Create Interactive Tour

Windows Analysis Report
https://aka.ms/LearnAboutSenderIdentification

Overview

General Information

Sample URL:	https://aka.ms/LearnAboutSenderIdentification
Analysis ID:	1675773
Infos:

Detection

Score:	3
Range:	0 - 100
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1132,i,4851415541752769451,2503272194000384348,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1132,i,4851415541752769451,2503272194000384348,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4988 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-28T03:03:55.714930+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50044	162.159.140.229	443	TCP
2025-04-28T03:04:02.199288+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50074	209.73.190.11	443	TCP
2025-04-28T03:04:03.572042+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50079	209.73.190.12	443	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: Number of links: 0
Source: https://www.microsoft.com/en-us/microsoft-365/try?ocid=cmm40q94sfu	HTTP Parser: Number of links: 0

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44

HTTP Parser: Base64 decoded: a1283359-5a45-4af8-ba7f-c870d1a49a16b5b8122d-74fc-41b9-8485-1cd604103f50

Source: webpack-internal:///../FloodgateCore/dist/src/SurveyStatCollectionEventActivity.js

HTTP Parser: Found new string: script .var __extends = (this && this.__extends) || (function () {. var extendStatics = function (d, b) {. extendStatics = Object.setPrototypeOf ||. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };. return extendStatics(d, b);. };. return function (d, b) {. extendStatics(d, b);. function __() { this.constructor = d; }. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());. };.})();.Object.defineProperty(exports, "__esModule", { value: true });.exports.SurveyEventActivityStats = exports.SurveyStatCollectionEventActivity = void 0;.var Constants_1 = __webpack_require__(/*! ./Constants */ "../FloodgateCore/dist/src/Constants.js");.var FloodgateEngine_1 = __webpack_require__(/*! ./FloodgateEngine */ "../FloodgateCore/dist/src/FloodgateEngine.js");.var SurveyStatCollection_1 = __webpack_require__(/*! ./SurveyStatColl...

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: Title: Redirecting does not match URL
Source: https://www.microsoft.com/en-us/microsoft-365/try?ocid=cmm40q94sfu	HTTP Parser: Title: Continue does not match URL
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: Title: Sign in does not match URL

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: Iframe src: https://fpt.live.com?session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/try?ocid=cmm40q94sfu	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/try?ocid=cmm40q94sfu	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: No favicon

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/microsoft-365/try?ocid=cmm40q94sfu	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS	HTTP Parser: No <meta name="author".. found

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/microsoft-365/try?ocid=cmm40q94sfu	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.189.4:443 -> 192.168.2.5:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.41.21.102:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.41.21.102:443 -> 192.168.2.5:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.81:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.122.29.236:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.254:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.105:443 -> 192.168.2.5:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.144:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.199.172.99:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.42.202.193:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.42.202.193:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.91:443 -> 192.168.2.5:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.154.120:443 -> 192.168.2.5:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.154.120:443 -> 192.168.2.5:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.153:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.249.72:443 -> 192.168.2.5:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.121.64:443 -> 192.168.2.5:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.51.172:443 -> 192.168.2.5:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.122.29.236:443 -> 192.168.2.5:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.91:443 -> 192.168.2.5:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.144:443 -> 192.168.2.5:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.190.238.2:443 -> 192.168.2.5:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.121.64:443 -> 192.168.2.5:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.37.158:443 -> 192.168.2.5:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.214.185.111:443 -> 192.168.2.5:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.85.233.187:443 -> 192.168.2.5:49973 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.254.148.251:443 -> 192.168.2.5:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.37.126:443 -> 192.168.2.5:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.154.8:443 -> 192.168.2.5:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.12.130:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.5:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.83.60.230:443 -> 192.168.2.5:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.224.254.93:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.148.6.66:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.162:443 -> 192.168.2.5:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.164:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.83.60.230:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.72.179:443 -> 192.168.2.5:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.164:443 -> 192.168.2.5:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.5:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.49:443 -> 192.168.2.5:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.217:443 -> 192.168.2.5:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.158.36.235:443 -> 192.168.2.5:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.217.201.144:443 -> 192.168.2.5:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.49:443 -> 192.168.2.5:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.72.179:443 -> 192.168.2.5:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.82.117.67:443 -> 192.168.2.5:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.5:50048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.217.201.144:443 -> 192.168.2.5:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.71.131.137:443 -> 192.168.2.5:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.184.67.70:443 -> 192.168.2.5:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.62.177.66:443 -> 192.168.2.5:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.63:443 -> 192.168.2.5:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.63:443 -> 192.168.2.5:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.73.190.11:443 -> 192.168.2.5:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.202.231:443 -> 192.168.2.5:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.73.190.12:443 -> 192.168.2.5:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.127.152:443 -> 192.168.2.5:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.9.76:443 -> 192.168.2.5:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.149.214.28:443 -> 192.168.2.5:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.217.201.144:443 -> 192.168.2.5:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.38.119.43:443 -> 192.168.2.5:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.66.130.132:443 -> 192.168.2.5:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.71.139.29:443 -> 192.168.2.5:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.32.36.226:443 -> 192.168.2.5:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.32.36.226:443 -> 192.168.2.5:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.196:443 -> 192.168.2.5:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.234.43.217:443 -> 192.168.2.5:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.166.41:443 -> 192.168.2.5:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.105:443 -> 192.168.2.5:50127 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.81:443 -> 192.168.2.5:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.49:443 -> 192.168.2.5:50126 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.105:443 -> 192.168.2.5:50132 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.15.241.16:443 -> 192.168.2.5:50137 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: login.microsoftonline.com to https://login.live.com/oauth20_authorize.srf?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fcheckout.microsoft365.com%2fsignin-oidc&response_type=code&state=cfdj8pzwanavd1retimpou4uvzhzifozvip-ex9tg2ynuv3n-71iza8reluwzu11qcgsoeo8ixzlgygyrlr3zobxfdwq6zs9lfga__lipnlaft1da3frqxxocl2nxeso1eva5fsg8gyuehr5efa4ffxqs8_8msvvlolnkfe0kn5c6re8twrizrazpzcraudxjmhkuffvv5-lx0cgwbzmokmy1ptznsoywvrowbjoqoewlcbamzhqf8p_y8alzipv0zx5sm7sukhx7knkntyhqwvan2zdxrzw21lbkmw-imgiaxuv4d9fld_dy5kg5yoep-eiyvrh6-96meb-ro8aiubhfalw8y7takuiwluairrjkpqc_wzqacxytqlcusl_suczestgrs1zuy2uyig7olmqphesttiwxtxt_tti9xfwnpxgj5cbtxbghqwqnydtrlbjrrsaq8pm5thmdbx7ktilki8c69hvvvmphoobolyyzigejctiv5m-vbsxcsrojvipcu_c0fhsm_96ozty9jo3emdxyzynk3pj2wlkkhrneoirb0nqzybvodi9calm0zdvexbcqybzvc04gvoizcw0n2jjvbhexyalhhuhg1lmq--npo7dawk75bifhdrn6mhaekzid22sfw9hurv4omhye4hb9oczokmdqwznr8lohrpl&response_mode=form_post&nonce=638813990475246176.otiwnjjmzjmtogqyzi00yzdjlwjmodqtnzgwzdiymgrkm2q4mzq1mjbiodmtogqzns00ymzmltg5ymqtowzkzdbjzde2ztcy&code_challenge=xe2uu2vqau9p3yymub4xhn7uzuv6pobkomcl-fu9zzw&code_challenge_method=s256&x-client-sku=id_net9_0&x-client-ver=8.8.0.0&uaid=2a77f1d01d39fd25e0e7f745f035c66f&msproxy=1&issuer=mso&tenant=consumers&ui_locales=en-us&client_info=1&epct=paqabdgeaaabvrspeuwamram2jaf1xrqewc6univdacv_n6wkqmfkqtlwoswuhg4aihemecwlu5eoyrlywjj6idrz7xaromxpaawoz-kdgdrngev4bdjyf_8cjludabm6bvsaif3iq5mossjobj9-0zxchwzgt_3wkcnrerhw9szu3gaiuwqeshnr3wxkj7ibmrdw4biejtidrydlqzb2u0ul9rtu9anqxk4hzaxnqvye1sv2qoyrgyaa&jshs=0&cobrandid=58564b52-f72a-42da-9d02-6f932683862d#

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50044 -> 162.159.140.229:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50074 -> 209.73.190.11:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50079 -> 209.73.190.12:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.3
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.3
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.3
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.3
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.3
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /LearnAboutSenderIdentification HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LearnAboutSenderIdentification HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public-a601c2d1-845c-4bbf-89f0-24e3e56bb31d/thumbnail_w800.jpeg HTTP/1.1Host: videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_cysVI1AUwAea_LJc1LVFSA2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveOrigin: https://login.live.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/media/0b1fe818-4ce3-46e9-8851-111cec3c540c.png HTTP/1.1Host: support.content.office.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/public/central/neutral/8d293d4c-c611-44dd-963a-26137d3b12e0/a60d0e024baa9422cd26c83be43dfc763fa59490.png HTTP/1.1Host: cxcs.microsoft.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/public/central/neutral/8d293d4c-c611-44dd-963a-26137d3b12e0/a60d0e024baa9422cd26c83be43dfc763fa59490.png HTTP/1.1Host: cxcs.microsoft.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js HTTP/1.1Host: rum.hlx.pageConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/segoe-ui/west-european/Semibold/latest.woff2 HTTP/1.1Host: c.s-microsoft.comConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/segoe-ui/west-european/normal/latest.woff2 HTTP/1.1Host: c.s-microsoft.comConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/segoe-ui/west-european/Bold/latest.woff2 HTTP/1.1Host: c.s-microsoft.comConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/segoe-ui/west-european/semilight/latest.woff2 HTTP/1.1Host: c.s-microsoft.comConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/segoe-ui/west-european/light/latest.woff2 HTTP/1.1Host: c.s-microsoft.comConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1745802226773 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i18n/pixel/events.js?sdkid=C5S71GC247CAE4T3VM1G&lib=ttq HTTP/1.1Host: analytics.tiktok.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69875205895088824002691149854966509433&ts=1745802227840 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1745802226773 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=69875205895088824002691149854966509433&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%0183acd6a292ba4df1addba954290a7289%012&d_cid_ic=MC1%0183acd6a292ba4df1addba954290a7289%012&ts=1745802229288 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69875205895088824002691149854966509433&ts=1745802227840 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=N5vsKkSCv7vt-MHpKBotdOa9TwuK6LA8yaJI24p6O-HJ2R1b5-3xpj6-Sucfwpx8mnmOuE-upeZcggvC1XDYkNdtdm7ZZ1_vLRNTHcM2xvk.; receive-cookie-deprecation=1; uuid2=4155444032255463320
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=69435900843589813592737304669655959158 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Ftry&data=ecomm_pagetype%3Dother HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIq97OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i18n/pixel/static/main.MWYwYWI1NGQ2MA.js HTTP/1.1Host: analytics.tiktok.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ttp=2wKtjYRrsxgV6AqD9GQtbKpu1Om
Source: global traffic	HTTP traffic detected: GET /collect/?pid=7850&fmt=gif HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNjk0MzU5MDA4NDM1ODk4MTM1OTI3MzczMDQ2Njk2NTU5NTkxNTgQABoNCPenu8AGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: rlas3=zG18O16pCJsWsM5CoCwXy3RdXlK/pyXNZVFENNvjIU8=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=582750807 HTTP/1.1Host: ats.everesttech.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/dd?d_uuid=69435900843589813592737304669655959158 HTTP/1.1Host: cm.everesttech.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=4155444032255463320 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086
Source: global traffic	HTTP traffic detected: GET /pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3 HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www/bridge-WR110.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveOrigin: https://www.microsoft.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=Njk0MzU5MDA4NDM1ODk4MTM1OTI3MzczMDQ2Njk2NTU5NTkxNTg= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIq97OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Ftry&data=ecomm_pagetype%3Dother&is_vtc=1&cid=CAQSGwDZpuyzVUItdEnjkbT1lyhJkKfgO7ADBSbfuQ&random=213545669 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIq97OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?pid=7850&fmt=gif&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=401b81ed-78a8-40a5-a78b-a218f4c20125; bcookie="v=2&97290843-e4fb-4ad9-8d6b-ce54fc75e5ce"; lidc="b=OGST01:s=O:r=O:a=O:p=O:g=3593:u=1:x=1:i=1745802232:t=1745888632:v=2:sig=AQFCLVwRZRSdvGkEodRkhjZptl_T3SGc"
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=eceb0dbe1be224d0a6eaee078bbf8803e9ceb198f2ec8909516a2489cf6b6c9ab0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=aA7T_AAAAKwZWAOA HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=69875205895088824002691149854966509433&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%0183acd6a292ba4df1addba954290a7289%012&d_cid_ic=MC1%0183acd6a292ba4df1addba954290a7289%012&ts=1745802229288 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077; dpm=69435900843589813592737304669655959158
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=Njk0MzU5MDA4NDM1ODk4MTM1OTI3MzczMDQ2Njk2NTU5NTkxNTg=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIq97OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=4155444032255463320 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077; dpm=69435900843589813592737304669655959158
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i18n/pixel/static/identify_935b0d03.js HTTP/1.1Host: analytics.tiktok.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ttp=2wKtjYRrsxgV6AqD9GQtbKpu1Om
Source: global traffic	HTTP traffic detected: GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=582750807 HTTP/1.1Host: ats.everesttech.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: everest_g_v2=g_surferid~aA7T_AAAAKwZWAOA
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESELk2pPNtua4ZcHXSLda7K08&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=eceb0dbe1be224d0a6eaee078bbf8803e9ceb198f2ec8909516a2489cf6b6c9ab0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=aA7T_AAAAKwZWAOA HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664
Source: global traffic	HTTP traffic detected: GET /pageview?ex=&dt=1246&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Ftry%3Focid%3Dcmm40q94sfu&dr=&dw=1265&dh=4261&ww=1280&wh=897&sw=1280&sh=1024&uu=f158b121-73c0-a08c-8203-99f58c2889a9&sn=1&hd=1745802232&v=15.84.1&pid=2422&pn=1&r=210632 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9&r=095238 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageEvent?value=H4sIAAAAAAAAA3POz0vLTLdSCErNSU0sTo03MjAyMTAzNAYAgJLsFxgAAAA%3D&ct=2&isETR=false&isCustomHashId=false&v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9&r=889748 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9&dv=H4sIAAAAAAAAA1WP3UrEMBCFX2XozSoa7H%2Btd7GWWnC3y25EUKSkSdSwsZE0RYrsu5uu4uJNToaZOWe%2BL29NirYaJfeuPD%2FhURilEeJJFKOY5xHKuzRBjIs0i7MsEVngnXv4usWkDdIkDwABvsAgetop2b8CZWw01Args0jdgxisfP%2F5jsM8sqiU7qhymw%2Bic%2B%2FaaL4AzHUnAPdUTVayAYz40MbCMEor3GWUHuLsMb7cVhBexn7uugct%2FlpLvCFlcQv3pL6rHzGpmxVsynWzIfWqcomF7i1lFvCwW1JjBXuDF23gRlgqlbMjhrLdfGrTqwmFR%2BIo8f2ZWH3SaUCOaGZ38rS12ohfFjiDf%2BUJLpenz84WY3RwIIG3%2FwazC2VbdwEAAA%3D%3D&ct=2&r=755025 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Ftry&data=ecomm_pagetype%3Dother&is_vtc=1&cid=CAQSGwDZpuyzVUItdEnjkbT1lyhJkKfgO7ADBSbfuQ&random=213545669 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIq97OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Fpid%3D7850%26fmt%3Dgif%26cookiesTest%3Dtrue%26liSync%3Dtrue HTTP/1.1Host: www.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=401b81ed-78a8-40a5-a78b-a218f4c20125; bcookie="v=2&97290843-e4fb-4ad9-8d6b-ce54fc75e5ce"; lidc="b=OGST01:s=O:r=O:a=O:p=O:g=3593:u=1:x=1:i=1745802232:t=1745888632:v=2:sig=AQFCLVwRZRSdvGkEodRkhjZptl_T3SGc"; UserMatchHistory=AQJuTHJSpLLDIwAAAZZ57AQmYXFEm939beb7otaFDVupGOGfO_sHJx1s2GelELS4ONDUvHHj0jY_pQ; AnalyticsSyncHistory=AQJUohnrMsx30AAAAZZ57AQmN2BDFj7eVSj7JEZfG_1j6BCppPEYs6H7RDGPfebzWX4oOPsNmSfPGNzHj09Gww
Source: global traffic	HTTP traffic detected: GET /upi/pid/r7ifn0SL?redir=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D782%26dpuuid%3D%24%7BTM_USER_ID%7D HTTP/1.1Host: rtd.tubemogul.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /orbserv/hbpix?pixId=16873&pcv=70&ptid=66&tpuv=01&tpu=69435900843589813592737304669655959158 HTTP/1.1Host: idpix.media6degrees.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESELk2pPNtua4ZcHXSLda7K08&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074
Source: global traffic	HTTP traffic detected: GET /collect/?pid=7850&fmt=gif&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=401b81ed-78a8-40a5-a78b-a218f4c20125; bcookie="v=2&97290843-e4fb-4ad9-8d6b-ce54fc75e5ce"; lidc="b=OGST01:s=O:r=O:a=O:p=O:g=3593:u=1:x=1:i=1745802232:t=1745888632:v=2:sig=AQFCLVwRZRSdvGkEodRkhjZptl_T3SGc"; UserMatchHistory=AQJuTHJSpLLDIwAAAZZ57AQmYXFEm939beb7otaFDVupGOGfO_sHJx1s2GelELS4ONDUvHHj0jY_pQ; AnalyticsSyncHistory=AQJUohnrMsx30AAAAZZ57AQmN2BDFj7eVSj7JEZfG_1j6BCppPEYs6H7RDGPfebzWX4oOPsNmSfPGNzHj09Gww
Source: global traffic	HTTP traffic detected: GET /upi/pid/r7ifn0SL?redir=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D782%26dpuuid%3D%24%7BTM_USER_ID%7D HTTP/1.1Host: rtd-tm.everesttech.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: everest_g_v2=g_surferid~aA7T_AAAAKwZWAOA
Source: global traffic	HTTP traffic detected: GET /quota?ct=0 HTTP/1.1Host: q-aus1.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1kff0eqff33wq HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=69435900843589813592737304669655959158&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=aA7T_AAAAKwZWAOA HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085
Source: global traffic	HTTP traffic detected: GET /exist?v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9 HTTP/1.1Host: srm.bf.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?pid=7850&fmt=gif&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=401b81ed-78a8-40a5-a78b-a218f4c20125; bcookie="v=2&97290843-e4fb-4ad9-8d6b-ce54fc75e5ce"; lidc="b=OGST01:s=O:r=O:a=O:p=O:g=3593:u=1:x=1:i=1745802232:t=1745888632:v=2:sig=AQFCLVwRZRSdvGkEodRkhjZptl_T3SGc"; UserMatchHistory=AQJuTHJSpLLDIwAAAZZ57AQmYXFEm939beb7otaFDVupGOGfO_sHJx1s2GelELS4ONDUvHHj0jY_pQ; AnalyticsSyncHistory=AQJUohnrMsx30AAAAZZ57AQmN2BDFj7eVSj7JEZfG_1j6BCppPEYs6H7RDGPfebzWX4oOPsNmSfPGNzHj09Gww
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1kff0eqff33wq HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085
Source: global traffic	HTTP traffic detected: GET /v2/recording?rt=5&rst=1745802232119&let=1745802232850&v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9&ri=1&ct=2 HTTP/1.1Host: k-aus1.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=69435900843589813592737304669655959158&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_V3zorEB+BZIcpHsRRRinNQ=="; __cf_bm=KhVxj8G.OJNWp7FJaD.3bNP2a3y7ABycwcHSLmWFqEo-1745802235-1.0.1.1-SP0P8kxDKLhI03AAgAbpQ8lXq9bNVQF_HndhFJXzCVxMRTHZNZ2CW85UM395HkW0aptDdcIJ4t8Rhz6dBZE_I73T87DzOyBOGHc64jJQ3n4
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=aA7T_AAAAKwZWAOA HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=510bf6a9-95a5-4993-ae9f-c9cca746eab2; TDCPM=CAEYBSgCMgsI-ILnh-n-gj4QBTgB
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=510bf6a9-95a5-4993-ae9f-c9cca746eab2 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=&__qcmcs=1 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: mc=680ed3fd-8d00a-72515-5bae2
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=510bf6a9-95a5-4993-ae9f-c9cca746eab2 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=gtLdvtDZi7-Z0onrhIvA7Ibf3O6Z34-60dirQQX2 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=28A7E140DCEF65F72479F49CDD1A641E HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070
Source: global traffic	HTTP traffic detected: GET /map/?key=a74thHgsfK627J6Ftt8sj5ks52bKe&gdpr=0&gdpr_consent=&url=https://dpm.demdex.net/ibs:dpid=3047&dpuuid=[%FT_GUID%]&gdpr=0&gdpr_consent= HTTP/1.1Host: servedby.flashtalking.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=gtLdvtDZi7-Z0onrhIvA7Ibf3O6Z34-60dirQQX2 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=28A7E140DCEF65F72479F49CDD1A641E HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=63279255F165FC&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082
Source: global traffic	HTTP traffic detected: GET /i.match?p=b13&u=69435900843589813592737304669655959158&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=63279255F165FC&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b13&u=69435900843589813592737304669655959158&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=a7noAVwyEoypuMNra1iruYWE1jysjrTTbkudvg4jPbLS
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=69435900843589813592737304669655959158&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086
Source: global traffic	HTTP traffic detected: GET /eucm/p/adpq?redir=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D53196%26dpuuid%3D(OIQ_UUID) HTTP/1.1Host: px.owneriq.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=69435900843589813592737304669655959158&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecc?redir=https%3a%2f%2fdpm.demdex.net%2fibs%3adpid%3d53196%26dpuuid%3dQ7990886421122501186&uid=Q7990886421122501186&ref=%2Feucm%2Fp%2Fadpq HTTP/1.1Host: px.owneriq.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: si=Q7990886421122501186; p2=adpq
Source: global traffic	HTTP traffic detected: GET /dmp/7?vk=69435900843589813592737304669655959158&ntv_r=https://dpm.demdex.net/ibs:dpid=38117&dpuuid=NTV_USER_ID HTTP/1.1Host: jadserve.postrelease.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7990886421122501186 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=69435900843589813592737304669655959158&gdpr=0&gdpr_consent=&uid=69435900843589813592737304669655959158&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAPUDmgCEIYuRJZKKkSB8M1E06PaoMcFEgEBAQElEGgYaNws0iMA_eMCAA&S=AQAAArKYMnKUlhGCDjNJRiXSFmo
Source: global traffic	HTTP traffic detected: GET /adb-ext.gif?puid=69435900843589813592737304669655959158 HTTP/1.1Host: ds.reson8.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7990886421122501186 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072
Source: global traffic	HTTP traffic detected: GET /dmp/7?vk=69435900843589813592737304669655959158&ntv_r=https://dpm.demdex.net/ibs:dpid=38117&dpuuid=NTV_USER_ID HTTP/1.1Host: jadserve.postrelease.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: visitor=6822fdda-2a7f-4491-8ec4-50d8a25abb9e; status=0
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=B44C47BF07ADE92B46BBF03828CFEE0B HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-K2TdtPpE2pGHQMO5VQ156Nmztq_rLu8cD5c-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=69435900843589813592737304669655959158 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=B44C47BF07ADE92B46BBF03828CFEE0B HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-K2TdtPpE2pGHQMO5VQ156Nmztq_rLu8cD5c-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=c7f3fb4d-fbb1-4d78-bd93-345a1008dd88 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095
Source: global traffic	HTTP traffic detected: GET /acquire/purchase?language=en-US&market=US&requestedDuration=year&scenario=microsoft-365-family-trial&culture=en-us&country=US&OCID=cmm40q94sfu%2Ccmm40q94sfu HTTP/1.1Host: checkout.microsoft365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=c7f3fb4d-fbb1-4d78-bd93-345a1008dd88 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095\|72352-1-1745802245085
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tluidp=1818179741584328283493; tluid=1818179741584328283493
Source: global traffic	HTTP traffic detected: GET /dv/sync?tid=6 HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=1818179741584328283493&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095\|72352-1-1745802245085\|80742-1-1745802246083
Source: global traffic	HTTP traffic detected: GET /consumers/oauth2/v2.0/authorize?client_id=0cbbf473-ef15-4bbe-8b7b-24f2ab1be1ee&redirect_uri=https%3A%2F%2Fcheckout.microsoft365.com%2Fsignin-oidc&response_type=code&scope=openid%20profile%20offline_access&code_challenge=aAiEq1lTuhqz8KdGNSauf79H5qdEFy_qa58CSG3HgDQ&code_challenge_method=S256&response_mode=form_post&nonce=638813990475246176.OTIwNjJmZjMtOGQyZi00YzdjLWJmODQtNzgwZDIyMGRkM2Q4MzQ1MjBiODMtOGQzNS00YmZmLTg5YmQtOWZkZDBjZDE2ZTcy&client_info=1&x-client-brkrver=IDWeb.3.8.3.0&state=CfDJ8PZWaNavD1REtiMPOU4uvZhZiFOZvIP-ex9Tg2YNuV3N-71IZa8rELUwzu11qcgSOeO8ixZLGyGYrlR3ZobxfDWQ6ZS9lFGa__LIpNLAFT1Da3fRQxxoCL2NXESo1Eva5FSG8GYUEHr5Efa4fFxQs8_8MSVvLolnKFe0KN5c6rE8TwrizrAZpzcRaUDxjMhkUFfvV5-lX0cGWBZmokMY1PtZnSoYWVRowbJOQOEwLCBAmzHqF8P_Y8AlzipV0zx5sm7sUkhX7KNKNTyHQwvAN2ZdXRzW21LbKMW-imGiaXuv4d9FLd_dY5Kg5yoEp-EIYvrH6-96mEb-RO8aiubhfAlW8y7TAKuIWlUAiRrJKpqC_wZqacxyTqlcUSl_SuCZeSTgRS1zuy2uyig7OLmQPhEsttIwXtxT_tTi9xFwNpXgJ5CbtXBGHQwqnYDTrLbJRRsaQ8Pm5ThmDbx7kTIlki8c69hVVVmPhOOBolyyzIGejcTIv5M-VBSxcSROJViPCu_c0fHSm_96ozty9jO3eMDXYzYnK3pJ2wlKkHRneoirB0nQzybvOdi9CaLM0zDVExbCqYBzvc04gVoIZCw0N2jJVBHEXYaLhhuhg1LMq--NPo7dAwK75bIfhdrn6mhAeKZid22sFW9HUrV4OmHye4HB9oCzOKmdqwzNr8LoHrPl&cobrandId=58564b52-f72a-42da-9d02-6f932683862d&client-request-id=2a77f1d01d39fd25e0e7f745f035c66f&x-client-SKU=ID_NET9_0&x-client-ver=8.8.0.0 HTTP/1.1Host: login.microsoftonline.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: esctx-k2KirITn0uI=AQABCQEAAABVrSpeuWamRam2jAF1XRQECVYryMPvXS1ipZR1McepRDuv_WSISwavtHHjBgN8IP3kMRcDhCx6tWcSJPOjw2hkND7f5cCAgmqxjHx88rMWRUecioYkNHIEuOgtrujjF8tgyQYp_RvtsPH1Mi6oz2OSF8DVnmirsdW-USHYPTAd3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWhkrJ-4RRD9DjyhcE8tv1AcBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEA5gH3_nygaK-NhSzhfCMtugMA1XrLGPoW9Cbc9UFDFg00ktOPYV-5-U6-no6n4_YiMJfaux7G0Icikex0EyYjjnBlM8zUET8YZ5hArZy2xwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEaMpRSXuNieQ3kIsVZPruShyncS7_ET6cxXhRLfGCfGB56qZ_mJRE54XCKbh3byIJ41qspnn_GF3CEdvVv0eLLgjlhek2WpG5U2po5sSPy_gePvUlr6obihxFD6uaJCzpWnmrx_n7HWk2NIbN1r331opmVN7LIjuO1YtqEoQQOcogAA; esctx-iYZeFJKJYZ0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEA7p0CLsEBEY7Zj1yiNR6ZbdxaHEHYr2FAXN-2M5kXVlHEwgNXIJB_GiVjI2BD68Ee6xu6zCXDov0KECVsuDHSKNx6ftDZeeViV0WBoaP1kr4RqK2lgAethUwE9FJH9VYaKrtGL7AtyV0xyztLNMDXCAA; fpc=Ah77sjcKgdZHiyCP4RVsDHdqwEtIAQA
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=3212f8c8-cf61-471b-8919-02509ef772de HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095\|72352-1-1745802245085\|80742-1-1745802246083\|81309-1-1745802247085
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=1818179741584328283493&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095\|72352-1-1745802245085\|80742-1-1745802246083\|81309-1-1745802247085
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdobe HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=3212f8c8-cf61-471b-8919-02509ef772de HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=69435900843589813592737304669655959158; dpm=69435900843589813592737304669655959158; dextp=358-1-1745802229391\|477-1-1745802230086\|771-1-1745802231077\|782-1-1745802232664\|992-1-1745802233074\|1123-1-1745802234085\|903-1-1745802235160\|1175-1-1745802236070\|1957-1-1745802237070\|3047-1-1745802238082\|22054-1-1745802239082\|30646-1-1745802240086\|53196-1-1745802241072\|38117-1-1745802242078\|57282-1-1745802243072\|49276-1-1745802244095\|72352-1-1745802245085\|80742-1-1745802246083\|81309-1-1745802247085
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=69435900843589813592737304669655959158?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=69435900843589813592737304669655959158?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login-fluent_en_hZOCIVPh4TaC3SSo8cudeQ2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveOrigin: https://login.live.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveOrigin: https://login.live.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/fluent_web_light_57fee22710b04cebe1d5.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI HTTP/1.1Host: fpt.live.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/fluent_web_light_57fee22710b04cebe1d5.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30571.2/images/favicon.ico HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/Clear.PNG?ctx=jscb1.0&session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=YnVhPU1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMzQuMC4wLjAgU2FmYXJpLzUzNy4zNiZvcz1XaW4zMiZscHJvYz00Jm9sPXRydWUmcnR0PTM1MCZjaHJtPXRydWUmcHJvc3ViPTIwMDMwMTA3JmV2YWw9MzMmYXBwdj01LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzEzNC4wLjAuMCBTYWZhcmkvNTM3LjM2JmxzPXRydWUmZG09OCZtdHA9MCZuYz04MiZwcj0xJnNyPTEyODB4MTAyNCZzY2Q9MjQmYXNyPTEyODB4OTg0JnR6PS0zMDAmZHN0PTYwJnR6bz0tMjQwJmJsPWVuLVVTJm10aD0yN2Y1MWQzMTQ5ZTZiZjIwOWI2NmJkMzg3YjBhZjNjNCZtdG49MiZwbj01JnBoPWYzYWMyMmFjNTljNmRjYjg3NDEwOWQwOTNjNTI1NWU4JnA9cGx1Z2luX2ZsYXNoJTNEZmFsc2UlMjZwbHVnaW5fd2luZG93c19tZWRpYV9wbGF5ZXIlM0RmYWxzZSUyNnBsdWdpbl9hZG9iZV9hY3JvYmF0JTNEZmFsc2UlMjZwbHVnaW5fc2lsdmVybGlnaHQlM0RmYWxzZSUyNnBsdWdpbl9xdWlja3RpbWUlM0RmYWxzZSUyNnBsdWdpbl9zaG9ja3dhdmUlM0RmYWxzZSUyNnBsdWdpbl9yZWFscGxheWVyJTNEZmFsc2UlMjZwbHVnaW5fdmxjX3BsYXllciUzRGZhbHNlJTI2cGx1Z2luX2RldmFsdnIlM0RmYWxzZSUyNnBsdWdpbl9zdmdfdmlld2VyJTNEZmFsc2UlMjZwbHVnaW5famF2YSUzRGZhbHNlJmZoPTJhMjk4NDlhZjA3ZGQxNjFkZGM3MzA0MGJlMjVmM2YwJmZuPTExMiZsaD1odHRwcyUzQSUyRiUyRmZwdC5saXZlLmNvbSUyRiUzRnNlc3Npb25faWQlM0QyYTc3ZjFkMDFkMzlmZDI1ZTBlN2Y3NDVmMDM1YzY2ZiUyNkN1c3RvbWVySWQlM0QzM2UwMTkyMS00ZDY0LTRmOGMtYTA1NS01YmRhZmZkNWUzM2QlMjZQYWdlSWQlM0RTSSZkcj1odHRwcyUzQSUyRiUyRmxvZ2luLmxpdmUuY29tJTJGJnc9OEREODVGMDk3NDQ5RUZGJmlkPTEwNzA0YjQzLTVjMzYtOThjOC03ZjNmLTYwNmU4YjdiNmU5ZCZhPSZjPTRlNDA4YzVhNzUzZmU0NTM3OWJkOTZkMTNlMDRhOTc4&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiOTA0ZGQ5YjYyOTk4ZTc0ZjBhNGQxYzhmM2U1MjM3ZDUifQ==&PageId=SI&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Chromium%2C134.0.6998.36)%2C(Not%3AA-Brand%2C24.0.0.0)%2C(Google%20Chrome%2C134.0.6998.36) HTTP/1.1Host: fpt.live.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://fpt.live.com/?session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: fptctx2=taBcrIH61PuCVH7eNCyH0MJojnuUODHcZ6x9WoxhgCnr8p2K%252fneKlg%252fuN6WhNYTS3GK%252bO40XCW%252fvovanZxVwRIekm46pENBr4KF0ZzmwCnXwMA%252fbzDNCqWdZQ4cC4lO7Nb4nWZrSEVr4O%252flFDuz7yglu31e7%252fqgboGS82JNpA3HcN4IxgQoycwiu0GDbydgdh1U9HD4XMwIOU3tQiunw3BXhNHka5nFjwtPDNs3%252fsw%252bBjbjYwxPSn%252fJ5KeKol2vhQo%252fK%252fMtVhnHws%252bvrZHFPIms2l2BSjWxCxDP1ISLc%252ftLy8h%252
Source: global traffic	HTTP traffic detected: GET /16.000.30571.2/images/favicon.ico HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_250.3.dr

String found in binary or memory: function gp(a,b){var c=yo(b),d=zo(a,c);if(!d)return 0;var e;e=a==="ag"?Ao(d):vo(d);for(var f=0,h=0;h<e.length;h++)f=Math.max(f,e[h].timestamp);return f}function hp(a){for(var b=0,c=g(Object.keys(a)),d=c.next();!d.done;d=c.next())for(var e=a[d.value],f=0;f<e.length;f++)b=Math.max(b,Number(e[f].timestamp));return b}function ip(a){var b=Math.max(gp("aw",a),hp(so(ro())?lo():{})),c=Math.max(gp("gb",a),hp(so(ro())?lo("_gac_gb",!0):{}));c=Math.max(c,gp("ag",a));return c>b};function yp(){return ek("dedupe_gclid",function(){return Vm()})};var zp=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Ap=/^www.googleadservices.com$/;function Bp(a){a||(a=Cp());return a.gn?!1:a.dm||a.fm||a.im||a.gm||a.oe||a.Ql||a.hm||a.Ul?!0:!1}function Cp(){var a={},b=wn(!0);a.gn=!!b._up;var c=No();a.dm=c.aw!==void 0;a.fm=c.dc!==void 0;a.im=c.wbraid!==void 0;a.gm=c.gbraid!==void 0;a.hm=c.gclsrc==="aw.ds";a.oe=lp().oe;var d=z.referrer?ag(gg(z.referrer),"host"):"";a.Ul=zp.test(d);a.Ql=Ap.test(d);return a};var Dp=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: cxcs.microsoft.net
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: rum.hlx.page
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: fpt.microsoft.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: d.impactradius-event.com
Source: global traffic	DNS traffic detected: DNS query: cdnssl.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ats.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: q-aus1.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: c.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: rtd.tubemogul.com
Source: global traffic	DNS traffic detected: DNS query: srm.bf.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: k-aus1.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: checkout.microsoft365.com
Source: global traffic	DNS traffic detected: DNS query: dmpsync.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ag.innovid.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /quota?ct=0 HTTP/1.1Host: q-aus1.clicktale.netConnection: keep-aliveContent-Length: 172User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 28 Apr 2025 01:03:55 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 42Connection: close

Source: chromecache_285.3.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_193.3.dr, chromecache_306.3.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_303.3.dr	String found in binary or memory: http://launch-ENf7805d09fd1b455883333cdf34ee4ca2.js
Source: chromecache_251.3.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_285.3.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_235.3.dr, chromecache_214.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_251.3.dr	String found in binary or memory: https://accdn.lpsnmedia.net
Source: chromecache_250.3.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_250.3.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_250.3.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_285.3.dr	String found in binary or memory: https://afd-uc-tgosw63k6kikc-dev-ckbqfca2d7fecxc4.b01.azurefd.net/discex/usc/lib/universalchat.min.j
Source: chromecache_285.3.dr	String found in binary or memory: https://afd-uc-ukdj7blkdh6lc-uat-gfacbtfqa2djddfm.b01.azurefd.net/discex/usc/lib/universalchat.min.j
Source: chromecache_251.3.dr	String found in binary or memory: https://aka.ms/edusupport
Source: chromecache_251.3.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_251.3.dr	String found in binary or memory: https://analytics.tiktok.com
Source: chromecache_310.3.dr	String found in binary or memory: https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b
Source: chromecache_219.3.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_321.3.dr	String found in binary or memory: https://breeze.aimon.applicationinsights.io
Source: chromecache_188.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_188.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_188.3.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_188.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_188.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_250.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_251.3.dr	String found in binary or memory: https://cdnssl.clicktale.net
Source: chromecache_251.3.dr	String found in binary or memory: https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Source: chromecache_251.3.dr	String found in binary or memory: https://d.impactradius-event.com
Source: chromecache_321.3.dr	String found in binary or memory: https://dc-int.services.visualstudio.com
Source: chromecache_321.3.dr	String found in binary or memory: https://dc.services.visualstudio.com
Source: chromecache_188.3.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_188.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_188.3.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_285.3.dr	String found in binary or memory: https://feross.org
Source: chromecache_309.3.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_219.3.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_219.3.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_179.3.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_310.3.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_188.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_250.3.dr	String found in binary or memory: https://google.com/pagead/form-data
Source: chromecache_250.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_251.3.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net
Source: chromecache_188.3.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_340.3.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_340.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_340.3.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_251.3.dr	String found in binary or memory: https://js.monitor.azure.com
Source: chromecache_188.3.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_285.3.dr	String found in binary or memory: https://lexical.dev/docs/error?$
Source: chromecache_285.3.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_285.3.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_232.3.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_251.3.dr	String found in binary or memory: https://login.live.com/me.srf?wa=wsignin1.0
Source: chromecache_180.3.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_232.3.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_232.3.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_232.3.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_180.3.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_251.3.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net
Source: chromecache_251.3.dr	String found in binary or memory: https://lptag.liveperson.net
Source: chromecache_250.3.dr	String found in binary or memory: https://m.youtube.com
Source: chromecache_251.3.dr	String found in binary or memory: https://mem.gfx.ms
Source: chromecache_219.3.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_251.3.dr	String found in binary or memory: https://office.com/systemrequirements
Source: chromecache_285.3.dr, chromecache_307.3.dr	String found in binary or memory: https://office.visualstudio.com/OC/_git/M365AdminUX?path=%2Fmodules%2Fhvc-loader
Source: chromecache_285.3.dr, chromecache_307.3.dr	String found in binary or memory: https://office.visualstudio.com/OC/_workitems/edit/2364251
Source: chromecache_285.3.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_250.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_250.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_250.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_251.3.dr	String found in binary or memory: https://products.office.com/en-us/free-productivity-apps
Source: chromecache_251.3.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-office-for-home-and-school-faq
Source: chromecache_251.3.dr	String found in binary or memory: https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8
Source: chromecache_251.3.dr	String found in binary or memory: https://publisher.liveperson.net
Source: chromecache_235.3.dr	String found in binary or memory: https://rum.hlx.page
Source: chromecache_251.3.dr	String found in binary or memory: https://rum.hlx.page/.rum/
Source: chromecache_251.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_340.3.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_251.3.dr	String found in binary or memory: https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9
Source: chromecache_251.3.dr	String found in binary or memory: https://support.office.com/en-us/article/what-s-new-in-office-365-95c8d81d-08ba-42c1-914f-bca4603e14
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.splice
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.entries
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.values
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_188.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_250.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_251.3.dr	String found in binary or memory: https://templates.office.com
Source: chromecache_251.3.dr	String found in binary or memory: https://www.clarity.ms
Source: chromecache_250.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_250.3.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_250.3.dr	String found in binary or memory: https://www.google.com/pagead/form-data
Source: chromecache_250.3.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_250.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_250.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_250.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_250.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_251.3.dr	String found in binary or memory: https://www.office.com/?auth=1
Source: chromecache_251.3.dr	String found in binary or memory: https://www.office.com/?auth=2
Source: chromecache_251.3.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_251.3.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_251.3.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass
Source: chromecache_251.3.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass
Source: chromecache_250.3.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	HTTPS traffic detected: 142.250.189.4:443 -> 192.168.2.5:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.41.21.102:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.41.21.102:443 -> 192.168.2.5:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.81:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.122.29.236:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.254:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.105:443 -> 192.168.2.5:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.144:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.199.172.99:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.42.202.193:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.42.202.193:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.91:443 -> 192.168.2.5:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.154.120:443 -> 192.168.2.5:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.154.120:443 -> 192.168.2.5:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.153:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.249.72:443 -> 192.168.2.5:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.121.64:443 -> 192.168.2.5:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.51.172:443 -> 192.168.2.5:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.122.29.236:443 -> 192.168.2.5:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.91:443 -> 192.168.2.5:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.144:443 -> 192.168.2.5:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.190.238.2:443 -> 192.168.2.5:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.121.64:443 -> 192.168.2.5:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.37.158:443 -> 192.168.2.5:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.214.185.111:443 -> 192.168.2.5:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.85.233.187:443 -> 192.168.2.5:49973 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.254.148.251:443 -> 192.168.2.5:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.37.126:443 -> 192.168.2.5:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.154.8:443 -> 192.168.2.5:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.12.130:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.5:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.83.60.230:443 -> 192.168.2.5:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.224.254.93:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.148.6.66:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.162:443 -> 192.168.2.5:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.164:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.11.35:443 -> 192.168.2.5:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.83.60.230:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.72.179:443 -> 192.168.2.5:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.215.254.142:443 -> 192.168.2.5:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.164:443 -> 192.168.2.5:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.5:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.49:443 -> 192.168.2.5:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.217:443 -> 192.168.2.5:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.158.36.235:443 -> 192.168.2.5:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.217.201.144:443 -> 192.168.2.5:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.49:443 -> 192.168.2.5:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.72.179:443 -> 192.168.2.5:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.82.117.67:443 -> 192.168.2.5:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.5:50048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.217.201.144:443 -> 192.168.2.5:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.71.131.137:443 -> 192.168.2.5:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.184.67.70:443 -> 192.168.2.5:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.62.177.66:443 -> 192.168.2.5:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.63:443 -> 192.168.2.5:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.63:443 -> 192.168.2.5:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.73.190.11:443 -> 192.168.2.5:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.202.231:443 -> 192.168.2.5:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.73.190.12:443 -> 192.168.2.5:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.127.152:443 -> 192.168.2.5:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.9.76:443 -> 192.168.2.5:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.149.214.28:443 -> 192.168.2.5:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.217.201.144:443 -> 192.168.2.5:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.38.119.43:443 -> 192.168.2.5:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.66.130.132:443 -> 192.168.2.5:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.71.139.29:443 -> 192.168.2.5:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.32.36.226:443 -> 192.168.2.5:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.32.36.226:443 -> 192.168.2.5:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.196:443 -> 192.168.2.5:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.234.43.217:443 -> 192.168.2.5:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.166.41:443 -> 192.168.2.5:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.105:443 -> 192.168.2.5:50127 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.81:443 -> 192.168.2.5:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.49:443 -> 192.168.2.5:50126 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.105:443 -> 192.168.2.5:50132 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.15.241.16:443 -> 192.168.2.5:50137 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@32/331@170/61

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1132,i,4851415541752769451,2503272194000384348,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1132,i,4851415541752769451,2503272194000384348,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4988 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1132,i,4851415541752769451,2503272194000384348,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1132,i,4851415541752769451,2503272194000384348,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4988 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://aka.ms/LearnAboutSenderIdentification	0%	URL Reputation	safe

Source	Detection	Scanner	Label	Link
http://launch-ENf7805d09fd1b455883333cdf34ee4ca2.js	0%	Avira URL Cloud	safe
https://afd-uc-ukdj7blkdh6lc-uat-gfacbtfqa2djddfm.b01.azurefd.net/discex/usc/lib/universalchat.min.j	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
global.px.quantserve.com	192.184.67.70	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
bttrack.com	64.38.119.43	true	false	high
www.tm.a.prd.aadg.trafficmanager.net	20.190.190.196	true	false	high
z1.accdn.liveperson.net	208.89.12.91	true	false	high
sync.crwdcntrl.net	52.52.166.41	true	false	high
cm.g.doubleclick.net	142.250.72.162	true	false	high
www.google.com	142.250.189.4	true	false	high
d.impactradius-event.com	35.186.249.72	true	false	high
dcs-ups.g03.yahoodns.net	209.73.190.11	true	false	high
e3230.b.akamaiedge.net	23.42.202.193	true	false	high
e10993.dsca.akamaiedge.net	23.66.130.132	true	false	high
match.adsrvr.org	35.71.131.137	true	false	high
star-mini.c10r.facebook.com	157.240.11.35	true	false	high
c.bf.contentsquare.net	3.215.254.142	true	false	high
e329293.dscd.akamaiedge.net	23.1.237.81	true	false	high
s.twitter.com	162.159.140.229	true	false	high
aragorn-prod-or-acai-lb.inbake.com	52.32.36.226	true	false	high
cm.everesttech.net.akadns.net	44.224.254.93	true	false	high
ds.reson8.com.cdn.cloudflare.net	104.18.9.76	true	false	high
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	54.190.238.2	true	false	high
www.tm.a.prd.aadg.akadns.net	20.190.151.69	true	false	high
e12627.g.akamaiedge.net	23.199.172.99	true	false	high
k.bf.contentsquare.net	44.217.201.144	true	false	high
q-aus1.contentsquare.net	54.161.72.179	true	false	high
z1.lptag.liveperson.net	208.89.12.153	true	false	high
ln-0002.ln-msedge.net	150.171.22.12	true	false	high
googleads.g.doubleclick.net	172.217.12.130	true	false	high
a.tribalfusion.com	172.64.150.63	true	false	high
map.media6degrees.com.cdn.cloudflare.net	172.64.146.217	true	false	high
greenid-prod-pme.westus2.cloudapp.azure.com	20.72.243.62	true	false	high
h2.shared.global.fastly.net	151.101.2.49	true	false	high
lpcdn.lpsnmedia.net	34.120.154.120	true	false	high
n.sni.global.fastly.net	151.101.193.91	true	false	high
s.tribalfusion.com	172.64.150.63	true	false	high
s-part-0041.t-0009.t-msedge.net	13.107.246.69	true	false	high
e11294.g.akamaiedge.net	23.51.202.231	true	false	high
beacons-handoff.gcp.gvt2.com	192.178.154.94	true	false	high
e4751.b.akamaiedge.net	23.62.177.66	true	false	high
adobetarget.data.adobedc.net	63.140.36.145	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
publisher.liveperson.net	34.120.154.120	true	false	high
dco-ats-00-1379651868.us-west-2.elb.amazonaws.com	35.83.60.230	true	false	high
rtb.adentifi.com	3.234.43.217	true	false	high
jadserve.postrelease.com.akadns.net	35.163.127.152	true	false	high
msftenterprise.sc.omtrdc.net	63.140.37.158	true	false	high
aka.ms	23.41.21.102	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
srm.bf.contentsquare.net	54.158.36.235	true	false	high
e13678.dscg.akamaiedge.net	104.122.29.236	true	false	high
e35058.api12.akamaiedge.net	23.43.51.172	true	false	high
s-part-0043.t-0009.t-msedge.net	13.107.246.71	true	false	high
ib.anycast.adnxs.com	104.254.148.251	true	false	high
d1xbuscas8tetl.cloudfront.net	18.173.121.64	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
ats.everesttech.net	unknown	unknown	false	high
ag.innovid.com	unknown	unknown	false	high
idpix.media6degrees.com	unknown	unknown	false	high
px.owneriq.net	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
dmpsync.3lift.com	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
rtd.tubemogul.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net	unknown	unknown	false	high
logincdn.msftauth.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
fpt.microsoft.com	unknown	unknown	false	high
sync-tm.everesttech.net	unknown	unknown	false	high
c.clicktale.net	unknown	unknown	false	high
ds.reson8.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
cxcs.microsoft.net	unknown	unknown	false	high
q-aus1.clicktale.net	unknown	unknown	false	high
cdnssl.clicktale.net	unknown	unknown	false	high
fpt.live.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
rtd-tm.everesttech.net	unknown	unknown	false	high
servedby.flashtalking.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
k-aus1.clicktale.net	unknown	unknown	false	high
rum.hlx.page	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
checkout.microsoft365.com	unknown	unknown	false	high
mscom.demdex.net	unknown	unknown	false	high
mem.gfx.ms	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
c.s-microsoft.com	unknown	unknown	false	high
cms.quantserve.com	unknown	unknown	false	high
support.content.office.net	unknown	unknown	false	high
analytics.tiktok.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://rum.hlx.page/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js	false	high
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7990886421122501186	false	high
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false	high
https://fpt.live.com/?session_id=2a77f1d01d39fd25e0e7f745f035c66f&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI	false	high
https://px.ads.linkedin.com/collect/?pid=7850&fmt=gif&cookiesTest=true	false	high
https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	false	high
https://cdnssl.clicktale.net/www/bridge-WR110.js	false	high
https://dpm.demdex.net/ibs:dpid=3047&dpuuid=63279255F165FC&gdpr=0&gdpr_consent=	false	high
https://msftenterprise.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69875205895088824002691149854966509433&ts=1745802227840	false	high
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	false	high
https://dpm.demdex.net/ibs:dpid=477&dpuuid=eceb0dbe1be224d0a6eaee078bbf8803e9ceb198f2ec8909516a2489cf6b6c9ab0da87c991749652	false	high
https://analytics.tiktok.com/api/v2/pixel	false	high
https://mscom.demdex.net/dest5.html?d_nsid=0	false	high
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false	high
https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-K2TdtPpE2pGHQMO5VQ156Nmztq_rLu8cD5c-~A	false	high
https://rtb.adentifi.com/CookieSyncAdobe	false	high
https://dpm.demdex.net/ibs:dpid=411&dpuuid=aA7T_AAAAKwZWAOA	false	high
https://c.clicktale.net/pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9&r=095238	false	high
https://www.facebook.com/tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278	false	high
https://c.clicktale.net/dvar?v=15.84.1&pid=2422&pn=1&sn=1&uu=f158b121-73c0-a08c-8203-99f58c2889a9&dv=H4sIAAAAAAAAA1WP3UrEMBCFX2XozSoa7H%2Btd7GWWnC3y25EUKSkSdSwsZE0RYrsu5uu4uJNToaZOWe%2BL29NirYaJfeuPD%2FhURilEeJJFKOY5xHKuzRBjIs0i7MsEVngnXv4usWkDdIkDwABvsAgetop2b8CZWw01Args0jdgxisfP%2F5jsM8sqiU7qhymw%2Bic%2B%2FaaL4AzHUnAPdUTVayAYz40MbCMEor3GWUHuLsMb7cVhBexn7uugct%2FlpLvCFlcQv3pL6rHzGpmxVsynWzIfWqcomF7i1lFvCwW1JjBXuDF23gRlgqlbMjhrLdfGrTqwmFR%2BIo8f2ZWH3SaUCOaGZ38rS12ohfFjiDf%2BUJLpenz84WY3RwIIG3%2FwazC2VbdwEAAA%3D%3D&ct=2&r=755025	false	high
https://rtd.tubemogul.com/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D782%26dpuuid%3D%24%7BTM_USER_ID%7D	false	high
https://ag.innovid.com/dv/sync?tid=6	false	high
https://dpm.demdex.net/ibs:dpid=358&dpuuid=4155444032255463320	false	high
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=Njk0MzU5MDA4NDM1ODk4MTM1OTI3MzczMDQ2Njk2NTU5NTkxNTg=&google_tc=	false	high
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js	false	high
https://cxcs.microsoft.net/static/public/central/neutral/8d293d4c-c611-44dd-963a-26137d3b12e0/a60d0e024baa9422cd26c83be43dfc763fa59490.png	false	high
https://jadserve.postrelease.com/dmp/7?vk=69435900843589813592737304669655959158&ntv_r=https://dpm.demdex.net/ibs:dpid=38117&dpuuid=NTV_USER_ID	false	high
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	high
https://ds.reson8.com/adb-ext.gif?puid=69435900843589813592737304669655959158	false	high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false	high
https://dpm.demdex.net/ibs:dpid=80742&dpuuid=3212f8c8-cf61-471b-8919-02509ef772de	false	high
https://analytics.tiktok.com/i18n/pixel/static/main.MWYwYWI1NGQ2MA.js	false	high
https://c.clicktale.net/v2/events?uu=f158b121-73c0-a08c-8203-99f58c2889a9&sn=1&hd=1745802232&v=15.84.1&pid=2422&pn=1&str=321&di=7731&dc=11189&fl=11203&sr=21&mdh=4261&ct=0	false	high
https://idsync.rlcdn.com/365868.gif?partner_uid=69435900843589813592737304669655959158	false	high
https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Fpid%3D7850%26fmt%3Dgif%26cookiesTest%3Dtrue%26liSync%3Dtrue	false	high
https://dpm.demdex.net/ibs:dpid=903&dpuuid=510bf6a9-95a5-4993-ae9f-c9cca746eab2	false	high
https://dpm.demdex.net/ibs:dpid=782&dpuuid=aA7T_AAAAKwZWAOA	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_188.3.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_232.3.dr	false		high
https://office.visualstudio.com/OC/_git/M365AdminUX?path=%2Fmodules%2Fhvc-loader	chromecache_285.3.dr, chromecache_307.3.dr	false		high
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_188.3.dr	false		high
https://github.com/zloirock/core-js	chromecache_188.3.dr	false		high
https://afd-uc-ukdj7blkdh6lc-uat-gfacbtfqa2djddfm.b01.azurefd.net/discex/usc/lib/universalchat.min.j	chromecache_285.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_188.3.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_188.3.dr	false		high
https://www.youtube.com	chromecache_250.3.dr	false		high
https://lptag.liveperson.net	chromecache_251.3.dr	false		high
https://github.com/tc39/proposal-array-filtering	chromecache_188.3.dr	false		high
https://m.youtube.com	chromecache_250.3.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_188.3.dr	false		high
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_310.3.dr	false		high
https://github.com/es-shims/es5-shim/issues/150	chromecache_188.3.dr	false		high
https://github.com/w3c/aria-practices/pull/1757	chromecache_188.3.dr	false		high
https://axios-http.com	chromecache_219.3.dr	false		high
https://openjsf.org/	chromecache_285.3.dr	false		high
https://d.impactradius-event.com	chromecache_251.3.dr	false		high
https://www.google.com/pagead/form-data	chromecache_250.3.dr	false		high
https://keycode.info/table-of-all-keycodes	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-getmethod	chromecache_188.3.dr	false		high
https://www.skype.com/en/	chromecache_251.3.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_188.3.dr	false		high
https://schema.org	chromecache_251.3.dr	false		high
http://underscorejs.org/LICENSE	chromecache_285.3.dr	false		high
https://www.office.com/?auth=2	chromecache_251.3.dr	false		high
https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8	chromecache_251.3.dr	false		high
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_188.3.dr	false		high
https://www.office.com/?auth=1	chromecache_251.3.dr	false		high
https://github.com/zloirock/core-js/issues/1130	chromecache_188.3.dr	false		high
https://jquery.com/	chromecache_340.3.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-tolength	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_188.3.dr	false		high
http://launch-ENf7805d09fd1b455883333cdf34ee4ca2.js	chromecache_303.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_310.3.dr	false		high
https://breeze.aimon.applicationinsights.io	chromecache_321.3.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_188.3.dr	false		high
https://github.com/zloirock/core-js/issues/677	chromecache_188.3.dr	false		high
https://sizzlejs.com/	chromecache_340.3.dr	false		high
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_251.3.dr	false		high
https://bugzil.la/548397	chromecache_188.3.dr	false		high
https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9	chromecache_251.3.dr	false		high
https://github.com/zloirock/core-js/issues/1128	chromecache_188.3.dr	false		high
https://login.windows-ppe.net	chromecache_180.3.dr	false		high
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_219.3.dr	false		high
https://dc-int.services.visualstudio.com	chromecache_321.3.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_188.3.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_188.3.dr	false		high
https://login.microsoftonline.com	chromecache_180.3.dr	false		high
https://tc39.es/ecma262/#sec-object.entries	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.find	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-object.keys	chromecache_188.3.dr	false		high
https://github.com/kitcambridge/es5-shim/commit/4f738ac066346	chromecache_188.3.dr	false		high
https://support.office.com/en-us/article/what-s-new-in-office-365-95c8d81d-08ba-42c1-914f-bca4603e14	chromecache_251.3.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.every	chromecache_188.3.dr	false		high
https://tc39.es/ecma262/#sec-toprimitive	chromecache_188.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.41.21.102	aka.ms	United States	16625	AKAMAI-ASUS	false
23.66.130.132	e10993.dsca.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
104.18.9.76	ds.reson8.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
54.190.238.2	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
44.217.201.144	k.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
172.64.146.217	map.media6degrees.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
142.250.72.164	unknown	United States	15169	GOOGLEUS	false
150.171.22.12	ln-0002.ln-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.72.162	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.163.127.152	jadserve.postrelease.com.akadns.net	United States	16509	AMAZON-02US	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
64.38.119.43	bttrack.com	United States	18568	BIDTELLECTUS	false
151.101.130.49	unknown	United States	54113	FASTLYUS	false
157.240.11.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
192.184.67.70	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
172.217.12.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
23.15.241.16	unknown	United States	20940	AKAMAI-ASN1EU	false
208.89.12.91	z1.accdn.liveperson.net	United States	11054	LIVEPERSONUS	false
3.215.254.142	c.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
151.101.2.49	h2.shared.global.fastly.net	United States	54113	FASTLYUS	false
23.199.172.99	e12627.g.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
23.212.62.144	unknown	United States	20940	AKAMAI-ASN1EU	false
54.148.6.66	unknown	United States	16509	AMAZON-02US	false
104.122.29.236	e13678.dscg.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
209.73.190.12	unknown	United States	36229	YAHOO-YSM-SC8US	false
104.254.148.251	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
54.158.36.235	srm.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
209.73.190.11	dcs-ups.g03.yahoodns.net	United States	36229	YAHOO-YSM-SC8US	false
23.1.237.81	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
34.214.185.111	unknown	United States	16509	AMAZON-02US	false
54.161.72.179	q-aus1.contentsquare.net	United States	14618	AMAZON-AESUS	false
3.234.43.217	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
23.43.51.172	e35058.api12.akamaiedge.net	United States	35994	AKAMAI-ASUS	false
34.120.154.120	lpcdn.lpsnmedia.net	United States	15169	GOOGLEUS	false
208.89.12.153	z1.lptag.liveperson.net	United States	11054	LIVEPERSONUS	false
151.101.66.49	unknown	United States	54113	FASTLYUS	false
35.85.233.187	unknown	United States	237	MERIT-AS-14US	false
162.159.140.229	s.twitter.com	United States	13335	CLOUDFLARENETUS	false
35.83.60.230	dco-ats-00-1379651868.us-west-2.elb.amazonaws.com	United States	237	MERIT-AS-14US	false
23.42.202.193	e3230.b.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
172.64.150.63	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
63.140.37.158	msftenterprise.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
151.101.193.91	n.sni.global.fastly.net	United States	54113	FASTLYUS	false
54.149.214.28	unknown	United States	16509	AMAZON-02US	false
44.224.254.93	cm.everesttech.net.akadns.net	United States	16509	AMAZON-02US	false
63.140.37.126	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
20.190.190.196	www.tm.a.prd.aadg.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.51.202.231	e11294.g.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
18.173.121.64	d1xbuscas8tetl.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.189.4	www.google.com	United States	15169	GOOGLEUS	false
52.52.166.41	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
35.71.139.29	us-east-eb2.3lift.com	United States	237	MERIT-AS-14US	false
23.1.237.105	unknown	United States	20940	AKAMAI-ASN1EU	false
54.82.117.67	unknown	United States	14618	AMAZON-AESUS	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false
23.62.177.66	e4751.b.akamaiedge.net	United States	3257	GTT-BACKBONEGTTDE	false
52.32.36.226	aragorn-prod-or-acai-lb.inbake.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.7
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1675773
Start date and time:	2025-04-28 03:02:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aka.ms/LearnAboutSenderIdentification
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@32/331@170/61

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.72.238, 74.125.137.84, 142.250.68.35, 142.250.189.14, 23.1.234.24, 142.250.188.238, 142.250.176.14, 20.189.173.8, 23.202.57.137, 72.246.244.154, 72.246.244.137, 23.199.167.141, 23.52.215.183, 142.250.176.10, 142.250.68.42, 142.250.188.234, 142.250.189.10, 142.250.72.234, 142.250.72.170, 142.250.68.74, 142.251.40.42, 142.250.217.138, 172.217.12.138, 142.250.72.138, 172.217.14.74, 20.42.65.89, 20.190.151.70, 20.190.151.68, 20.75.60.91, 20.69.140.28, 23.5.15.135, 4.150.3.7, 173.223.234.28, 173.223.234.32, 172.217.12.142, 173.222.162.57, 173.222.162.53, 23.62.177.155, 142.250.72.168, 172.217.12.131, 142.250.72.163, 23.3.86.151, 20.190.151.7, 20.190.151.9, 52.182.143.213, 20.42.73.25, 20.50.201.195, 142.250.72.174, 192.178.49.206, 20.190.151.8, 20.190.151.134, 20.190.151.6, 20.190.151.69, 20.190.151.67, 20.190.151.131, 20.190.151.132, 20.190.151.133, 96.6.230.248, 13.107.246.69, 20.109.210.53, 13.107.246.71, 150.171.28.10, 63.140.36.145, 63.140.37.145, 20.72.243.62
Excluded domains from analysis (whitelisted): lgincdnmsftuswe2.azureedge.net, e8361.b.akamaiedge.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, cxcs.cdn.office.net.edgekey.net, uhf.microsoft.com.edgekey.net, e11290.dspg.akamaiedge.net, onedscolprdwus07.westus.cloudapp.azure.com, www.microsoft.com-c-3.edgekey.net, clients2.google.com, onedscolprdcus16.centralus.cloudapp.azure.com, login.live.com, cxcs.cdn.office.net, update.googleapis.com, san-ion.secure4.scene7.com.edgekey.net, fs.microsoft.com, uhf.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, ris-prod.trafficmanager.net, df.cfp.microsoft.com, aadcdn.msauth.net, ris.api.iris.microsoft.com, c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com, ax-ring.msedge.net, edgedl.me.gvt1.com, c.bing.com, aadcdnoriginw
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14610
Entropy (8bit):	4.976852331020768
Encrypted:	false
SSDEEP:	192:mKJzSeCJKfB5Kj4dQwfxZMTZXZhHv9UJPyGmVIUhNZHN68wHlPp:d/CJKfjQ4dT3cp7UpyGmVIU7ZHM/z
MD5:	5E0B0F9CBE0E582BAEEE57E2DD978435
SHA1:	7B24690C6FFB6626AE1A92D602AA154E7CF088AF
SHA-256:	906255DAC80992BC18ED74CC6AEC697EECBFFAA180EED79A31B12A38102877E3
SHA-512:	299EAD75B615C535519897D7016669E0F3355C20C923AB3B5B9B658F7663C199FC4413D0CBFE3702F3EDD71A52830C0AC0803D82388239739A3E1B5EAF1F5A92
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com//discex/usc/lib/storeassistant.universal.min.css
Preview:	:root {. --background-color: #f5f5f5;. --text-color: #242424;. --icon-margin: 8px;. --action-icon-margin: 16px;. --breakpoint-sm: 859px;.}...store-assistant-header {. display: flex;. align-items: center;. justify-content: space-between;. height: 32px;. width: 100%;. background-color: var(--background-color);. box-sizing: border-box;. border-radius: 4px;. margin-bottom: 16px;.}...store-assistant-header .header-content {. display: flex;. align-items: center;.}...store-assistant-header .chat-icon {. margin-right: var(--icon-margin);.}...store-assistant-header .header-title {. color: var(--text-color);. font-size: 16px;. font-style: normal;. font-weight: 600;. line-height: 22px;. margin-bottom: 0px;.}..@media (max-width: var(--breakpoint-sm)) {. .store-assistant-header {. height: auto;. }.. .store-assistant-header .header-title {. font-size: 0.875rem;. }.}...end-chat-modal {. background-color: #f5f5f5;. display: flex;. align-items: center;. justify-cont

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 28, 2025 03:03:05.119602919 CEST	192.168.2.5	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Apr 28, 2025 03:03:08.332627058 CEST	192.168.2.5	1.1.1.1	c2df	(Port unreachable)	Destination Unreachable
Apr 28, 2025 03:03:21.210824966 CEST	192.168.2.5	1.1.1.1	c2aa	(Port unreachable)	Destination Unreachable
Apr 28, 2025 03:03:25.776017904 CEST	192.168.2.5	1.1.1.1	c270	(Port unreachable)	Destination Unreachable
Apr 28, 2025 03:03:51.451608896 CEST	192.168.2.5	1.1.1.1	c2a0	(Port unreachable)	Destination Unreachable
Apr 28, 2025 03:04:16.970293045 CEST	192.168.2.5	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Apr 28, 2025 03:02:59.845247030 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 28, 2025 03:02:59.996320963 CEST	1242	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 28 Apr 2025 01:00:56 GMT Expires: Mon, 28 Apr 2025 01:50:56 GMT Cache-Control: public, max-age=3000 Age: 123 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:04 UTC	686	OUT	GET /LearnAboutSenderIdentification HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:04 UTC	511	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://support.microsoft.com/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Request-Context: appId=cid-v1:d94c0f68-64bf-4036-8409-a0e761bb7ee1 X-Response-Cache-Status: True Expires: Mon, 28 Apr 2025 01:03:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 28 Apr 2025 01:03:04 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:05 UTC	686	OUT	GET /LearnAboutSenderIdentification HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:06 UTC	511	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://support.microsoft.com/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Request-Context: appId=cid-v1:d94c0f68-64bf-4036-8409-a0e761bb7ee1 X-Response-Cache-Status: True Expires: Mon, 28 Apr 2025 01:03:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 28 Apr 2025 01:03:05 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:17 UTC	479	OUT	GET /public-a601c2d1-845c-4bbf-89f0-24e3e56bb31d/thumbnail_w800.jpeg HTTP/1.1 Host: videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:17 UTC	1440	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 01:03:17 GMT Content-Type: image/jpeg Content-Length: 20629 Connection: close Last-Modified: Fri, 25 Oct 2024 03:15:51 GMT ETag: "0x8DCF4A354AD87D5" x-ms-request-id: 207d01b0-b01e-0079-2ed9-b70dbe000000 x-ms-version: 2015-04-05 x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob x-ms-copy-id: e5353bca-c151-4b63-af9d-1c1100678dd2 x-ms-copy-source: https://videoencodingpublicwus.blob.core.windows.net:443/docs-video-encoding/a601c2d1-845c-4bbf-89f0-24e3e56bb31d/draft/Thumbnail/thumbnail_w800.jpeg?skoid=1603f197-ec42-4fdfXXXXXXXXXXXXXXXXXX&sktid=975f013f-7f24-47e8-a7d3-abc4752bf346&skt=2024-10-22T13%3a31%3a17Z&ske=2024-10-28T13%3a36%3a17Z&sks=b&skv=2021-08-06&sv=2021-08-06&st=2024-10-25T03%3a15%3a51Z&se=2024-10-25T07%3a15%3a51Z&sr=b&sp=r x-ms-copy-status: success x-ms-copy-progress: 20629/20629 x-ms-copy-completion-time: Fri, 25 Oct 2024 03:15:51 GMT Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-lease-state,x-ms-blob-type,x-ms-copy-id,x-ms-copy-source,x-ms-copy-status,x-ms-copy-progress,x-ms-copy-completion-time,Accept-Ranges,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250428T010317Z-r185b9c99458hhgchC1PHXec9c0000000svg00000000c0q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-28 01:03:17 UTC	14944	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 00 00 00 00 00 ff fe 00 0f 4c 61 76 63 35 38 2e 31 38 2e 31 30 30 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c0 00 11 08 01 c2 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 05 03 04 06 02 08 07 ff c4 00 45 10 00 02 01 03 02 02 08 02 06 08 06 01 03 05 01 00 00 01 02 03 04 11 05 12 21 31 Data Ascii: JFIFLavc58.18.100C% !###&)&")"#"C""""""""""""""""""""""""""""""""""""""""""""""""""" "E!1
2025-04-28 01:03:17 UTC	5685	IN	Data Raw: 32 d2 9b e0 b6 be 1f b3 ff 00 f3 89 92 3d 22 aa ac 6f ae aa 69 b3 a5 0b 59 46 30 55 25 89 49 b9 6d c3 58 e1 dc fb f8 33 66 be d8 fb 2b 7f 9f a7 48 0e 62 1d 23 bc 77 34 e9 fd 57 59 aa b3 51 8c b3 88 63 3c 5a 6d 2e 69 a6 b3 8e 07 4e 72 9a cd 7c bb d6 f1 6f 00 00 95 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 4b b3 2f 42 48 97 66 5e 80 23 d9 5e 88 92 23 d9 5e 88 90 00 00 00 00 00 00 00 00 00 00 05 74 34 5b 2a 7d 21 ad ac 42 93 57 f5 ad e3 6d 52 a2 93 c4 a1 19 39 25 8e 59 4d be 3c cb 10 6c 4c c7 86 4d 62 7c 80 18 6e ed e3 77 63 5e de a3 6a 15 a9 ca 9c 9a f0 69 af fc 99 0d 96 5c a7 c9 84 d3 e4 d3 c7 0e 07 2b 47 a2 77 14 2d aa d3 a1 ab d6 a3 29 c3 6a 54 29 ec a7 07 88 2d ca 2a 5c 1e 20 fe f9 37 c0 9a 1d 13 ad 69 3d f6 Data Ascii: 2="oiYF0U%ImX3f+Hb#w4WYQc<Zm.iNr\|oK/BHf^#^#^t4[}!BWmR9%YM<lLMb\|nwc^ji\+Gw-)jT)-\ 7i=

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:21 UTC	609	OUT	GET /16.000/content/js/MeControl_cysVI1AUwAea_LJc1LVFSA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive Origin: https://login.live.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:21 UTC	625	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-MD5: nYmnGQdb2FHLi5Qqhc9b3g== Last-Modified: Thu, 20 Feb 2025 06:39:18 GMT ETag: "0x8DD51794D1D2AF5" x-ms-request-id: 7b89fbca-101e-00ab-546f-85fead000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=25993007 Date: Mon, 28 Apr 2025 01:03:21 GMT Content-Length: 17287 Connection: close Akamai-GRN: 0.d0df3517.1745802201.479af5b4
2025-04-28 01:03:21 UTC	15759	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2025-04-28 01:03:21 UTC	1528	IN	Data Raw: 72 6f 6c 2e 5f 64 56 28 53 65 72 76 65 72 44 61 74 61 2e 73 45 72 72 54 78 74 2c 53 65 72 76 65 72 44 61 74 61 2e 63 44 2c 64 29 3b 65 6c 73 65 20 69 66 28 53 65 72 76 65 72 44 61 74 61 2e 50 29 66 6f 72 28 76 61 72 20 66 3d 53 65 72 76 65 72 44 61 74 61 2e 50 2c 65 3d 30 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 65 3c 67 3b 2b 2b 65 29 7b 76 61 72 20 61 3d 66 5b 65 5d 3b 63 3d 7b 69 64 70 3a 22 6d 73 61 22 2c 66 69 72 73 74 4e 61 6d 65 3a 61 2e 66 69 72 73 74 4e 61 6d 65 2c 6c 61 73 74 4e 61 6d 65 3a 61 2e 6c 61 73 74 4e 61 6d 65 2c 6d 65 6d 62 65 72 4e 61 6d 65 3a 61 2e 73 69 67 6e 49 6e 55 73 65 72 6e 61 6d 65 2c 63 69 64 3a 61 2e 63 69 64 2c 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 3a 61 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 Data Ascii: rol._dV(ServerData.sErrTxt,ServerData.cD,d);else if(ServerData.P)for(var f=ServerData.P,e=0,g=f.length;e<g;++e){var a=f[e];c={idp:"msa",firstName:a.firstName,lastName:a.lastName,memberName:a.signInUsername,cid:a.cid,authenticatedState:a.authenticatedState

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:24 UTC	684	OUT	GET /en-us/media/0b1fe818-4ce3-46e9-8851-111cec3c540c.png HTTP/1.1 Host: support.content.office.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:24 UTC	252	IN	HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://cxcs.cdn.office.net/file/soc-config/en-us/0b1fe818-4ce3-46e9-8851-111cec3c540c Date: Mon, 28 Apr 2025 01:03:24 GMT Connection: close X-SOC-CDN-Source: cxcs

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:26 UTC	735	OUT	GET /static/public/central/neutral/8d293d4c-c611-44dd-963a-26137d3b12e0/a60d0e024baa9422cd26c83be43dfc763fa59490.png HTTP/1.1 Host: cxcs.microsoft.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:26 UTC	586	IN	HTTP/1.1 200 OK Content-Length: 6143 Content-Type: image/png Last-Modified: Wed, 24 Jul 2024 23:56:06 GMT Accept-Ranges: bytes ETag: "0x8DCAC3C2EEBB2BF" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 06f4fcd5-301e-00b8-605f-678713000000 x-ms-version: 2020-04-08 x-ms-creation-time: Wed, 24 Jul 2024 23:56:06 GMT x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob x-ms-server-encrypted: true Cache-Control: max-age=9995 Expires: Mon, 28 Apr 2025 03:50:01 GMT Date: Mon, 28 Apr 2025 01:03:26 GMT Connection: close
2025-04-28 01:03:26 UTC	6143	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 06 00 00 00 60 08 06 00 00 00 ff ef dc cf 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 2e 22 00 00 2e 22 01 aa e2 dd 92 00 00 17 94 49 44 41 54 78 5e ed 9c 0b 9c 55 55 bd c7 f7 3e 67 66 98 f7 e0 60 20 c8 cd c4 17 92 a6 22 34 80 97 a4 87 a8 a5 66 14 94 45 72 cb c2 2e 08 28 22 20 98 c0 cd 7c 21 4f 0b d2 8f 72 7d dc 24 c1 94 4a eb aa a4 02 82 82 0e 1a 20 60 58 91 28 78 03 01 e7 c1 c0 cc 9c 39 f7 fb 5b b3 ce b9 f3 02 e6 8c 8f 43 d7 ff 97 cf 62 ef bd 1e ff f5 fa ff ff 6b ed c7 99 c0 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 Data Ascii: PNGIHDR`sRGBgAMAapHYs."."IDATx^UU>gf` "4fEr.(" \|!Or}$J `X(x9[Cbk00000000000000000

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:27 UTC	493	OUT	GET /static/public/central/neutral/8d293d4c-c611-44dd-963a-26137d3b12e0/a60d0e024baa9422cd26c83be43dfc763fa59490.png HTTP/1.1 Host: cxcs.microsoft.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:27 UTC	586	IN	HTTP/1.1 200 OK Content-Length: 6143 Content-Type: image/png Last-Modified: Wed, 24 Jul 2024 23:56:06 GMT Accept-Ranges: bytes ETag: "0x8DCAC3C2EEBB2BF" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 06f4fcd5-301e-00b8-605f-678713000000 x-ms-version: 2020-04-08 x-ms-creation-time: Wed, 24 Jul 2024 23:56:06 GMT x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob x-ms-server-encrypted: true Cache-Control: max-age=9994 Expires: Mon, 28 Apr 2025 03:50:01 GMT Date: Mon, 28 Apr 2025 01:03:27 GMT Connection: close
2025-04-28 01:03:27 UTC	6143	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 06 00 00 00 60 08 06 00 00 00 ff ef dc cf 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 2e 22 00 00 2e 22 01 aa e2 dd 92 00 00 17 94 49 44 41 54 78 5e ed 9c 0b 9c 55 55 bd c7 f7 3e 67 66 98 f7 e0 60 20 c8 cd c4 17 92 a6 22 34 80 97 a4 87 a8 a5 66 14 94 45 72 cb c2 2e 08 28 22 20 98 c0 cd 7c 21 4f 0b d2 8f 72 7d dc 24 c1 94 4a eb aa a4 02 82 82 0e 1a 20 60 58 91 28 78 03 01 e7 c1 c0 cc 9c 39 f7 fb 5b b3 ce b9 f3 02 e6 8c 8f 43 d7 ff 97 cf 62 ef bd 1e ff f5 fa ff ff 6b ed c7 99 c0 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 Data Ascii: PNGIHDR`sRGBgAMAapHYs."."IDATx^UU>gf` "4fEr.(" \|!Or}$J `X(x9[Cbk00000000000000000

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:36 UTC	606	OUT	GET /.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js HTTP/1.1 Host: rum.hlx.page Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:36 UTC	824	IN	HTTP/1.1 200 Connection: close Content-Length: 5897 accept-ranges: bytes access-control-allow-headers: * access-control-allow-methods: GET, HEAD, OPTIONS access-control-allow-origin: * access-control-expose-headers: * age: 1075292 cache-control: public, max-age=3600 content-digest: sha256=:yALQgtaXTegSY1kLFZtEEHJURISQOPCBRBs6IO5G/qg=: x-timer: S1745802216.367690,VS0,VE0 content-type: text/javascript; charset=utf-8 cross-origin-resource-policy: cross-origin date: Mon, 28 Apr 2025 01:03:36 GMT last-modified: Tue, 15 Apr 2025 14:22:04 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding via: 1.1 fly.io, 1.1 varnish x-cache-hits: 512246 x-content-type-options: nosniff x-frame-options: DENY x-rum-trace: be-u x-served-by: cache-bur-kbur8200171-BUR
2025-04-28 01:03:36 UTC	1378	IN	Data Raw: 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 41 64 6f 62 65 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 20 68 74 74 70 3a 2f 2f 77 Data Ascii: /* * Copyright 2024 Adobe. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * of the License at http://w
2025-04-28 01:03:36 UTC	1378	IN	Data Raw: 6e 73 74 20 69 73 53 65 6c 65 63 74 65 64 20 3d 20 28 70 61 72 61 6d 20 21 3d 3d 20 27 6f 66 66 27 29 20 26 26 20 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 77 65 69 67 68 74 20 3c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 20 6f 62 6a 65 63 74 2d 63 75 72 6c 79 2d 6e 65 77 6c 69 6e 65 2c 20 6d 61 78 2d 6c 65 6e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 68 6c 78 2e 72 75 6d 20 3d 20 7b 20 77 65 69 67 68 74 2c 20 69 64 2c 20 69 73 53 65 6c 65 63 74 65 64 2c 20 66 69 72 73 74 52 65 61 64 54 69 6d 65 3a 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 3f 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 65 4f 72 69 67 69 6e 20 3a 20 44 61 Data Ascii: nst isSelected = (param !== 'off') && (Math.random() * weight < 1); // eslint-disable-next-line object-curly-newline, max-len window.hlx.rum = { weight, id, isSelected, firstReadTime: window.performance ? window.performance.timeOrigin : Da
2025-04-28 01:03:36 UTC	1378	IN	Data Raw: 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 61 6d 70 6c 65 52 55 4d 28 27 65 72 72 6f 72 27 2c 20 65 72 72 44 61 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 73 61 6d 70 6c 65 52 55 4d 2e 62 61 73 65 55 52 4c 20 3d 20 73 61 6d 70 6c 65 52 55 4d 2e 62 61 73 65 55 52 4c 20 7c 7c 20 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 52 55 4d 5f 42 41 53 45 20 7c 7c 20 27 2f 27 2c 20 6e 65 77 20 55 52 4c 28 27 68 74 74 70 73 3a 2f 2f 72 75 6d 2e 68 6c 78 2e 70 61 67 65 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 73 61 6d 70 6c 65 52 55 4d 2e 63 6f 6c 6c 65 63 74 42 61 73 65 55 52 4c 20 3d 20 73 61 6d 70 6c 65 52 55 4d 2e 63 6f 6c 6c 65 63 74 42 61 73 65 55 52 4c 20 7c 7c 20 73 61 6d 70 6c 65 52 55 4d 2e Data Ascii: } sampleRUM('error', errData); }); sampleRUM.baseURL = sampleRUM.baseURL \|\| new URL(window.RUM_BASE \|\| '/', new URL('https://rum.hlx.page')); sampleRUM.collectBaseURL = sampleRUM.collectBaseURL \|\| sampleRUM.
2025-04-28 01:03:36 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6e 68 61 6e 63 65 72 48 61 73 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 69 6e 74 65 67 72 69 74 79 20 3d 20 65 6e 68 61 6e 63 65 72 48 61 73 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 2c 20 27 61 6e 6f 6e 79 6d 6f 75 73 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 73 72 63 20 3d 20 6e 65 77 20 55 52 4c 28 60 2e 72 75 6d 2f 40 61 64 6f 62 65 2f 68 65 6c 69 78 2d 72 75 6d 2d 65 6e 68 61 6e 63 65 72 40 24 7b 65 6e 68 61 6e 63 65 72 56 65 72 73 69 6f 6e 20 7c 7c 20 27 5e 32 27 7d 2f 73 72 63 2f 69 6e 64 65 78 2e Data Ascii: if (enhancerHash) { script.integrity = enhancerHash; script.setAttribute('crossorigin', 'anonymous'); } script.src = new URL(`.rum/@adobe/helix-rum-enhancer@${enhancerVersion \|\| '^2'}/src/index.
2025-04-28 01:03:36 UTC	385	IN	Data Raw: 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 27 6e 61 76 69 67 61 74 69 6f 6e 27 29 29 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 63 6f 6e 73 74 20 69 73 34 30 34 20 3d 20 73 74 61 74 75 73 20 3d 3d 3d 20 27 34 30 34 27 20 7c 7c 20 28 6e 61 76 69 67 61 74 69 6f 6e 20 26 26 20 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 61 6d 65 20 3d 3d 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 0a 20 20 20 20 20 20 26 26 20 6e 61 76 69 67 61 74 69 6f 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 74 75 73 20 3d 3d 3d 20 34 30 34 29 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 34 30 34 29 20 7b 0a 20 20 20 20 20 20 73 61 6d 70 6c 65 52 55 4d 28 27 34 30 34 27 Data Ascii: dow.performance && window.performance.getEntriesByType('navigation')) \|\| []; const is404 = status === '404' \|\| (navigation && navigation.name === window.location.href && navigation.responseStatus === 404); if (is404) { sampleRUM('404'

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:36 UTC	612	OUT	GET /static/fonts/segoe-ui/west-european/Semibold/latest.woff2 HTTP/1.1 Host: c.s-microsoft.com Connection: keep-alive Origin: https://www.microsoft.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:36 UTC	370	IN	HTTP/1.1 200 OK Content-Length: 29388 Content-Type: font/woff2 Last-Modified: Fri, 10 Jan 2020 19:09:43 GMT Accept-Ranges: bytes ETag: "5b68d583e9c7d51:0" Cache-Control: public, max-age=479082 Expires: Sat, 03 May 2025 14:08:18 GMT Date: Mon, 28 Apr 2025 01:03:36 GMT Connection: close Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: *
2025-04-28 01:03:36 UTC	16014	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 72 cc 00 0e 00 00 00 00 d0 90 00 00 72 71 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 00 88 1c 08 85 50 09 94 35 11 0c 0a 82 d5 20 82 ae 6d 01 36 02 24 03 8c 0c 0b 8c 10 00 04 20 05 83 3c 07 20 0c 89 7f 1b 5a b6 15 ec 56 66 b7 83 a5 2d 42 96 f8 48 8c ad 1e ad 80 91 88 60 ec c0 5e a0 18 c9 fe ff 9e 1c 8c 31 b0 06 d0 ec fe c7 12 2c 08 29 9c 89 44 90 67 cb 6d 5b 16 ba c2 09 04 fb 12 27 13 0b d9 94 51 51 4b 0a d6 6c 21 51 d8 b4 8d 09 0b da cd e0 5e ef 5d 51 e7 3b a4 07 86 49 3a 24 0d 2e 7b 74 d9 43 db 22 05 36 84 22 b6 cc 1b 9d d6 09 1b cb c1 7a 90 f1 07 1a 49 07 3c be 4f 58 af f2 25 fd d8 fc e7 69 54 c7 44 cf 6d 92 4e 3b 35 79 d1 e8 f4 e1 f9 b9 fd b9 2f 36 6a 64 fd 81 13 d4 d1 69 50 f5 19 20 6d Data Ascii: wOF2rrq`P5 m6$ < ZVf-BH`^1,)Dgm['QQKl!Q^]Q;I:$.{tC"6"zI<OX%iTDmN;5y/6jdiP m
2025-04-28 01:03:36 UTC	8562	IN	Data Raw: f0 10 d7 bd f0 9f a4 b1 3c 24 73 e1 c7 d2 b7 10 60 b2 38 fc 40 e9 e4 93 29 9d 48 2e a7 55 a4 57 79 01 82 93 23 ef 43 6b cf 51 37 d4 ea a1 21 a9 c9 ae 62 1e b1 09 fd ff f3 0f e0 e8 4b f7 dc cd 84 8b 93 35 23 b1 77 b2 66 6d 8e 49 54 d7 ff 72 cf c1 57 d4 71 b9 14 55 2a 1e 24 25 6d d9 d5 86 98 88 e5 6b 9f 6a 21 ed c2 8b 48 ba a5 33 89 e9 22 2d ea f3 03 0e 8a 58 2d 80 08 d2 5e 69 5f 99 93 0d a5 f3 7e 70 d0 62 db 16 66 af da 36 ad 64 15 cd 07 65 45 ee c2 51 94 e1 26 ea 89 f4 82 0c 6b b2 65 24 74 f7 c7 8b 05 45 fc ad 13 ad 22 6d e9 bc 0d cb 25 28 2b 1d 84 ab 7a 0e 43 91 18 5d b2 c9 3c a6 92 61 99 bc 18 08 5c b9 bf 04 7e 44 92 86 b2 5d b3 94 dc b4 69 b9 94 f6 95 a9 29 2b bd 21 0f e9 ca 42 f1 f0 5e c3 e5 2c 88 32 f3 4e c0 db 2d bf 4d 3f 71 a0 3c 09 b4 46 1a 62 3f Data Ascii: <$s`8@)H.UWy#CkQ7!bK5#wfmITrWqU*$%mkj!H3"-X-^i_~pbf6deEQ&ke$tE"m%(+zC]<a\~D]i)+!B^,2N-M?q<Fb?
2025-04-28 01:03:36 UTC	4812	IN	Data Raw: ae 4a 4d e9 b5 c6 36 ce d7 45 3d 9b aa c3 b1 27 a2 37 34 c8 13 cb 29 35 63 18 95 09 9e 0f d2 01 93 d3 63 72 02 3c e1 87 c3 79 55 4b f9 50 e3 b6 cc 99 11 1d cd 99 24 cb f2 cf 93 a5 75 f6 44 bd 4d b0 c6 63 ea 0e 15 d3 d4 56 cb f2 d9 48 98 6f 43 31 2e c4 c0 81 bd c3 e9 c3 80 5c 10 10 9c 92 50 41 56 d4 46 60 1e 9a 74 68 8c 6e 1e 6f f0 64 4c 7a b2 73 84 10 2c d0 2e 2a 39 be 83 b5 f9 a6 d2 8b 0b 7a 8f d0 91 9f d2 05 f0 9b bb 2c ad b6 b5 bb d3 73 6b bb 2c 2c 14 01 56 77 01 a4 16 f3 b8 bd 65 7e b4 d4 da 80 44 4e 27 00 ac e3 8d 09 6c 5a 92 d7 a7 60 c9 68 ae 60 43 46 29 28 25 5e 7f 18 5f ab 2f 38 71 65 e2 37 b9 61 7a ea d2 31 ce 97 c4 62 19 1c b4 cb 30 e7 64 b2 c5 48 79 04 db f4 9c 7b ea 62 c4 9d e3 27 c9 9c 9c 7b 0e b2 65 8b cc 1c 33 51 62 55 3f 27 d1 7b 0c 33 5b Data Ascii: JM6E='74)5ccr<yUKP$uDMcVHoC1.\PAVF`thnodLzs,.*9z,sk,,Vwe~DN'lZ`h`CF)(%^_/8qe7az1b0dHy{b'{e3QbU?'{3[

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:46 UTC	611	OUT	GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:46 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 137215 Connection: close Date: Mon, 28 Apr 2025 01:03:47 GMT Last-Modified: Wed, 23 Apr 2025 09:06:34 GMT ETag: "02e8e9cf3ec5dcd31603a62f1538f246" x-amz-server-side-encryption: AES256 Cache-Control: max-age=900 Content-Encoding: gzip x-amz-version-id: tSiydU02CccGzi9OVxOnfIDirUPyxPd. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b26ccdd71260d48cda5fd0b5410f6984.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P6 X-Amz-Cf-Id: 9aau97g4Ltq734dgtccQcw3sym3uoUwYQcbpivKwLxHZ0Aw-ZiTRaQ== Timing-Allow-Origin: * age: 0 Vary: Origin
2025-04-28 01:03:46 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 7b 5f 1b 47 d2 28 fc ff f3 29 c4 ac 97 9d 09 83 40 d8 ce 45 ca 44 8b 01 db 24 e6 12 84 ed 24 b2 c2 0e 52 03 63 8b 19 79 a6 07 4c 90 ce ef fd 2c ef 47 7b 3f c9 5b 55 7d 9d 1b e0 24 7b 9e 67 cf 49 7e bb 46 d3 5d 7d ab ae ae ae aa ae ae be 0a d3 d6 d6 e0 64 eb 60 ff 79 70 eb 44 d9 60 ef 99 d3 3d 0b a7 19 f3 9d 59 9a bc 67 63 be 3b 71 ba 1b 4f 36 36 7c 27 e3 21 cf 33 a7 db f1 9d 8b 24 e3 71 78 c9 e0 6b e8 5c 46 e3 34 c9 92 33 de 1e 27 97 8e ef 5c 47 f1 24 b9 ce e4 57 f8 5b 9e b2 6b 76 9a 45 9c 65 ed 98 71 48 d3 25 32 9e a4 0c 01 db e3 58 c1 b6 cb f5 65 b3 df c2 d5 71 18 87 e9 8d 2c 2f e0 44 ee d9 34 b9 86 ea 57 a1 77 e7 51 7c de 8e b3 90 8f 25 5c c6 c6 00 98 f1 7c 12 31 d1 9f 91 ef 60 e5 d9 76 72 19 46 f1 71 1a 8e 3f 40 21 Data Ascii: {_G()@ED$$RcyL,G{?[U}${gI~F]}d`ypD`=Ygc;qO66\|'!3$qxk\F43'\G$W[kvEeqH%2Xeq,/D4WwQ\|%\\|1`vrFq?@!
2025-04-28 01:03:46 UTC	496	IN	Data Raw: de 94 60 aa bc 7d 0b dd 09 ae f1 cd a3 fb 99 fb 58 c1 b2 3f 9b bd 57 fa d5 68 22 ba 4b eb 11 81 06 9a 2d 48 e5 56 f6 19 bf 4e d2 0f db 22 1c 48 63 0b 52 95 6a 32 78 6a 13 7e 43 7e fb 3a e2 17 4a 6a 95 5d bc 13 76 3f bc 8a ce c9 92 57 c2 cb 45 98 95 0c 5f 0d 93 55 15 2e 6a ad 62 77 0a 15 32 00 c4 76 a3 33 11 5d 39 c2 ba 5f 04 5c d8 ba be 0f e2 3a 4b 56 14 47 85 87 85 08 f6 67 d1 af 17 4b 52 6d 7b 81 81 0f 45 35 6f 45 ca f7 46 dc 96 1b d8 8b a0 0a fc 7d d9 f5 46 c2 fe 2c 31 fd 56 c8 e0 3f 05 4b 9d ae fa 55 59 06 bb b1 70 a2 a1 c8 83 9f ea de a3 17 75 96 cb 1d 27 b3 b7 b4 4e a5 a5 ae a9 e0 4f d5 06 e5 c8 ee 69 f1 ad 98 85 5e 29 16 3d bd ed 16 38 f4 c7 f1 45 14 d2 c0 c1 7f 9d 8a 41 39 70 8a df 08 41 e6 b9 c0 a1 3f f8 ad de 3c 0b 1c f5 cb 59 b8 27 e8 73 79 12 Data Ascii: `}X?Wh"K-HVN"HcRj2xj~C~:Jj]v?WE_U.jbw2v3]9_\:KVGgKRm{E5oEF}F,1V?KUYpu'NOi^)=8EA9pA?<Y'sy
2025-04-28 01:03:47 UTC	16384	IN	Data Raw: 01 0d d7 7e a4 ac 3a 8f c0 14 29 e7 07 57 bf 0a b4 17 2b c6 84 69 94 fb 8b 5b 7b a7 b9 da bb 7a 72 6a ee 5c 31 8a c6 2f 75 71 03 d9 b5 0a e7 bf 7b 89 1e d1 1d bf e3 f5 e2 76 12 a3 da 14 1c c7 3e fe 16 9c 18 3e c6 d9 cb e3 bd 57 04 a9 82 82 a6 63 1d 88 a5 68 ff d1 3c a8 6c 81 e5 17 7d 67 cd a9 24 62 10 1b df e9 5b 06 db f2 00 7e 28 5a 6c da 69 9d a3 b9 e5 28 6f 3a 54 74 13 f7 37 fc af 45 fc 89 d7 80 f8 8f f7 b3 53 ce 15 1f c5 80 0e 0f 96 1e 22 f1 96 db fb 58 da 3d 79 e1 a4 c3 55 a7 e8 11 bf 9b 8f 0a 9a 97 cd 97 58 47 91 c6 55 4c 36 a6 fb 4b 75 c7 93 b2 4e fd 40 ab 5e d8 95 d5 e1 e5 3e 7f aa bf a6 e4 cc 7c a9 bf 41 b0 c9 80 24 fc 4c a7 80 c4 3c fe 80 86 5e a6 56 f9 cb fb 02 c9 a1 ef b2 1d 4b 0e 70 f2 62 9a 9c 86 53 69 8b 2d 04 a2 04 54 16 f2 4a 27 06 27 30 Data Ascii: ~:)W+i[{zrj\1/uq{v>>Wch<l}g$b[~(Zli(o:Tt7ES"X=yUXGUL6KuN@^>\|A$L<^VKpbSi-TJ''0
2025-04-28 01:03:47 UTC	16384	IN	Data Raw: af 34 19 f2 39 d8 d6 f8 18 73 10 77 0c d8 e0 e6 06 d7 13 02 ad 77 b8 a3 ca 77 59 d1 c7 42 34 7f 9f 86 57 49 70 fc be 08 6a 3c fa 46 9c 5c 1c 00 f1 a4 cb 64 ce 85 42 35 37 4a 82 50 b0 f0 00 09 f8 f9 36 7c 2e 04 a4 a5 ba d6 05 c9 fd 48 5d 43 6a f5 f0 35 b9 ba 7b cd a0 63 a1 34 37 63 1b 0a 57 6d 67 af d3 69 15 55 d9 a1 2b 8b 41 2d 36 20 3d 65 18 4f 1d b0 4b f7 23 17 72 ae de e0 50 3b df 5a 17 18 f7 3b 02 6b 09 88 ce 70 cc 32 32 fc 6a 2e 71 ad 86 db 8c 75 ef 58 b0 19 d2 63 78 1a 32 cf f8 45 9a 22 cd 45 69 5c 06 53 be 50 23 93 f2 d2 31 b8 e6 45 9a e0 da 09 b7 11 8b b3 5d a8 19 a5 3f f5 4e 58 89 09 7d 44 9b a4 0d 14 8b f7 36 0b 78 d4 8b 17 2f 42 5f 80 8b e6 f2 da b4 a2 6f f3 7c 7e 44 ef 7c be 67 8c e9 b1 13 6f 28 50 bd cd 96 39 a5 85 5b 35 30 e5 6b f4 b1 18 90 Data Ascii: 49swwwYB4WIpj<F\dB57JP6\|.H]Cj5{c47cWmgiU+A-6 =eOK#rP;Z;kp22j.quXcx2E"Ei\SP#1E]?NX}D6x/B_o\|~D\|go(P9[50k
2025-04-28 01:03:47 UTC	16384	IN	Data Raw: e4 92 20 3e e2 4e 72 9e 8a 1b b4 24 d1 65 3a 73 d8 de da 3f dc ee ec bd 39 ed ec bd de 17 64 9b 88 35 87 37 d9 38 2e 4e 80 41 c5 08 9b 5e 42 6c 43 f6 1d ab 42 29 5e cf ff 28 30 1e 90 38 53 2c 86 18 1e de b5 3e b4 ba 5b 87 9d 83 9e 2e db 3a ea f6 f6 77 f5 b3 63 79 8b 45 07 fb 1d a0 ce 87 a7 db fb 1f f7 08 4d 1f 59 54 d3 eb 87 6b 8e 6a 74 98 44 cf bf ff 3e 44 ce 3c 7a 8e a7 0b de 09 58 91 5d e3 cb 84 ff ce 6b 64 f0 11 d5 d6 6a e1 55 c2 dd 43 ad fb 62 c9 01 d4 7e ab 3d 40 77 b2 7a 78 3b db a8 5d 29 fe 2b ed d3 59 e3 32 c1 f8 8b 68 52 1e c3 9f 11 da a7 c3 09 99 e3 be 86 47 74 e6 c1 b7 e5 e3 58 68 03 56 29 ae 87 b0 cb f0 e9 02 72 43 17 90 73 5d 40 ee e8 02 30 d6 10 8f 53 80 21 20 a4 f2 36 1c c0 03 97 b7 ac b3 c6 38 0f 26 8d 0c 03 dc 30 75 6b 1f 84 93 45 54 04 Data Ascii: >Nr$e:s?9d578.NA^BlCB)^(08S,>[.:wcyEMYTkjtD>D<zX]kdjUCb~=@wzx;])+Y2hRGtXhV)rCs]@0S! 68&0ukET
2025-04-28 01:03:47 UTC	1009	IN	Data Raw: e5 91 d3 de 81 de c1 9d d1 34 4b 38 a6 99 4a 3a ed 12 04 9c 72 05 2d 4a 48 e6 4e e1 d7 98 67 3b b3 4f d3 60 12 ca 79 39 18 90 1b cf 2f fc 65 d9 cd 9c 16 48 70 c0 9e 35 66 20 16 7e 5d 59 8d a6 78 60 fc 38 df e4 59 cf 9c a6 28 31 35 4b 38 4d 63 1e c2 76 95 d3 08 d2 a1 6e 96 11 3e cd 1d 42 e1 3d f9 0e b9 d6 1a c2 60 8f 67 a8 86 8a 26 51 7e 8f c2 c6 6c cc cc 17 00 26 f0 6d ce c2 1c fa b1 7f 1d a6 fc 38 8b ce 33 e8 dc d7 3a cf 7e fc c8 0c e1 47 a7 b6 6a 2a b8 b6 15 fa 38 cb 7e 29 4f f4 77 7a dd 2e b2 89 fd fd 4f 06 e4 67 48 62 d9 6a f5 b5 5e 8c a4 7b f5 fd 5c 79 0a 61 9d db c1 95 d6 41 35 04 05 93 dc ea bc 79 0c 99 9a 89 d2 7d de cb f7 99 d9 5a fb 5b a2 ab ec 94 88 13 39 77 da ce b4 10 16 0f ae bd 15 43 b3 67 6d c7 08 59 53 d3 92 a2 00 b4 b6 a2 04 45 b2 a1 35 Data Ascii: 4K8J:r-JHNg;O`y9/eHp5f ~]Yx`8Y(15K8Mcvn>B=`g&Q~l&m83:~Gj*8~)Owz.OgHbj^{\yaA5y}Z[9wCgmYSE5
2025-04-28 01:03:47 UTC	1039	IN	Data Raw: 20 8e c7 5b 8d 72 27 b8 75 ad f3 7e d9 52 19 85 f8 86 b2 8e 80 ef 89 5e 08 bc 8d 3f a9 f4 3e bf 53 23 e8 80 c5 a1 e0 48 9e 85 9a fd fd b5 74 36 e0 3c 88 dc 29 74 49 fb 35 67 0b 60 22 c1 4b 4b 67 3b e3 ad 23 8a 3e 8e b1 a9 c4 2f be 2c 22 a0 08 0c 23 d7 60 65 af 71 54 d6 28 a7 b0 fc 58 8d c1 7e 1d 5b 8c 7d 6c 07 73 93 df b5 c5 68 eb 21 0f 63 79 f0 8e 8e 07 fa fe 85 b5 ae 39 96 14 1f b1 6c 42 62 a4 56 56 f6 57 89 2b b6 5f 6b 76 7f 84 d6 29 c6 fa 33 a4 58 1a cd bc 4d 8c 4c 2d 78 13 c9 e8 80 e2 c6 21 f3 81 14 40 3d 28 97 4b 00 b3 65 f3 4e c4 25 51 bc d6 18 af 25 f4 d9 ff 63 5d 4b ed 91 5a b1 78 e1 fa 4d 96 b0 6a e4 8d d7 c2 cd 94 f5 cb bb 0f d9 9f 4c ba 32 f2 80 cc 83 bc 71 3e ba 70 7b 48 3c c8 8f f1 c1 d5 42 35 94 8e 5e e7 17 f0 65 7d 33 a8 66 18 0c 9e 3d 6b Data Ascii: [r'u~R^?>S#Ht6<)tI5g`"KKg;#>/,"#`eqT(X~[}lsh!cy9lBbVVW+_kv)3XML-x!@=(KeN%Q%c]KZxMjL2q>p{H<B5^e}3f=k
2025-04-28 01:03:47 UTC	1024	IN	Data Raw: a9 7a 76 fa bd c3 f6 4a 1a 06 61 74 1b 0e 57 8a f8 26 4e ee e2 15 2a be e2 3c a3 98 56 08 e9 d8 0e d7 27 16 6c 4d 98 65 1d 98 cc 73 64 5c f6 92 74 8a 37 ac 17 46 f6 21 b4 24 7b 5c fa 21 e0 c7 0b 42 b0 2e 88 12 0c e1 fa 80 4e d8 5e 5f db 40 0e bc 91 3e f3 58 10 ab e6 bf fe f9 f2 9f ff fc fb fa 3f 9b e1 b9 7f 81 ac 1f 10 c3 86 e3 b8 81 3b 6e 6e ca 04 88 23 4f 1d e3 e6 c8 28 e8 a6 bc b9 b9 5e e5 a1 4b 19 f8 1e 97 06 36 52 b3 ed 44 4b a5 81 15 08 8a bc 4c 0e 80 47 8f 8a 3a ed 94 88 1e 22 45 d9 f7 63 ef 05 97 eb 3f 8c 3d fe eb 12 1d 05 6c ba 26 79 47 64 8d 4f f0 61 fc 87 c7 1b d5 58 a4 8f 9a 42 7e 93 97 7d 06 ec 91 f0 69 96 61 39 22 25 ac 8b 2d 92 8b 61 a4 69 5c d9 bc e9 9c 75 fa 3b bd fd 13 40 5d 18 e0 45 b7 38 61 c0 67 16 f0 9f 33 23 8a 4b 54 46 71 89 ab 51 Data Ascii: zvJatW&N*<V'lMesd\t7F!${\!B.N^_@>X?;nn#O(^K6RDKLG:"Ec?=l&yGdOaXB~}ia9"%-ai\u;@]E8ag3#KTFqQ
2025-04-28 01:03:47 UTC	16384	IN	Data Raw: 45 f5 66 6c 0d a3 42 b4 3a 7f fd f8 00 17 15 13 a8 06 e7 61 26 13 83 29 29 dc 52 56 13 40 85 31 1f 43 09 bf 6b 36 ce b4 68 72 47 09 7c 7a 9d c0 80 40 5c b8 a3 a7 8f 49 e3 5e 10 59 57 43 ae b3 50 78 16 36 dd 99 77 2e 79 83 0b 61 89 a3 23 19 6a 4d 5a 12 70 f2 14 87 c0 57 48 06 40 b0 0e 82 f8 0b d2 2f 08 bf 20 c9 e2 54 88 03 03 e7 e4 0e 38 95 99 40 c5 82 b0 57 c7 c9 79 84 2a 9a 37 47 3b 87 22 d4 15 35 91 2a 3f fb 9c e1 29 f3 b2 66 85 4d e7 4c b8 11 d9 48 e4 e0 b8 ed 16 ed f4 55 10 e8 00 91 64 a7 e9 a4 fb 35 98 14 f0 1a b8 3f 79 2f 8b c5 95 f8 2b 6a 47 89 de 91 05 ef 0b 76 f2 58 e1 31 8f 63 95 b3 44 e9 6c e1 cd ab ad f3 a2 66 96 36 da 63 25 d0 8c 3f 55 5a bf 63 87 f1 03 47 52 62 3b 1e 96 9c ce d4 9f dc f8 08 27 be cd eb 97 fb 4e 60 db 77 63 7e 28 cc c9 d9 d7 Data Ascii: EflB:a&))RV@1Ck6hrG\|z@\I^YWCPx6w.ya#jMZpWH@/ T8@Wy7G;"5?)fMLHUd5?y/+jGvX1cDlf6c%?UZcGRb;'N`wc~(
2025-04-28 01:03:47 UTC	16384	IN	Data Raw: c1 f6 8c 87 7e e1 9f ce b7 77 5e b7 8f 8e cf 77 f6 0f 4f 8e cf 8f 76 be b4 d1 c9 98 3c ca 60 76 3b 83 da 3b b6 1c c9 12 50 2b b9 99 2c 2c 5b 7a 47 0d 95 57 75 14 dd 77 c0 41 57 56 b8 cf de ab 5d fd 4c ae 7e 66 dd 75 b8 c9 7c b9 80 72 14 0d 27 1f 5e c7 8e 97 53 ce 66 b1 09 bc 5e 90 f7 5a ce d1 9b cd 95 67 bf fd ee dc 79 40 03 4f 1d be 55 9c 33 60 70 c9 b8 cd 16 ea 0d 45 03 66 02 e7 9e 19 78 95 e2 b6 65 cb 1a fb 7c 6e e9 ed ed 61 c1 af 24 30 bb 36 5e 32 b0 c1 2d 0d 47 17 b0 c7 97 ae a3 e9 d2 3f ca fc 6b 9e f3 0f 60 ca 3d 05 03 3c 12 4a 06 2c 5f 4e 9b 8d 11 6d 74 9a 95 97 25 c4 f1 4a ea 7e fb ce 8b ea 77 5e 2a 61 9f da 77 1e 90 3b 73 f3 65 fe 8f 2e de dc c0 21 11 37 e5 95 09 c5 0d fb 40 37 bc 2c fc f9 79 cf 63 3e db ad df 5f 60 18 ef 11 b7 f7 c5 d5 4a 6b f6 Data Ascii: ~w^wOv<`v;;P+,,[zGWuwAWV]L~fu\|r'^Sf^Zgy@OU3`pEfxe\|na$06^2-G?k`=<J,_Nmt%J~w^*aw;se.!7@7,yc>_`Jk

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:48 UTC	762	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1745802226773 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:48 UTC	823	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 01:03:48 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: mayU1Z1dQog= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v073-0e13747d8.edge-usw2.demdex.com 3 ms set-cookie: demdex=69435900843589813592737304669655959158; Max-Age=15552000; Expires=Sat, 25 Oct 2025 01:03:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2025-04-28 01:03:48 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 38 37 35 32 30 35 38 39 35 30 38 38 38 32 34 30 30 32 36 39 31 31 34 39 38 35 34 39 36 36 35 30 39 34 33 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69875205895088824002691149854966509433","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:48 UTC	617	OUT	GET /i18n/pixel/events.js?sdkid=C5S71GC247CAE4T3VM1G&lib=ttq HTTP/1.1 Host: analytics.tiktok.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:48 UTC	1098	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/javascript; charset=UTF-8 X-Tt-Logid: 2025042801034824450F1F2C2487BC2CE7 Server-Timing: inner; dur=3 x-tt-trace-host: 0143bc1deba72d8405fc87af8fac7c3294dae66df65c10cd5d45eee0c89a407d2c8707f0ce015bc35a9bb1fc657765711b17503e0bd4761b674c5363622c4447298e2de74dc27d89db4e2534c289d3fa27be0ee75a7920179aa61e60f36f71384a x-tt-trace-id: 00-25042801034824450F1F2C2487BC2CE7-4AB33C9D83380832-00 Expires: Mon, 28 Apr 2025 01:03:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 28 Apr 2025 01:03:48 GMT Transfer-Encoding: chunked X-Cache: TCP_MISS from a23-220-165-197.deploy.akamaitechnologies.com (AkamaiGHost/22.1.0-4f1ef2e9a8e1a0c8be2b8a74a525c274) (-) Connection: close Connection: Transfer-Encoding Set-Cookie: _ttp=2wKtjYRrsxgV6AqD9GQtbKpu1Om; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn Server-Timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=63 X-Origin-Response-Time: 63,23.220.165.197 X-Akamai-Request-ID: 51b89e1b
2025-04-28 01:03:48 UTC	3762	IN	Data Raw: 30 30 30 30 30 45 41 36 0d 0a 0a 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 5b 22 54 69 6b 74 6f 6b 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 22 5d 5d 2e 5f 65 6e 76 20 3d 20 7b 22 65 6e 76 22 3a 22 65 78 74 65 72 6e 61 6c 22 2c 22 6b 65 79 22 3a 22 22 7d 3b 0a 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 5b 22 54 69 6b 74 6f 6b 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 22 5d 5d 2e 5f 76 61 72 69 61 74 69 6f 6e 5f 69 64 20 3d 20 27 74 65 73 74 5f 32 5f 73 69 6e 67 6c 65 5f 74 72 61 63 6b 3a 3a 63 61 6e 61 72 79 27 3b 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 5b 22 54 69 6b 74 6f 6b 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 22 5d 5d 2e 5f 76 69 64 73 20 3d 20 27 27 3b 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 5b 22 54 69 6b 74 6f 6b 41 6e 61 6c 79 74 69 63 73 4f Data Ascii: 00000EA6window[window["TiktokAnalyticsObject"]]._env = {"env":"external","key":""};window[window["TiktokAnalyticsObject"]]._variation_id = 'test_2_single_track::canary';window[window["TiktokAnalyticsObject"]]._vids = '';window[window["TiktokAnalyticsO
2025-04-28 01:03:48 UTC	126	IN	Data Raw: 30 30 30 30 30 30 37 32 0d 0a 77 69 6e 64 6f 77 2e 54 69 6b 74 6f 6b 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 7c 7c 22 74 74 71 22 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 5b 64 28 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 69 29 7b 69 3d 72 28 29 5b 69 5d 3b 72 65 74 75 72 6e 20 69 26 26 69 5b 74 0d 0a Data Ascii: 00000072window.TiktokAnalyticsObject\|\|"ttq"}function r(){return window&&window[d()]}function p(t,i){i=r()[i];return i&&i[t
2025-04-28 01:03:48 UTC	1271	IN	Data Raw: 30 30 30 30 30 34 45 42 0d 0a 5d 7c 7c 7b 7d 7d 76 61 72 20 4d 2c 6c 2c 68 3d 72 28 29 3b 68 7c 7c 28 68 3d 5b 5d 2c 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 5b 64 28 29 5d 3d 68 29 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2c 7b 6f 70 74 69 6f 6e 73 3a 70 28 74 2c 22 5f 6f 22 29 7d 29 2c 4d 3d 65 2c 68 2e 5f 69 7c 7c 28 68 2e 5f 69 3d 7b 7d 29 2c 28 6c 3d 4d 2e 69 6e 66 6f 2e 70 69 78 65 6c 43 6f 64 65 29 26 26 28 68 2e 5f 69 5b 6c 5d 7c 7c 28 68 2e 5f 69 5b 6c 5d 3d 5b 5d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 68 2e 5f 69 5b 6c 5d 2c 4d 29 2c 68 2e 5f 69 5b 6c 5d 2e 5f 6c 6f 61 64 3d 2b 6e 65 77 20 44 61 74 65 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2e 69 6e 66 6f 2c 7b 6c 6f 61 64 53 74 61 72 74 3a 70 28 74 2c 22 5f 74 Data Ascii: 000004EB]\|\|{}}var M,l,h=r();h\|\|(h=[],window&&(window[d()]=h)),Object.assign(e,{options:p(t,"_o")}),M=e,h._i\|\|(h._i={}),(l=M.info.pixelCode)&&(h._i[l]\|\|(h._i[l]=[]),Object.assign(h._i[l],M),h._i[l]._load=+new Date),Object.assign(e.info,{loadStart:p(t,"_t
2025-04-28 01:03:48 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:48 UTC	603	OUT	GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive Origin: https://www.microsoft.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:49 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 9077 Connection: close Date: Mon, 28 Apr 2025 01:03:50 GMT Last-Modified: Thu, 13 Jun 2024 09:22:21 GMT ETag: "d2ba765f9d6c67ba7509d5da2286bbb7" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: .7nUC3X5TW_ivyGxSQ.GDKNPomyOddlI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e2d5a859464f1c14443d86227be20672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P6 X-Amz-Cf-Id: aNQE90fDQP_r2jAf4Wz7AWyfoT-yTsx0p_Xtf8imWTjHURO-ALZaLg== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Access-Control-Allow-Origin: *
2025-04-28 01:03:49 UTC	9077	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 6b 5b db ba d2 e8 67 fa 3c eb 3f 18 ef 77 93 a4 38 4e 02 2d 5d 0d cb ed cb a5 5d 84 03 94 4d 28 dd 9b cb ee 63 6c 25 71 71 ec 2c db 09 64 95 fc f7 33 a3 8b 2d db 72 a0 eb 72 3e 9c f4 29 c4 d2 68 34 1a cd 8c 66 46 b2 68 b5 b4 bd 70 32 8f bc e1 28 d1 36 da ed ad e6 46 7b e3 95 b6 e7 7b ce dd b9 ed 13 ed 28 71 4d 43 fb dc d7 4e ed 84 04 89 76 4a 02 d7 0b 86 3f bd f8 e9 c5 bd 17 b8 e1 bd 99 c2 fe ea 87 b7 b6 af 59 5a 45 c5 e3 a3 f6 7d b1 5d 6e d7 27 49 02 28 63 45 cb b4 4a b4 fd e9 45 01 ab e9 05 5e 02 2d 95 c5 a2 55 b1 32 76 22 6f 92 c4 8a 66 a2 e6 89 96 e6 8c 44 b1 17 06 88 e2 bb 7e 1f e9 5d 4d bf 8d 3c 77 48 9a 5f ce 3a 9d b6 f9 2d d6 0d 4d 9f 38 0e d6 b4 5f bb 9b 1b 9b 5b 9b 4d f7 f5 e6 ab e6 2b f7 ed 66 f3 ed ed d6 eb Data Ascii: }k[g<?w8N-]]M(cl%qq,d3-rr>)h4fFhp2(6F{{(qMCNvJ?YZE}]n'I(cEJE^-U2v"ofD~]M<wH_:-M8_[M+f

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:49 UTC	789	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69875205895088824002691149854966509433&ts=1745802227840 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:49 UTC	442	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true date: Mon, 28 Apr 2025 01:03:49 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2025-04-28 01:03:49 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:49 UTC	795	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: mscom.demdex.net Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: demdex=69435900843589813592737304669655959158
2025-04-28 01:03:49 UTC	607	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 01:03:49 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: jZRdXeK6Rkk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" accept-ranges: bytes last-modified: Thu, 10 Apr 2025 11:14:59 GMT DCS: dcs-prod-usw2-1-v073-0ad431125.edge-usw2.demdex.com 1 ms
2025-04-28 01:03:49 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:50 UTC	559	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1745802226773 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: demdex=69435900843589813592737304669655959158
2025-04-28 01:03:50 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 01:03:50 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: yF/2zCUBT/Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-usw2-1-v073-0ef02732f.edge-usw2.demdex.com 3 ms set-cookie: demdex=69435900843589813592737304669655959158; Max-Age=15552000; Expires=Sat, 25 Oct 2025 01:03:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2025-04-28 01:03:50 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 38 37 35 32 30 35 38 39 35 30 38 38 38 32 34 30 30 32 36 39 31 31 34 39 38 35 34 39 36 36 35 30 39 34 33 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69875205895088824002691149854966509433","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:50 UTC	701	OUT	GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:50 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=10, mss=1346, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 28 Apr 2025 01:03:50 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:50 UTC	694	OUT	GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:50 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1346, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 28 Apr 2025 01:03:50 GMT Connection: close Content-Length: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aka.ms/LearnAboutSenderIdentification

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Windows Analysis Report
https://aka.ms/LearnAboutSenderIdentification

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:50 UTC	1029	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=69875205895088824002691149854966509433&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%0183acd6a292ba4df1addba954290a7289%012&d_cid_ic=MC1%0183acd6a292ba4df1addba954290a7289%012&ts=1745802229288 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: demdex=69435900843589813592737304669655959158
2025-04-28 01:03:50 UTC	823	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 01:03:50 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: ZJK0csNTTPw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-1-v073-091b9c8ef.edge-usw2.demdex.com 9 ms set-cookie: demdex=69435900843589813592737304669655959158; Max-Age=15552000; Expires=Sat, 25 Oct 2025 01:03:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2025-04-28 01:03:50 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 38 37 35 32 30 35 38 39 35 30 38 38 38 32 34 30 30 32 36 39 31 31 34 39 38 35 34 39 36 36 35 30 39 34 33 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69875205895088824002691149854966509433","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:50 UTC	685	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:50 UTC	1498	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Mon, 28 Apr 2025 01:03:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: 7d32fce7-b4c3-4be2-8cb8-ad462f0031b3 Set-Cookie: XANDR_PANID=N5vsKkSCv7vt-MHpKBotdOa9TwuK6LA8yaJI24p6O-HJ2R1b5-3xpj6-Sucfwpx8mnmOuE-upeZcggvC1XDYkNdtdm7ZZ1_vLRNTHcM2xvk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 27-Jul-2025 01:03:50 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 27-Jul-2025 01:03:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4155444032255463320; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 27-Jul-2025 01:03:50 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 173.244.56.186; 173.244.56.186; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; *.adnxs.com

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	531	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69875205895088824002691149854966509433&ts=1745802227840 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:51 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Mon, 28 Apr 2025 01:03:51 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2025-04-28 01:03:51 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	693	OUT	GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:51 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1346, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 28 Apr 2025 01:03:51 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	686	OUT	GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1745802227278 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:51 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1346, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 28 Apr 2025 01:03:51 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	902	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=N5vsKkSCv7vt-MHpKBotdOa9TwuK6LA8yaJI24p6O-HJ2R1b5-3xpj6-Sucfwpx8mnmOuE-upeZcggvC1XDYkNdtdm7ZZ1_vLRNTHcM2xvk.; receive-cookie-deprecation=1; uuid2=4155444032255463320
2025-04-28 01:03:51 UTC	1431	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 28 Apr 2025 01:03:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dpm.demdex.net/ibs:dpid=358&dpuuid=4155444032255463320 AN-X-Request-Uuid: 17e78fcd-5383-4bb9-a074-9fc35e3fdea7 Set-Cookie: XANDR_PANID=N5vsKkSCv7vt-MHpKBotdOa9TwuK6LA8yaJI24p6O-HJ2R1b5-3xpj6-Sucfwpx8mnmOuE-upeZcggvC1XDYkNdtdm7ZZ1_vLRNTHcM2xvk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 27-Jul-2025 01:03:51 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 27-Jul-2025 01:03:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4155444032255463320; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 27-Jul-2025 01:03:51 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 173.244.56.186; 173.244.56.186; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; *.adnxs.com

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	678	OUT	GET /365868.gif?partner_uid=69435900843589813592737304669655959158 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:51 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNjk0MzU5MDA4NDM1ODk4MTM1OTI3MzczMDQ2Njk2NTU5NTkxNTgQABoNCPenu8AGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=zG18O16pCJsWsM5CoCwXy3RdXlK/pyXNZVFENNvjIU8=; Path=/; Domain=rlcdn.com; Expires=Tue, 28 Apr 2026 01:03:51 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 27 Jun 2025 01:03:51 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 28 Apr 2025 01:03:51 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	838	OUT	GET /pagead/viewthroughconversion/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Ftry&data=ecomm_pagetype%3Dother HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIq97OAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:52 UTC	956	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Apr 2025 01:03:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Ftry&data=ecomm_pagetype%3Dother&is_vtc=1&cid=CAQSGwDZpuyzVUItdEnjkbT1lyhJkKfgO7ADBSbfuQ&random=213545669 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 28-Apr-2025 01:18:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-28 01:03:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	644	OUT	GET /i18n/pixel/static/main.MWYwYWI1NGQ2MA.js HTTP/1.1 Host: analytics.tiktok.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ttp=2wKtjYRrsxgV6AqD9GQtbKpu1Om
2025-04-28 01:03:52 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/javascript; charset=UTF-8 Cache-Control: public, max-age=31536000, immutable X-Tt-Logid: 202504221413555D77F931D6C999F79256 x-tt-trace-host: 016dd784a785d50ef7ce1cfaa5332a239ebc2745171c2289f54a3f098c6ca3d9096a4fb4411d519e26cc7e3bc643c9d9a527fe6968ce07a43e49fc0779ae0461b66efebfac0b1ff26313f965033ba830aa0257f909a9f407a3465c0523544923ff x-tt-trace-id: 00-2504221413555D77F931D6C999F79256-54180E6B10572F6F-00 Date: Mon, 28 Apr 2025 01:03:52 GMT Transfer-Encoding: chunked X-Cache: TCP_MEM_HIT from a23-220-165-197.deploy.akamaitechnologies.com (AkamaiGHost/22.1.0-4f1ef2e9a8e1a0c8be2b8a74a525c274) (-) Connection: close Connection: Transfer-Encoding x-tt-trace-tag: id=16;cdn-cache=hit;type=static Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0 Server-Timing: inner; dur=3 X-Akamai-Request-ID: 51b8b904
2025-04-28 01:03:52 UTC	15492	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 76 61 72 20 65 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 69 3d 6f 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 61 3d 6f 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 63 3d 6f 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 3b 66 75 Data Ascii: 00004000!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";fu
2025-04-28 01:03:52 UTC	904	IN	Data Raw: 2c 65 2c 61 2c 63 29 7d 29 29 3a 74 2e 72 65 73 6f 6c 76 65 28 66 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 76 61 6c 75 65 3d 65 2c 61 28 75 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 22 74 68 72 6f 77 22 2c 65 2c 61 2c 63 29 7d 29 29 7d 63 28 73 2e 61 72 67 29 7d 76 61 72 20 69 3b 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 6e 28 65 2c 72 2c 74 2c 69 29 7d 29 29 7d 72 65 74 75 72 6e 20 69 3d 69 3f 69 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 69 74 65 72 61 74 6f Data Ascii: ,e,a,c)})):t.resolve(f).then((function(e){u.value=e,a(u)}),(function(e){return n("throw",e,a,c)}))}c(s.arg)}var i;this._invoke=function(e,r){function o(){return new t((function(t,i){n(e,r,t,i)}))}return i=i?i.then(o,o):o()}}function b(e,t){var n=e.iterato
2025-04-28 01:03:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 3d 5b 7b 74 72 79 4c 6f 63 3a 22 72 6f 6f 74 22 7d 5d 2c 65 2e 66 6f 72 45 61 63 68 28 77 2c 74 68 69 73 29 2c 74 68 69 73 2e 72 65 73 65 74 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 Data Ascii: 00004000]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function I(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function T(e){this.tryEntries=[{tryLoc:"root"}],e.forEach(w,this),this.reset(!0)}function O(e
2025-04-28 01:03:52 UTC	12	IN	Data Raw: 70 2e 64 65 6c 65 74 65 28 65 0d 0a Data Ascii: p.delete(e
2025-04-28 01:03:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 61 70 2e 63 6c 65 61 72 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 61 70 2e 6b 65 79 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 61 70 2e 76 61 6c 75 65 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 61 70 2e 65 6e 74 72 69 65 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d Data Ascii: 00004000)},e.prototype.clear=function(){this._map.clear()},e.prototype.keys=function(){return this._map.keys()},e.prototype.values=function(){return this._map.values()},e.prototype.entries=function(){return this._map.entries()},e.prototype["@@iterator"]
2025-04-28 01:03:52 UTC	12	IN	Data Raw: 6e 64 6f 77 2e 54 69 6b 74 6f 0d 0a Data Ascii: ndow.Tikto
2025-04-28 01:03:52 UTC	9230	IN	Data Raw: 30 30 30 30 32 34 30 32 0d 0a 6b 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 20 7c 7c 20 22 74 74 71 22 5d 2e 5f 74 74 71 5f 6d 61 70 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 68 69 6c 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 65 28 74 2c 74 68 69 73 2e 70 61 72 65 6e 74 43 6f 6e 74 65 78 74 2c 74 68 69 73 2c 6e 2c 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 52 65 71 75 65 73 74 73 2e 70 75 73 68 28 69 29 2c 69 7d 2c 65 7d 28 29 3b 53 65 2e 52 65 71 75 65 73 74 3d 52 65 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 56 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 56 2e 67 65 74 Data Ascii: 00002402kAnalyticsObject \|\| "ttq"]._ttq_map:null}return e.prototype.addChildRequest=function(t,n,r){var i=new e(t,this.parentContext,this,n,r);return this.childRequests.push(i),i},e}();Se.Request=Re,Object.defineProperty(V,"__esModule",{value:!0}),V.get
2025-04-28 01:03:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 2e 42 69 6e 64 69 6e 67 4f 6e 53 79 6e 74 61 78 3d 76 6f 69 64 20 30 3b 76 61 72 20 6d 74 3d 75 74 2c 45 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 68 69 73 2e 5f 62 69 6e 64 69 6e 67 3d 65 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 41 63 74 69 76 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 62 69 6e 64 69 6e 67 2e 6f 6e 41 63 74 69 76 61 74 69 6f 6e 3d 65 2c 6e 65 77 20 6d 74 2e 42 69 6e 64 69 6e 67 57 68 65 6e 53 79 6e 74 61 78 28 74 68 69 73 2e 5f 62 69 6e 64 69 6e 67 29 7d 2c 65 7d 28 29 3b 73 74 2e 42 69 6e 64 69 6e 67 4f 6e 53 79 6e 74 61 78 3d 45 74 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: 00004000t.BindingOnSyntax=void 0;var mt=ut,Et=function(){function e(e){this._binding=e}return e.prototype.onActivation=function(e){return this._binding.onActivation=e,new mt.BindingWhenSyntax(this._binding)},e}();st.BindingOnSyntax=Et,Object.definePrope
2025-04-28 01:03:52 UTC	12	IN	Data Raw: 50 41 52 41 4d 5f 54 59 50 45 0d 0a Data Ascii: PARAM_TYPE
2025-04-28 01:03:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 53 2c 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 75 6e 2e 44 55 50 4c 49 43 41 54 45 44 5f 49 4e 4a 45 43 54 41 42 4c 45 5f 44 45 43 4f 52 41 54 4f 52 29 3b 76 61 72 20 74 3d 52 65 66 6c 65 63 74 2e 74 74 71 5f 67 65 74 4d 65 74 61 64 61 74 61 28 6c 6e 2e 44 45 53 49 47 4e 5f 50 41 52 41 4d 5f 54 59 50 45 53 2c 65 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 52 65 66 6c 65 63 74 2e 74 74 71 5f 64 65 66 69 6e 65 4d 65 74 61 64 61 74 61 28 6c 6e 2e 50 41 52 41 4d 5f 54 59 50 45 53 2c 74 2c 65 29 2c 65 7d 7d 3b 76 61 72 20 66 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 66 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 6e 2e 74 61 67 67 65 64 3d 76 Data Ascii: 00004000S,e))throw new Error(un.DUPLICATED_INJECTABLE_DECORATOR);var t=Reflect.ttq_getMetadata(ln.DESIGN_PARAM_TYPES,e)\|\|[];return Reflect.ttq_defineMetadata(ln.PARAM_TYPES,t,e),e}};var fn={};Object.defineProperty(fn,"__esModule",{value:!0}),fn.tagged=v

Timestamp	Bytes transferred	Direction	Data
2025-04-28 01:03:51 UTC	646	OUT	GET /collect/?pid=7850&fmt=gif HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 01:03:52 UTC	984	IN	HTTP/1.1 302 Found Location: /collect/?pid=7850&fmt=gif&cookiesTest=true Set-Cookie: li_sugr=401b81ed-78a8-40a5-a78b-a218f4c20125; Max-Age=7776000; Expires=Sun, 27 Jul 2025 01:03:52 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: bcookie="v=2&97290843-e4fb-4ad9-8d6b-ce54fc75e5ce"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 28-Apr-2026 01:03:52 GMT; SameSite=None Set-Cookie: lidc="b=OGST01:s=O:r=O:a=O:p=O:g=3593:u=1:x=1:i=1745802232:t=1745888632:v=2:sig=AQFCLVwRZRSdvGkEodRkhjZptl_T3SGc"; Expires=Tue, 29 Apr 2025 01:03:52 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure LinkedIn-Action: 1 X-Li-Fabric: prod-lor1 X-Li-Source-Fabric: prod-ltx1 X-Li-Pop: afd-prod-ltx1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYzzEHj5SsCti9BVuHNgw== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E5F3B4353E574DFFB2ACD6C737607660 Ref B: PHX31EDGE0618 Ref C: 2025-04-28T01:03:52Z Date: Mon, 28 Apr 2025 01:03:51 GMT Connection: close Content-Length: 0