69 28 31 38 2c 74 2e 68 65 61 64 6c 69 6e 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 6f 64 75 63 74 22 3a 76 69 28 35 2c 74 5b 61 5d 29 2c 76 69 28 31 30 2c 74 2e 6e 61 6d 65 29 2c 76 69 28 31 32 2c 74 2e 73 6b 75 29 2c 74 2e 62 72 61 6e 64 26 26 76 69 28 36 2c 74 2e 62 72 61 6e 64 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 67 67 72 65 67 61 74 65 72 61 74 69 6e 67 22 3a 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 26 26 28 48 28 31 31 2c 65 61 28 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 2c 31 30 30 29 29 2c 48 28 31 38 2c 65 61 28 74 2e 62 65 73 74 52 61 74 69 6e 67 29 29 2c 48 28 31 39 2c 65 61 28 74 2e Data Ascii: icle":case"recipe":vi(5,t[a]),vi(8,t.creator),vi(18,t.headline);break;case"product":vi(5,t[a]),vi(10,t.name),vi(12,t.sku),t.brand&&vi(6,t.brand.name);break;case"aggregaterating":t.ratingValue&&(H(11,ea(t.ratingValue,100)),H(18,ea(t.bestRating)),H(19,ea(t.
2025-04-22 14:02:09 UTC	16384	IN	Data Raw: 31 29 3b 67 72 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 38 3a 7a 3d 4c 65 2c 61 2e 70 75 73 68 28 7a 2e 76 69 73 69 62 6c 65 29 2c 78 72 28 61 29 2c 44 28 6e 2c 7a 2e 76 69 73 69 62 6c 65 29 2c 56 65 28 29 7d 72 65 74 75 72 6e 5b 32 5d 7d 29 29 7d 29 29 7d 76 61 72 20 68 72 3d 5b 5d 2c 76 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 67 72 28 29 7b 76 72 3d 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6d 72 28 74 2c 65 2c 6e 2c 61 2c 72 2c 69 2c 6f 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 30 29 2c 68 72 2e 70 75 73 68 28 7b 74 69 6d 65 3a 74 2c 65 76 65 6e 74 3a 32 32 2c 64 61 74 61 3a 7b 74 79 70 65 3a 65 2c 68 61 73 68 3a 6e 2c 78 3a 61 2c 79 3a 72 2c 72 65 61 63 74 69 6f 6e 3a 69 2c 63 6f 6e 74 65 Data Ascii: 1);gr();break;case 28:z=Le,a.push(z.visible),xr(a),D(n,z.visible),Ve()}return[2]}))}))}var hr=[],vr=[];function gr(){vr=[]}function mr(t,e,n,a,r,i,o){void 0===i&&(i=1),void 0===o&&(o=0),hr.push({time:t,event:22,data:{type:e,hash:n,x:a,y:r,reaction:i,conte
2025-04-22 14:02:09 UTC	6987	IN	Data Raw: 33 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 74 3d 5b 5d 2c 48 28 32 36 2c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3f 31 3a 30 29 3b 74 72 79 7b 48 28 33 31 2c 77 69 6e 64 6f 77 2e 74 6f 70 3d 3d 77 69 6e 64 6f 77 2e 73 65 6c 66 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 3d 3d 77 69 6e 64 6f 77 3f 31 3a 32 29 7d 63 61 74 63 68 28 74 29 7b 48 28 33 31 2c 30 29 7d 7d 28 29 2c 4a 69 28 77 69 6e 64 6f 77 2c 22 65 72 72 6f 72 22 2c 6a 72 29 2c 59 72 3d 7b 7d 2c 4c 72 3d 7b 7d 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 72 3d 7b 7d 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 68 6f 28 29 7b 72 65 74 75 72 6e 20 69 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3b 72 65 74 75 Data Ascii: 3,function(){Ot=[],H(26,navigator.webdriver?1:0);try{H(31,window.top==window.self\|\|window.top==window?1:2)}catch(t){H(31,0)}}(),Ji(window,"error",jr),Yr={},Lr={}},stop:function(){Lr={}}});function ho(){return it(this,void 0,void 0,(function(){var t,e;retu

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.pdf-fast.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Downloads\75a4e2aa-9741-4b20-9266-c1a9c5f25091.tmp

C:\Users\user\Downloads\Unconfirmed 574569.crdownload

C:\Users\user\Downloads\Unconfirmed 986479.crdownload

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Static File Info

Network Behavior

Windows Analysis Report
http://www.pdf-fast.com

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:09 UTC	648	OUT	GET /css/Inter-Regular.DJOZHnwz.woff?v=3.19 HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive Origin: https://www.pdf-fast.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.pdf-fast.com/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.271117676.1745330527
2025-04-22 14:02:09 UTC	929	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:02:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: no-cache CDN-StorageBalancer: LA-1052 CDN-StorageServer: DE-633 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 04/22/2025 14:02:09 CDN-EdgeStorageId: 985 CDN-RequestId: 2aec690c07960cea3b75711fe3743f32 CDN-Cache: MISS CDN-Status: 404 CDN-RequestTime: 3
2025-04-22 14:02:09 UTC	556	IN	Data Raw: 32 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 5b 61 5d 3d 63 5b 61 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 63 5b 61 5d 2e 71 3d 63 5b 61 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 3b 74 2e 61 73 79 6e 63 3d 31 3b 74 2e Data Ascii: 225<!DOCTYPE html><html><head> <title>404 Not Found</title> <script type="text/javascript"> (function(c,l,a,r,i,t,y){ c[a]=c[a]\|\|function(){(c[a].q=c[a].q\|\|[]).push(arguments)}; t=l.createElement(r);t.async=1;t.
2025-04-22 14:02:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:09 UTC	1389	OUT	GET /pagead/1p-user-list/16714313352/?random=1745330526717&cv=11&fst=1745330400000&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyz7T8-juS2bZFFxyhgOaj_ZW1To4wvsA&random=3641734344&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 22 Apr 2025 14:02:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-22 14:02:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:09 UTC	1070	OUT	POST /ccm/collect?tid=AW-16714313352&en=page_view&dl=https%3A%2F%2Fwww.pdf-fast.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1080446964.1745330527&dt=PDFast%20-%20PDF&auid=271117676.1745330527&navt=n&npa=0&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&tft=1745330526732&tfd=2807&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.pdf-fast.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:09 UTC	580	IN	HTTP/1.1 200 OK Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Tue, 22 Apr 2025 14:02:09 GMT Content-Type: text/plain Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.pdf-fast.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:09 UTC	414	OUT	GET /.well-known/protected-auction/v1/public-keys HTTP/1.1 Host: publickeyservice.pa.gcp.privacysandboxservices.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:09 UTC	297	IN	HTTP/1.1 200 OK server: Google Frontend via: 1.1 google Date: Tue, 15 Apr 2025 18:29:39 GMT Content-Type: application/json;charset=iso-8859-1 Content-Length: 514 Age: 588750 Cache-Control: public,max-age=604800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-22 14:02:09 UTC	514	IN	Data Raw: 7b 0a 20 20 22 6b 65 79 73 22 3a 20 5b 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 30 35 38 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 67 74 4f 51 79 47 42 72 66 76 54 74 69 77 52 45 54 6b 38 49 6c 51 6e 6e 57 39 34 53 6f 71 4a 36 35 4b 6f 66 4e 65 49 48 38 52 67 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 34 35 38 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 51 7a 71 4f 4b 66 5a 66 53 35 78 44 76 44 70 73 36 41 2f 39 63 62 50 6e 73 53 6e 4a 78 46 63 31 5a 65 54 47 44 52 39 39 5a 42 30 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 37 39 38 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a Data Ascii: { "keys": [{ "id": "0580000000000000", "key": "gtOQyGBrfvTtiwRETk8IlQnnW94SoqJ65KofNeIH8Rg\u003d" }, { "id": "4580000000000000", "key": "QzqOKfZfS5xDvDps6A/9cbPnsSnJxFc1ZeTGDR99ZB0\u003d" }, { "id": "7980000000000000", "key":

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:10 UTC	1152	OUT	GET /pagead/1p-user-list/16714313352/?random=1745330526717&cv=11&fst=1745330400000&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9213662826za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.pdf-fast.com%2F&hn=www.googleadservices.com&frm=0&tiba=PDFast%20-%20PDF&npa=0&pscdl=noapi&auid=271117676.1745330527&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyz7T8-juS2bZFFxyhgOaj_ZW1To4wvsA&random=3641734344&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:10 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 22 Apr 2025 14:02:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-22 14:02:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:10 UTC	636	OUT	POST /collect HTTP/1.1 Host: e.clarity.ms Connection: keep-alive Content-Length: 7573 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://www.pdf-fast.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:10 UTC	7573	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a cd 7c 89 8e e3 38 96 e0 af 68 55 88 c8 99 5a 89 c1 fb 88 82 d1 c8 b3 2a a7 f3 42 66 56 d7 34 62 02 01 59 a2 1d ea 94 2d b7 24 c7 91 83 e9 ff 99 df d8 2f 5b 3c 92 92 69 c7 91 99 98 d9 c5 54 c1 55 d2 bb c8 c7 77 f0 f1 50 fc 7b 6a d3 d3 b3 14 23 8d 48 9a 91 0c 67 84 eb 2c 6d 6f 2d c7 d7 7c fe 77 92 66 29 21 a2 db 34 5f e0 a9 16 5f 2c f5 74 f0 6f 7a 39 0c 9b fe f4 e4 e4 fa fa 1a 6d aa 45 be 28 fa 01 95 ed ea 24 3d cf d2 22 3d 3d 3b 63 3a d3 19 a1 52 64 44 62 7c 9e 9d 09 93 11 e2 21 da 28 0f a0 3a 4b af ea be 9e 37 36 3d cf ce 08 57 19 e3 59 fa fc e2 f5 a7 34 3b 4b 31 48 7b 7e f1 17 78 be ba 18 2e bb 76 18 1a fb bc 5d 0f 5d db a4 e7 81 03 3a 75 96 be 6d bf d6 4d 53 9c 08 84 93 7f fa a3 5e 57 ed 75 9f bc fb 9c 10 8c f0 2f c9 1f f5 Data Ascii: \|8hUZ*BfV4bY-$/[<iTUwP{j#Hg,mo-\|wf)!4__,toz9mE($="==;c:RdDb\|!(:K76=WY4;K1H{~x.v]]:umMS^Wu/
2025-04-22 14:02:10 UTC	275	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 22 Apr 2025 14:02:10 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.pdf-fast.com Vary: Origin Request-Context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:11 UTC	635	OUT	POST /collect HTTP/1.1 Host: e.clarity.ms Connection: keep-alive Content-Length: 229 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://www.pdf-fast.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:02:11 UTC	229	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a a5 8e 41 6a c3 30 10 45 ef 32 eb 5f 5b a3 19 49 8e c1 8b 9e 43 68 e1 d4 32 31 71 1b 37 76 31 49 e8 dd 4b 92 a6 db 2c ca 83 e1 2d 3e 8f b9 50 a6 3a 92 29 aa 82 09 16 ac 15 d8 9a 00 3a 9c b2 9a 55 b7 9f 4c 20 66 77 9c c6 fd d5 06 b7 cf 96 c0 30 37 68 b7 2c d3 5c 97 e5 ba ae c5 d4 f5 2f 7d 3b 2f c5 db e1 bd a4 04 6a a9 8e 91 35 40 c1 60 eb 1d d8 1b 73 b7 6a 13 7e 1b 77 3e be c6 f1 3f 27 21 b2 38 85 81 45 70 41 20 d0 1b 0e 02 eb a0 8f 81 78 78 44 eb 14 d5 26 a5 04 9a ae 5f 8a 0a 3c 94 05 f4 4a a0 a1 6b e6 e1 7c 1e 33 07 75 22 c6 59 ef 6d 20 28 2b a2 24 d0 ee 98 fb 86 40 dd 30 b7 db 31 77 cd 43 28 e1 2f e6 9e c5 fc d3 58 fa fe 01 c8 e6 c6 e3 a4 01 00 00 Data Ascii: Aj0E2_[ICh21q7v1IK,->P:):UL fw07h,\/};/j5@`sj~w>?'!8EpA xxD&_<Jk\|3u"Ym (+$@01wC(/X
2025-04-22 14:02:11 UTC	275	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 22 Apr 2025 14:02:11 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.pdf-fast.com Vary: Origin Request-Context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:17 UTC	878	OUT	GET /PDFast%20Installer.exe/first HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect
2025-04-22 14:02:17 UTC	407	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 22 Apr 2025 14:02:17 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Cache-Control: no-cache Location: https://pdf-fast.com/downloads/PDFast.exe CDN-RequestId: 42cc7724d0ee261d5dc00a0970487097 CDN-RequestTime: 1
2025-04-22 14:02:17 UTC	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:17 UTC	864	OUT	GET /downloads/PDFast.exe HTTP/1.1 Host: pdf-fast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.pdf-fast.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect
2025-04-22 14:02:18 UTC	659	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:02:18 GMT Content-Type: application/octet-stream Content-Length: 7120568 Connection: close Server: BunnyCDN-PHX1-1155 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Cache-Control: public, max-age=10800 Last-Modified: Thu, 17 Apr 2025 09:06:41 GMT CDN-StorageServer: LA-1053 CDN-FileServer: 963 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 206 CDN-CachedAt: 04/22/2025 12:19:54 CDN-EdgeStorageId: 1155 CDN-RequestId: 33c223e8d53293f862ebe4991df230c3 CDN-Cache: HIT CDN-Status: 200 CDN-RequestTime: 1 Accept-Ranges: bytes
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b5 9f 22 32 f1 fe 4c 61 f1 fe 4c 61 f1 fe 4c 61 22 8c 4f 60 fc fe 4c 61 22 8c 49 60 4a fe 4c 61 22 8c 4a 60 f0 fe 4c 61 55 80 48 60 e2 fe 4c 61 55 80 4f 60 e8 fe 4c 61 55 80 49 60 9b fe 4c 61 22 8c 48 60 eb fe 4c 61 22 8c 4d 60 f2 fe 4c 61 22 8c 4b 60 f0 fe 4c 61 f1 fe 4d 61 18 fc 4c 61 e8 81 45 60 8c ff 4c 61 e8 81 b3 61 f0 fe 4c 61 f1 fe db 61 f0 fe 4c 61 e8 81 4e 60 f0 fe 4c Data Ascii: MZ@!L!This program cannot be run in DOS mode.$"2LaLaLa"O`La"I`JLa"J`LaUH`LaUO`LaUI`La"H`La"M`La"K`LaMaLaE`LaaLaaLaN`L
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 00 c7 05 94 24 70 00 00 00 00 00 e8 f0 36 00 00 c6 45 fc 85 0f 57 c0 0f 11 05 98 24 70 00 c7 05 a8 24 70 00 00 00 00 00 c7 05 ac 24 70 00 00 00 00 00 6a 06 68 8c 8b 69 00 b9 98 24 70 00 e8 bd 36 00 00 c6 45 fc 86 0f 57 c0 6a 00 68 ac 72 67 00 b9 b8 24 70 00 c7 05 b0 24 70 00 01 00 00 00 c7 05 b4 24 70 00 00 00 00 00 0f 11 05 b8 24 70 00 c7 05 c8 24 70 00 00 00 00 00 c7 05 cc 24 70 00 00 00 00 00 e8 76 36 00 00 c6 45 fc 87 0f 57 c0 6a 00 68 ac 72 67 00 b9 d0 24 70 00 c7 05 e0 24 70 00 00 00 00 00 0f 11 05 d0 24 70 00 c7 05 e4 24 70 00 00 00 00 00 e8 43 36 00 00 c6 45 fc 88 0f 57 c0 6a 00 68 ac 72 67 00 b9 e8 24 70 00 c7 05 f8 24 70 00 00 00 00 00 0f 11 05 e8 24 70 00 c7 05 fc 24 70 00 00 00 00 00 e8 10 36 00 00 c6 45 fc 89 0f 57 c0 6a 12 68 e8 84 69 00 b9 Data Ascii: $p6EW$p$p$pjhi$p6EWjhrg$p$p$p$p$p$pv6EWjhrg$p$p$p$pC6EWjhrg$p$p$p$p6EWjhi
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 50 51 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 89 4d f0 c7 45 fc ff ff ff ff e8 3e fd ff ff 8b 4d f4 64 89 0d 00 00 00 00 59 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 18 80 60 00 64 a1 00 00 00 00 50 83 ec 1c 53 56 57 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 8b d9 89 5d f0 8b 7d 08 8d 45 d8 57 50 e8 06 06 00 00 8b 75 e0 80 7e 0d 00 75 12 8d 56 10 8b cf e8 13 08 00 00 84 c0 0f 89 9e 00 00 00 81 7b 04 c4 4e ec 04 0f 84 a8 00 00 00 8b 3b 89 5d e4 c7 45 e8 00 00 00 00 c7 45 fc 00 00 00 00 6a 34 c7 45 e8 00 00 00 00 e8 d1 70 1d 00 8b d8 83 c4 04 89 5d e8 c7 45 fc 01 00 00 00 8d 73 10 ff 75 08 8b ce 89 75 ec e8 4e eb ff ff c6 45 fc 05 c7 46 18 00 00 00 00 c7 46 1c 00 00 00 00 c7 46 20 00 00 00 00 c6 45 fc 01 Data Ascii: PQ$o3PEdME>MdY]Ujh`dPSVW$o3PEd]}EWPu~uV{N;]EEj4Ep]EsuuNEFFF E
2025-04-22 14:02:18 UTC	16331	IN	Data Raw: 00 83 cf 01 89 7d f0 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c2 0c 00 50 e8 6f 47 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 40 8e 60 00 64 a1 00 00 00 00 50 83 ec 0c 53 56 57 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 c7 45 f0 00 00 00 00 c7 45 e8 00 00 00 00 c7 45 fc 02 00 00 00 8b 11 8d 4d ec e8 a9 0d 00 00 bb 04 00 00 00 c7 45 f0 04 00 00 00 89 5d f0 83 e3 fb 89 5d f0 c7 45 fc 01 00 00 00 83 cb 02 89 5d f0 8b 45 ec 8b 08 8d 45 e8 50 8b 45 ec 8b 79 1c 8b 4d 14 8b 31 8b 4d 10 56 8b 11 8b 4d 0c 52 ff 31 50 ff d7 85 c0 78 44 83 e3 fd 89 5d f0 c7 45 fc 00 00 00 00 83 7d ec 00 74 08 8d 4d ec e8 95 19 00 00 8b 45 08 8b 4d e8 89 08 c7 45 fc 00 00 00 00 83 cb 01 89 5d f0 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 5b 8b Data Ascii: }MdY_^[]PoGUjh@`dPSVW$o3PEdEEEME]]E]EEPEyM1MVMR1PxD]E}tMEME]MdY_^[
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 00 00 8b c6 8b 4d f4 64 89 0d 00 00 00 00 59 5e 8b e5 5d c3 cc 55 8b ec 6a ff 68 50 83 60 00 64 a1 00 00 00 00 50 56 57 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 8b f9 8b 37 85 f6 74 22 8d 46 14 83 ca ff f0 0f c1 10 83 c2 ff 75 24 56 52 e8 60 bb 1c 00 50 e8 4e bb 1c 00 c7 07 00 00 00 00 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 8b e5 5d c3 85 d2 79 e5 e8 33 8c 1d 00 cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 f5 9c 60 00 64 a1 00 00 00 00 50 83 ec 10 53 56 57 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 8b f1 89 75 e8 c7 45 f0 00 00 00 00 b8 01 00 00 00 b9 1c 0c 70 00 f0 0f c1 01 c7 45 fc 00 00 00 00 8d 7e 0c 8b 4d 08 89 7d e4 83 7d 0c 00 c7 06 78 91 67 00 c7 46 04 cc 91 67 00 89 4e 08 74 19 8d 45 0c 50 8d 4d ec e8 ac f9 ff ff 8b c8 c6 45 fc 01 Data Ascii: MdY^]UjhP`dPVW$o3PEd7t"Fu$VR`PNMdY_^]y3Ujh`dPSVW$o3PEduEpE~M}}xgFgNtEPME
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 75 ec 8b 06 ff 50 30 8b 45 0c 83 c6 04 6a 00 ff 35 e0 fe 6f 00 b9 e4 cb 6f 00 89 75 f0 8b 18 8b 45 10 85 c0 6a 00 ff 75 08 0f 45 c8 8b 79 04 8b 51 0c 8b 31 2b d7 8b 41 08 52 2b c6 50 57 56 ff 75 14 53 68 40 95 67 00 ff 75 18 ff 15 44 f6 6f 00 8b 75 f0 c7 45 0c 00 00 00 00 89 06 c7 45 fc 01 00 00 00 8d 45 0c 50 51 8b ce e8 55 12 00 00 85 c0 79 17 8b 16 b9 94 9c 67 00 6a 00 83 ec 0c 6a 00 6a 00 e8 1c 1a 00 00 eb 39 c7 45 10 00 00 00 00 c6 45 fc 04 8d 55 10 8b 45 0c 6a 00 68 b0 c5 66 00 52 8b 08 6a 00 ff 36 68 94 9c 67 00 50 ff 51 10 c6 45 fc 01 8b 45 10 85 c0 74 06 8b 08 50 ff 51 08 c7 45 fc ff ff ff ff 8b 45 0c 85 c0 74 06 8b 08 50 ff 51 08 8b 5d ec 8b cb 8b 03 ff 50 2c 8b f8 c7 45 0c 00 00 00 00 c7 45 fc 08 00 00 00 8d 45 0c 50 51 8b ce e8 c7 11 00 00 85 Data Ascii: uP0Ej5oouEjuEyQ1+AR+PWVuSh@guDouEEEPQUygjjj9EEUEjhfRj6hgPQEEtPQEEtPQ]P,EEEPQ
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 8b 07 51 68 24 9c 67 00 57 ff 10 8b 75 e8 85 f6 74 10 8b 06 8b cb 8b 78 0c 8b 03 ff 50 10 50 56 ff d7 c7 45 fc ff ff ff ff 8b 45 e8 85 c0 74 06 8b 08 50 ff 51 08 8b 45 ec 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c2 0c 00 c7 45 fc ff ff ff ff 8b 45 f0 e9 3c fc ff ff 68 03 40 00 80 e8 7f 1d ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 56 8b f1 f6 86 c8 00 00 00 10 74 44 ff 76 14 e8 13 6d 1c 00 6a fc ff 76 04 ff 15 38 f6 6f 00 ff 76 20 6a fc ff 76 04 ff 15 3c f6 6f 00 85 c0 74 28 a1 34 f6 6f 00 89 46 20 8b 46 04 c7 46 04 00 00 00 00 85 c0 74 12 83 a6 c8 00 00 00 ef 5e c3 ff 76 04 ff 15 48 f6 6f 00 5e c3 cc cc cc cc cc 55 8b ec 6a ff 68 85 b9 60 00 64 a1 00 00 00 00 50 83 ec 40 a1 24 c0 6f 00 33 c5 89 45 f0 56 57 50 8d 45 f4 64 a3 00 00 00 00 Data Ascii: Qh$gWutxPPVEEtPQEMdY_^[]EE<h@VtDvmjv8ov jv<ot(4oF FFt^vHo^Ujh`dP@$o3EVWPEd
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: 8d 45 f4 64 a3 00 00 00 00 8b 7d 08 8b 75 0c 39 b7 8c 00 00 00 74 34 89 75 08 85 f6 74 06 8b 06 56 ff 50 04 c7 45 fc 01 00 00 00 8b 87 8c 00 00 00 89 45 08 89 b7 8c 00 00 00 c7 45 fc ff ff ff ff 85 c0 74 06 8b 08 50 ff 51 08 68 41 fd ff ff 8d 4f b4 e8 fd 02 00 00 33 c0 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 8b e5 5d c2 08 00 cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 90 7e 60 00 64 a1 00 00 00 00 50 56 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 8b f1 8b 06 85 c0 74 18 0f 1f 44 00 00 8b 08 50 89 0e e8 0f d0 1c 00 8b 06 83 c4 04 85 c0 75 ed 8b 4d f4 64 89 0d 00 00 00 00 59 5e 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 40 7e 60 00 64 a1 00 00 00 00 50 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 ff 15 48 c0 66 00 85 c0 Data Ascii: Ed}u9t4utVPEEEtPQhAO3MdY_^]Ujh~`dPV$o3PEdtDPuMdY^]Ujh@~`dP$o3PEdHf
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: e5 5d c2 08 00 8b 45 ac 8b 4d 9c 8b 7d 94 89 45 cc 8b 45 a8 89 45 bc 8b 45 a4 89 45 d0 8b 45 a0 89 45 dc 8b 45 98 89 45 d8 e9 be fe ff ff 68 0b 00 00 80 e8 ad 9d fe ff 68 05 40 00 80 e8 a3 9d fe ff cc cc cc 56 8b f1 8b 4e 0c c6 46 4e 01 8b 01 ff 50 10 85 c0 74 0c 51 8d 4e dc e8 a4 06 00 00 89 46 5c 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 56 8b f1 c6 46 4e 00 8b 4e 5c 85 c9 74 06 8b 01 6a 01 ff 10 c7 46 5c 00 00 00 00 5e c3 cc cc cc 80 79 58 00 74 07 8b 44 24 04 01 41 38 c2 04 00 55 8b ec 6a ff 68 84 cf 60 00 64 a1 00 00 00 00 50 81 ec a0 00 00 00 a1 24 c0 6f 00 33 c5 89 45 ec 53 56 57 50 8d 45 f4 64 a3 00 00 00 00 8b f9 8b 4f 30 8b 01 ff 50 10 80 7f 2c 00 8b d8 75 06 83 7f 34 00 75 04 85 db 75 0c c7 47 28 00 00 00 00 e9 3f 02 00 00 8b 47 04 c7 Data Ascii: ]EM}EEEEEEEEEhh@VNFNPtQNF\^VFNN\tjF\^yXtD$A8Ujh`dP$o3ESVWPEdO0P,u4uuG(?G
2025-04-22 14:02:18 UTC	16384	IN	Data Raw: cc cc cc cc cc 55 8b ec 6a ff 68 20 da 60 00 64 a1 00 00 00 00 50 51 56 a1 24 c0 6f 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 8b f1 89 75 f0 c7 06 dc 9f 67 00 c7 45 fc 00 00 00 00 e8 45 00 00 00 c7 45 fc ff ff ff ff 8b 46 04 85 c0 74 10 50 e8 6a 50 1c 00 83 c4 04 c7 46 04 00 00 00 00 c7 46 0c 00 00 00 00 c7 46 08 00 00 00 00 8b 4d f4 64 89 0d 00 00 00 00 59 5e 8b e5 5d c3 cc cc cc cc cc cc cc cc cc 56 57 8b f9 33 f6 39 77 08 7e 24 0f 1f 44 00 00 85 f6 78 43 3b 77 08 7d 3e 8b 47 04 8b 0c b0 85 c9 74 06 8b 01 6a 01 ff 10 46 3b 77 08 7c e1 8b 47 04 85 c0 74 10 50 e8 fd 4f 1c 00 83 c4 04 c7 47 04 00 00 00 00 c7 47 08 00 00 00 00 c7 47 0c 00 00 00 00 5f 5e c3 68 0b 00 00 80 e8 ff 5c fe ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 53 8b dc 83 ec 08 83 e4 f8 83 Data Ascii: Ujh `dPQV$o3PEdugEEEFtPjPFFFMdY^]VW39w~$DxC;w}>GtjF;w\|GtPOGGG_^h\S

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:02:18 UTC	748	OUT	GET /css/Inter-SemiBold.BHlX_6qk.woff?v=3.19 HTTP/1.1 Host: www.pdf-fast.com Connection: keep-alive Origin: https://www.pdf-fast.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.pdf-fast.com/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.271117676.1745330527; _clck=115rplk%7C2%7Cfva%7C0%7C1938; _clsk=1i5ke2%7C1745330529663%7C1%7C1%7Ce.clarity.ms%2Fcollect
2025-04-22 14:02:19 UTC	930	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:02:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-899 CDN-PullZone: 3012278 CDN-Uid: 37f62a43-5eda-453a-ae48-3e4dd3eadbc7 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: no-cache CDN-StorageBalancer: LA-1050 CDN-StorageServer: DE-633 CDN-ProxyVer: 1.23 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 04/22/2025 14:02:19 CDN-EdgeStorageId: 1001 CDN-RequestId: 6b7e0872779d177bcaa4abb6969c0569 CDN-Cache: MISS CDN-Status: 404 CDN-RequestTime: 2
2025-04-22 14:02:19 UTC	556	IN	Data Raw: 32 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 5b 61 5d 3d 63 5b 61 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 63 5b 61 5d 2e 71 3d 63 5b 61 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 3b 74 2e 61 73 79 6e 63 3d 31 3b 74 2e Data Ascii: 225<!DOCTYPE html><html><head> <title>404 Not Found</title> <script type="text/javascript"> (function(c,l,a,r,i,t,y){ c[a]=c[a]\|\|function(){(c[a].q=c[a].q\|\|[]).push(arguments)}; t=l.createElement(r);t.async=1;t.
2025-04-22 14:02:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0