Edit tour

Windows Analysis Report
ORA _ Morningstar DBRS.html

Overview

General Information

Sample name:	ORA _ Morningstar DBRS.html
Analysis ID:	1525209
MD5:	34ac2b1689ae0d34c67544106a16e586
SHA1:	a9638e240c7b214b85eba38445c3224a7a54f5db
SHA256:	f7771ac212e5a21810ff6d73bcee4e753a56ebbeefa30bdd0eb332dd4ce295a4
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML Script injector detected

Suspicious Javascript code found in HTML file

Connects to many different domains

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Javascript checks online IP of machine

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\ORA _ Morningstar DBRS.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5484 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS

LLM: Score: 7 Reasons: The brand 'Google' is well-known and its legitimate domain is 'google.com'., The provided URL 'x.com' does not match the legitimate domain for Google., The URL 'x.com' is very short and does not contain any reference to Google, which is suspicious., The presence of input fields requesting sensitive information like 'Phone' on a non-Google domain increases the risk of phishing. DOM: 181.30.pages.csv

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/ORA%20_%20Morningstar%20DBRS.html	HTTP Parser: New script, src: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: file:///C:/Users/user/Desktop/ORA%20_%20Morningstar%20DBRS.html	HTTP Parser: New script, src: http://cdn.pardot.com/pd.js
Source: file:///C:/Users/user/Desktop/ORA%20_%20Morningstar%20DBRS.html	HTTP Parser: New script, src: http://cdn.pardot.com/pd.js

Suspicious Javascript code found in HTML file

Source: ORA _ Morningstar DBRS.html	HTTP Parser: .location
Source: ORA _ Morningstar DBRS.html	HTTP Parser: .location

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_336611_244951&as=2YhlMmsuhlYc44%2FKN%2Bb68w&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_336591_645364&as=2YhlMmsuhlYc44%2FKN%2Bb68w&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1727989335368&r_id=AAYjl5SrP9d0559XWbA3GA%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=78f2de142063fef1393805fece04c540c524f718fcd23a10b77bc3192006e3ae
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1727989338918&r_id=AAYjl5SrP9d0559XWbA3GA==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1727989335368&r_id=AAYjl5SrP9d0559XWbA3GA%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=78f2de142063fef1393805fece04c540c524f718fcd23a10b77bc3192006e3ae
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1988473458&timestamp=1727989350369
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1988473458&timestamp=1727989350369
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Number of links: 0
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: Number of links: 0

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: Title: Sign In - Google Accounts does not match URL

Source: https://cdn.cookielaw.org/consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/OtAutoBlock.js

HTTP Parser: !function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.tag===f){g=d;break}var l=void 0,k=d.tag;var c=(k=-1!==k.indexof("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexof("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexof(c)||-1!==d.tag.indexof(f))){g=d;break}}return g}(a);return e.categoryid&&(c=e.categoryid),e.vendor&&(b=e.vendor.split(":")),!e.tag&&d&&(b=c=function(f){var g=[],h=function(d){var l=document.createelement("a");return l.href=d,-1!==(d=l.hostname.split(".")).indexof("www")||2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["c0004"]);return g}(a)),{categoryids:c,vscatids:b}}function w(a){return!a||!a.length||(a&&window.optanonactivegroups?a.every(function(c){return-1!==window.optanonactivegroups.indexof(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.onetrust&&b.onetrust.isvendorserviceenabled;b=e&&b.onetrust.isvendorserviceenabled();return"categories"===r...

Source: https://www.facebook.com/morningstardbrs	HTTP Parser: <input type="password" .../> found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: <input type="password" .../> found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: <input type="password" .../> found

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No favicon
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: No favicon
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: No favicon

Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: No <meta name="author".. found
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/morningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQG7AbJTyZzdwAAAAZJT3E7A0Sol_U3YuV9gGfTXNuraTd-ggKtaz6mJdJpXwSCbGKKntT0aIZ-99LRtV4KrRLWcBn3axVKok_EQ5QAWYez5RhFwx4rwtGbjq0TE-oW32vp0c5I=&original_referer=&sessionRedirect=https%3A%2F%2Flinkedin.com%2Fcompany%2Fmorningstardbrs	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com%26auto_select%3Dtrue%26ux_mode%3Dpopup%26ui_mode%3Dcard%26context%3Dsignin%26as%3D2YhlMmsuhlYc44%2FKN%252Bb68w%26channel_id%3Dec489bb7ebd5c413592cc1cd5594837a8bd4bdb37f274cb9fc9311d208e72369%26origin%3Dhttps%3A%2F%2Fwww.linkedin.com&faa=1&ifkv=ARpgrqed_A-zVXw4M6lLQABYgDKz3abAPscU0GWhirBlR83qoIKO-YgZQJJbAKVX-1oUhwqmhKNK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1727983815058321&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49923 version: TLS 1.2

Source: unknown

Network traffic detected: DNS query count 44

Source: global traffic

UDP traffic: 192.168.2.7:61651 -> 74.125.250.129:19302

Source: global traffic

TCP traffic: 192.168.2.7:49853 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: twitter.com to https://x.com/morningstardbrs

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json

Source: Joe Sandbox View	IP Address: 18.245.67.101 18.245.67.101
Source: Joe Sandbox View	IP Address: 151.101.130.133 151.101.130.133
Source: Joe Sandbox View	IP Address: 152.199.21.118 152.199.21.118
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 1988Connection: keep-aliveDate: Thu, 18 Jul 2024 23:31:15 GMTLast-Modified: Thu, 18 Jul 2024 05:30:01 GMTETag: "15f4-gzip"Accept-Ranges: bytesCache-Control: max-age=63072000Expires: Sat, 18 Jul 2026 23:31:15 GMTContent-Encoding: gzipX-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5Vary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P1X-Amz-Cf-Id: fY3PZNYaWZC1oSGR7OkboEwuJXmU-W-HPnGByK6-CXDp80Wc45VRUw==Age: 6638269Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 58 6d 6f db 38 12 fe bc fd 15 0a 3f b8 d2 4a 71 e3 b6 c0 01 f6 f2 82 d4 2d f6 72 e8 b6 c1 36 d9 2f 41 60 30 d2 d8 66 2c 93 3a 8a 72 6a c4 fe ef 37 24 f5 6a 3b 76 01 03 96 c8 99 87 f3 ce 19 bd fb fd ec cd 6f 7f 31 b5 00 cd c5 cc 1b a7 b2 48 bc ab 38 96 85 d0 de 17 31 63 33 58 82 d0 6f f3 d6 8b 77 ab 58 bc 00 e5 fd 97 ad 58 1e 2b 9e 69 ef dc 7b 7f f1 fe c3 f9 c5 c7 f3 c1 07 6f 30 18 be ff 38 fc f8 af 37 bf 5d 4f bd b5 2c de 2a f0 98 f0 58 e2 3d a6 d2 70 46 ee c1 d3 73 f0 ee fe be f6 a4 48 d7 7d ef b3 14 6f 75 6b 27 91 4b c6 45 ff cd ef ef de 4c 0b 11 6b 2e 85 17 cf 21 5e 7c 63 4b c8 33 16 83 0f c1 cb 54 2a 7f c5 94 a7 29 f4 f3 2c e5 da 27 7d 12 44 8a 3e 73 91 c8 e7 88 d3 8b 11 ff 43 f7 53 10 33 3d 1f f1 30 0c 5e 0c 3d a3 fa 9e 3f 8c d4 3d 7b d8 6c 7c f3 47 5f b6 86 cf 3c 6e b7 f5 89 33 d0 37 4c 25 52 df a9 d4 77 ac 40 49 c6 fb 99 5d ed c7 72 49 46 0a 74 a1 04 c9 b5 42 2b 12 4a f5 3a 03 39 f5 32 fe 1f 99 6b 81 e2 f6 7a 3e d0 e6 35 88 7c 32 d7 3a cb 87 48 9c c8 b8 30 76 ed a3 e6 cc 9c d9 cf 94 d4 32 96 e9 65 49 f4 ee 1d 19 da 47 f3 14 84 d0 48 97 f1 d2 19 c6 14 7c ea ef d8 c7 c8 a9 1d 01 da a4 79 e9 af 78 ce b5 54 13 9e a0 54 7f 82 1e 4b b9 e0 48 df ac 93 d0 cf f8 d5 75 72 3e 80 0f c1 2b bc 93 9c cf c4 2f 01 84 e4 7c ce f2 79 57 88 8c 4f 64 a6 27 7c 07 a2 5e de 11 81 4c 59 9a 03 39 a3 87 20 36 9b 95 e4 89 77 71 46 db db 9a eb 14 6d df 5a 11 52 f3 e9 7a 92 71 e7 4a ed 8e 46 0f a3 cd 34 9a b1 76 c6 dd df 5f 23 23 4a cc 96 19 43 35 8d 46 c1 48 14 69 7a 46 f5 65 0b b1 45 40 f5 90 14 22 81 29 17 90 a0 a0 75 18 8c af 93 5e 8f 58 d1 ed a3 83 b1 2f af 41 d9 cd e1 2b 9b 86 bf 6d 49 e6 32 d6 f1 a1 c5 a2 5d 1b 34 41 66 5f a3 c3 62 de 48 2e 74 8e b1 da b5 70 66 97 69 b5 df f1 61 a1 52 5a 5b 1e 2e 61 d8 31 60 8b 50 c1 14 94 02 d5 48 52 ad 44 46 9b 8e db aa 9d ae 24 35 c2 51 97 55 54 a4 1b b4 2d e6 bd b5 91 89 84 13 b0 68 06 96 b4 63 40 ed Data Ascii: Xmo8?Jq-r6/A`0f,:rj7$j;vo1H81c3XowXX+i{o087]O,X=pFsH}ouk'KELk.!^\|cK3T),'}D>sCS3=0^=?={l\|G_<n37L%Rw@I]rIFtB+J:92kz>5\|2:H0v2eIGH\|yxTTKHur>+/\|yWOd'\|^LY9 6wqFmZRzqJF4v
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 03 Oct 2024 19:29:05 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 555Connection: keep-aliveset-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidatepragma: no-cachex-pardot-rsp: 0/0/1p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"set-cookie: visitor_id405542=1088104215; expires=Sun, 12-Jul-2026 19:29:05 GMT; Max-Age=55900800; path=/; domain=.pardot.comset-cookie: visitor_id405542-hash=ac323f8b2e0684d096c513d942a2b1ef3f861e9ad832764e0dd35d5b1d36315345d84c000fd389fee8b8501b32cd64914f1f7057; expires=Sun, 12-Jul-2026 19:29:05 GMT; Max-Age=55900800; path=/; domain=.pardot.comset-cookie: lpv405542=ZmlsZTovLy9DOi9Vc2Vycy9mcm9udGRlc2svRGVza3RvcC9PUkElMjBfJTIwTW9ybmluZ3N0YXIlMjBEQlJTLmh0bWw%3D; expires=Thu, 03-Oct-2024 19:59:05 GMT; Max-Age=1800; path=/vary: Accept-Encoding,User-Agentcontent-encoding: gzipX-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 54 4d 8f da 30 14 3c c3 af 70 73 80 20 ba c1 f9 24 14 45 95 4a 7b d8 cb 56 da 6d 4f 08 21 c7 7e 01 2f 89 1d d9 66 b5 a8 db ff Data Ascii: TM0<ps $EJ{VmO!~/f
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 03 Oct 2024 19:29:06 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 556Connection: keep-aliveset-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidatepragma: no-cachex-pardot-rsp: 0/0/1p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"set-cookie: visitor_id405542=1088104221; expires=Sun, 12-Jul-2026 19:29:06 GMT; Max-Age=55900800; path=/; domain=.pardot.comset-cookie: visitor_id405542-hash=08b1fe8ca397224f12e0e2835b60efe0175781c3c7988f8a626b5c4892fe40f98e62754d0bbc70b408ae00e47a172654d1fc0b74; expires=Sun, 12-Jul-2026 19:29:06 GMT; Max-Age=55900800; path=/; domain=.pardot.comset-cookie: lpv405542=ZmlsZTovLy9DOi9Vc2Vycy9mcm9udGRlc2svRGVza3RvcC9PUkElMjBfJTIwTW9ybmluZ3N0YXIlMjBEQlJTLmh0bWw%3D; expires=Thu, 03-Oct-2024 19:59:06 GMT; Max-Age=1800; path=/vary: Accept-Encoding,User-Agentcontent-encoding: gzipX-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 54 4d 8f da 30 14 3c c3 af 70 73 80 20 ba c1 09 81 98 a2 a8 52 69 0f 7b d9 4a bb ed 09 21 e4 38 2f e0 25 b1 23 db a0 45 dd fe Data Ascii: TM0<ps Ri{J!8/%#E
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 1988Connection: keep-aliveDate: Wed, 20 Mar 2024 22:39:09 GMTLast-Modified: Wed, 20 Mar 2024 18:02:01 GMTETag: "15f4-gzip"Accept-Ranges: bytesCache-Control: max-age=63072000Expires: Fri, 20 Mar 2026 22:39:09 GMTContent-Encoding: gzipX-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5Vary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 adb83a3a3628f104e6d1d9d74c07d92c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: CDG52-P2X-Amz-Cf-Id: gm1krnFUpZHZYXRTk9PkjlFxsvwMNlpLWCJfIrEsgkkEQHJA0JmcKg==Age: 17009397Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 58 6d 6f db 38 12 fe bc fd 15 0a 3f b8 d2 4a 71 e3 b6 c0 01 f6 f2 82 d4 2d f6 72 e8 b6 c1 36 d9 2f 41 60 30 d2 d8 66 2c 93 3a 8a 72 6a c4 fe ef 37 24 f5 6a 3b 76 01 03 96 c8 99 87 f3 ce 19 bd fb fd ec cd 6f 7f 31 b5 00 cd c5 cc 1b a7 b2 48 bc ab 38 96 85 d0 de 17 31 63 33 58 82 d0 6f f3 d6 8b 77 ab 58 bc 00 e5 fd 97 ad 58 1e 2b 9e 69 ef dc 7b 7f f1 fe c3 f9 c5 c7 f3 c1 07 6f 30 18 be ff 38 fc f8 af 37 bf 5d 4f bd b5 2c de 2a f0 98 f0 58 e2 3d a6 d2 70 46 ee c1 d3 73 f0 ee fe be f6 a4 48 d7 7d ef b3 14 6f 75 6b 27 91 4b c6 45 ff cd ef ef de 4c 0b 11 6b 2e 85 17 cf 21 5e 7c 63 4b c8 33 16 83 0f c1 cb 54 2a 7f c5 94 a7 29 f4 f3 2c e5 da 27 7d 12 44 8a 3e 73 91 c8 e7 88 d3 8b 11 ff 43 f7 53 10 33 3d 1f f1 30 0c 5e 0c 3d a3 fa 9e 3f 8c d4 3d 7b d8 6c 7c f3 47 5f b6 86 cf 3c 6e b7 f5 89 33 d0 37 4c 25 52 df a9 d4 77 ac 40 49 c6 fb 99 5d ed c7 72 49 46 0a 74 a1 04 c9 b5 42 2b 12 4a f5 3a 03 39 f5 32 fe 1f 99 6b 81 e2 f6 7a 3e d0 e6 35 88 7c 32 d7 3a cb 87 48 9c c8 b8 30 76 ed a3 e6 cc 9c d9 cf 94 d4 32 96 e9 65 49 f4 ee 1d 19 da 47 f3 14 84 d0 48 97 f1 d2 19 c6 14 7c ea ef d8 c7 c8 a9 1d 01 da a4 79 e9 af 78 ce b5 54 13 9e a0 54 7f 82 1e 4b b9 e0 48 df ac 93 d0 cf f8 d5 75 72 3e 80 0f c1 2b bc 93 9c cf c4 2f 01 84 e4 7c ce f2 79 57 88 8c 4f 64 a6 27 7c 07 a2 5e de 11 81 4c 59 9a 03 39 a3 87 20 36 9b 95 e4 89 77 71 46 db db 9a eb 14 6d df 5a 11 52 f3 e9 7a 92 71 e7 4a ed 8e 46 0f a3 cd 34 9a b1 76 c6 dd df 5f 23 23 4a cc 96 19 43 35 8d 46 c1 48 14 69 7a 46 f5 65 0b b1 45 40 f5 90 14 22 81 29 17 90 a0 a0 75 18 8c af 93 5e 8f 58 d1 ed a3 83 b1 2f af 41 d9 cd e1 2b 9b 86 bf 6d 49 e6 32 d6 f1 a1 c5 a2 5d 1b 34 41 66 5f a3 c3 62 de 48 2e 74 8e b1 da b5 70 66 97 69 b5 df f1 61 a1 52 5a 5b 1e 2e 61 d8 31 60 8b 50 c1 14 94 02 d5 48 52 ad 44 46 9b 8e db aa 9d ae 24 35 c2 51 97 55 54 a4 1b b4 2d e6 bd b5 91 89 84 13 b0 68 06 96 b4 63 40 Data Ascii: Xmo8?Jq-r6/A`0f,:rj7$j;vo1H81c3XowXX+i{o087]O,X=pFsH}ouk'KELk.!^\|cK3T),'}D>sCS3=0^=?={l\|G_<n37L%Rw@I]rIFtB+J:92kz>5\|2:H0v2eIGH\|yxTTKHur>+/\|yWOd'\|^LY9 6wqFmZRzqJF4v_

Source: global traffic	HTTP traffic detected: GET /player/v/8.7.3/jwplayer.js HTTP/1.1Host: ssl.p.jwpcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /player/v/8.7.3/jwplayer.js HTTP/1.1Host: ssl.p.jwpcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TAa4UAAdTndGhAw&MD=XWggzKGg HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /company/accessibility HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/d3634a4.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/26989390140.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/d81c7c0.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/aecbc47.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/ebfb305.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/0176171.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/42a1252.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/d3634a4.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/4d3d6a7.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/b44b7288-723c-44e2-ab4f-97f253fa98bd-test.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/26989390140.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/b44b7288-723c-44e2-ab4f-97f253fa98bd-test.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/ee80a74.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/0c98785.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/13c6834.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/d1f5709.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/3b5a7b6a-e026-4ee8-b80f-6aa5e44b2977.c576c22.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/5a67b0ed-239e-4f3e-adeb-8b1e517a5bd3.fe0d23d.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/600bda4e-11fe-4903-9a39-bb6b77389170.feb8ea2.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/a55d5255-e095-4e87-ac0d-fe0968b0a9c6.e436ea8.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/13c6834.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/9a73c42.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/678c235.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/f61f631.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/0c98785.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/9f5123e.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/d1f5709.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/115183e.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/f9c3797f-895f-42e2-9e83-9340081311d6.cb28983.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/f61f631.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/9df5f782-d089-4356-8fc5-8f4a338019c8.94aed76.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/21ca819a-38ec-4f58-92d9-107d0f271416.a92696e.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/f8abf68e-0fda-4e20-ab06-995b353028ee.1d4b0b7.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/9a73c42.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/678c235.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/656bb203-0436-41f9-8266-de61f5c29096.df2e506.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/fonts/632eeeb1-e81b-472c-87cc-6ec84f44c7b2.7ee1104.woff HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/9f5123e.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/1ea81e5.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/115183e.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/img/morningstar-70px.a5fdd52.svg HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/cs-images/v3/assets/blt9415ea4cc4157833/blt104874df63213326/648b466c0b7fca234962d7c2/morningstar-logo-white.svg HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/js/gtm.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/f86a69e.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/1ea81e5.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/js/chartbeat.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/img/morningstar-70px.a5fdd52.svg HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/js/spam-protection-eloqua.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chartbeat_mab.js HTTP/1.1Host: static.chartbeat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/cs-images/v3/assets/blt9415ea4cc4157833/blt104874df63213326/648b466c0b7fca234962d7c2/morningstar-logo-white.svg HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/js/gtm.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/img/mdc.05b2cf0.svg HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/01924444-c8b4-7b39-bd23-b97c01b4f82b/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/js/chartbeat.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chartbeat_mab.js HTTP/1.1Host: static.chartbeat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/0be1a28.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/js/spam-protection-eloqua.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/img/mdc.05b2cf0.svg HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/01924444-c8b4-7b39-bd23-b97c01b4f82b/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /company/accessibility HTTP/1.1Host: www.morningstar.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A24+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2FaccessibilityIf-None-Match: "1f0c9-LnmbfL/9Uxujg6Y/jZ++zZc8pqw"
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_company_logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_company_logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/d81c7c0.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A25+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0Range: bytes=294912-294912If-Range: "d8b5eacd29365884ec2590c3256f5ddb"
Source: global traffic	HTTP traffic detected: GET /js/26989390140.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e9817dc84cff08c7597b4a67b8019a7f"If-Modified-Since: Thu, 26 Sep 2024 21:05:12 GMT
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/ebfb305.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A25+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0Range: bytes=193178-193178If-Range: "dc8c6d8e2736132db161ca9602e72384"
Source: global traffic	HTTP traffic detected: GET /js/26989390140.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e9817dc84cff08c7597b4a67b8019a7f"If-Modified-Since: Thu, 26 Sep 2024 21:05:12 GMT
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/css/d81c7c0.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A25+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0Range: bytes=294912-345927If-Range: "d8b5eacd29365884ec2590c3256f5ddb"
Source: global traffic	HTTP traffic detected: GET /fr-ca/company/accessibility HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A25+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0
Source: global traffic	HTTP traffic detected: GET /content/assets/css/ebfb305.css HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A25+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0Range: bytes=193178-214575If-Range: "dc8c6d8e2736132db161ca9602e72384"
Source: global traffic	HTTP traffic detected: GET /js/26989390140.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/fr-ca/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e9817dc84cff08c7597b4a67b8019a7f"If-Modified-Since: Thu, 26 Sep 2024 21:05:12 GMT
Source: global traffic	HTTP traffic detected: GET /mc/morningstar-design-system/2.1.0/fonts/600bda4e-11fe-4903-9a39-bb6b77389170.woff HTTP/1.1Host: mwc-cdn.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/img/morningstar-50px.5a8b816.svg HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/fr-ca/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.morningstar.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.morningstar.com/fr-ca/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/0be1a28.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A27+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0Range: bytes=75329-75329If-Range: "4ece4758bf37d67e581cbbd05954e9d9"
Source: global traffic	HTTP traffic detected: GET /content/assets/img/mds.3ec6f34.svg HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://www.morningstar.com/fr-ca/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A30+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0
Source: global traffic	HTTP traffic detected: GET /content/assets/0be1a28.js HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.morningstar.com/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A27+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.morningstar.com%2Fcompany%2Faccessibility&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0Range: bytes=75329-97515If-Range: "4ece4758bf37d67e581cbbd05954e9d9"
Source: global traffic	HTTP traffic detected: GET /js/26989390140.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e9817dc84cff08c7597b4a67b8019a7f"If-Modified-Since: Thu, 26 Sep 2024 21:05:12 GMT
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /corporate/marketing/fonts/600bda4e-11fe-4903-9a39-bb6b77389170.woff HTTP/1.1Host: video.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/img/morningstar-50px.5a8b816.svg HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A33+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /content/assets/img/mds.3ec6f34.svg HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A33+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/img/favicon.ico HTTP/1.1Host: www.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.morningstar.com/fr-ca/company/accessibilityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A33+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /corporate/marketing/fonts/600bda4e-11fe-4903-9a39-bb6b77389170.woff HTTP/1.1Host: video.morningstar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.morningstar.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.morningstar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/assets/0be1a28.js HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A33+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /content/assets/raw/img/favicon.ico HTTP/1.1Host: www.morningstar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+03+2024+15%3A29%3A33+GMT-0400+(Eastern+Daylight+Time)&version=202409.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0004%3A0%2CC0003%3A0%2CC0001%3A1%2CC0002%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /morningstardbrs HTTP/1.1Host: facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /morningstardbrs HTTP/1.1Host: www.facebook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yR/l/0,cross/-rbgnc5iS3yVWgg-YkpZuD.css HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y-/r/C2nfdIck3tZ.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3icWR4/yF/l/en_GB/QuRweJ09WhwcFM497l2EmPdNTQDzvldaWYT7n1sgH1lvgzWUsT3tt8dwbNi_gkVbIeDYvatkvPhoO2laiNSVLD9dTaCZfJkUUizCAMTEtK_gX60HD9f1e4NOJ05J9hlFW4JdGXm64pRSieN_JiGR1Rg9YzAh15ylU6MiaUNNplwE91K61Rdzuzi16ygUxs8hLIFx3Mau-LZbAjemuBYSMYpkKhgxhV_-BvmtDG8-aarB77Gpavf8-EC2dnkqolr9ui1CRf3qp55HfXW__mMzi95_wmB-512pEQn4HVER6bYupQ0yi8wH.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3isGH4/y_/l/en_GB/QglGZPQuawM.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ikvm4/yB/l/en_GB/bE3GUXvOvSj.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3idBq4/yi/l/en_GB/0X_J5B3bWpY.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yL/r/Lytj7hSz5oF.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3idBq4/yi/l/en_GB/0X_J5B3bWpY.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3islD4/yt/l/en_GB/6PBZlFgwCBpD-A4NwJxdV9DWgNJlhkVgFlhkmfuF2oJ3ifvbVJ53oEaTXQFZf9zdTXwsk8rqKGhsd6TgkAsYj0WDEOWZEH93_TYwgvY5Im7kg6w7XkRzTdJ-OcxaRcaaK6W_syPEDVVRyCvDBZate7zICWtZYbAlsBlNJ.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i19e4/yG/l/en_GB/H0x5vUzY7O-.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yd/r/_at8rCNG77_.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ifnp4/y4/l/en_GB/bCZUAji8TvjVIXCfJyJpeXc6A3QEMXwN14uojPjcFa2Xewwd3r2e6xpm2L2mkQAWDrBlj8CJEJioxcRvR8DSvpTkR8OS880pBZlqhmkZN8mD_BDRedCVB1jcche8tBESRxOF6G_0LeVZpiD.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3icLI4/yA/l/en_GB/A6aUiKMNJgd.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iIdS4/y2/l/en_GB/nrztWMF1weE3yEHWL2OfixyYzNCS20pX2p4nMh4OS8IRJiucW2SavbSol1dA1B68PMfQyywdzwm6JAUzCfulZcjV2nUBekK0DyCjYKcpGXfS4ehaUJEsOKpEDGWQA3FFx8w89RMV0fymdJeZZVnk6hKaAGgjGuUw5DNdebYVSPEwPSwNMnOwfiBaqD5XFIJJ5uqTCESs82tgvNbwp.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i16O4/yW/l/en_GB/vBqJAb5a0V2.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iZJJ4/yb/l/en_GB/N7BJNurDwp0.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y8/r/rwBKEuy7-hU.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iMFF4/yt/l/en_GB/A8Lgl7A-fEI.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/326278803_1648646732236112_413277666307504556_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=110&ccb=1-7&_nc_sid=cc71e4&_nc_ohc=5JLYevpjHfUQ7kNvgHE803x&_nc_ht=scontent-msp1-1.xx&_nc_gid=ATJnVGNtylQFqasg0Vk4WBd&oh=00_AYDj8XQZyWe9EWSD6E2o9tGw3jeU1TiVFRIyUbtSeq1H5A&oe=6704B1DF HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/8k_Y-oVxbuU.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yT/r/Dc7-7AgwkwS.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/2PIcyqpptfD.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/326278803_1648646732236112_413277666307504556_n.jpg?_nc_cat=110&ccb=1-7&_nc_sid=cc71e4&_nc_ohc=5JLYevpjHfUQ7kNvgHE803x&_nc_ht=scontent-msp1-1.xx&_nc_gid=ATJnVGNtylQFqasg0Vk4WBd&oh=00_AYD8wbFPfmn2k_XzKJ6y4fUSlJ3D48sbybC5x7fpczREQg&oe=6704B1DF HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCqL3tj1S1BrB6TI76UOZ_qxgHtl2I_OgC1zGKkBglnxw&oe=67264DC0&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYAWdDXLoSHems8HfXuaI9UdKbwJuppPR46qeNwajxJdUQ&oe=67264A31&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYChr3oQQzOjoa0nTYsFEsBJSFMvYiGGzVqKi2SwkBciTA&oe=67264DA6&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDnsiMPrjHoFEe1eHFa1wq-KJiYXliKtJKPYoxJg6XCjw&oe=67266870&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYB0W1S0M5_G06YsOB1PLNGY2FxPVfzuJnXQgexhwklYQQ&oe=6726520B&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYCZm-zbVkJYY_GxJqWVujTG2TGDbat_t685cERCEg5xxQ&oe=67265E58&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/435716580_1292644204992501_7758285600960458346_n.jpg?stp=dst-jpg_s960x960&_nc_cat=108&ccb=1-7&_nc_sid=127cfc&_nc_ohc=E_R5GfhU5F4Q7kNvgGoBcfb&_nc_ht=scontent-msp1-1.xx&_nc_gid=AH74ogqrSPAl9hKhpfLpEB2&oh=00_AYAjAFRTxlpKNMoOzN-yeX4euKYkEb10N1hMrHWKJI8pPw&oe=6704BC17 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3io2S4/yt/l/en_GB/bsfApgAUpE7.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ij9m4/yG/l/en_GB/8HvRXKI8vmj.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3isGz4/yA/l/en_GB/K_dPDLjwRPX.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iZFn4/yV/l/en_GB/tI3_Q-GwvRfopwoDiq4buW6MCauFdveEHERz6pNGhHp8vz5mf-dl_pi.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yF/r/sIUfioK8p73.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yc/r/cGxo7_n9cky.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bootloader-endpoint/?modules=KeyframesRenderer%2CFBKeyframesLoggedSession%2CKeyframesAssetDecoder&__aaid=0&__user=0&__a=1&__req=8&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__hsi=7421633837391497971&__dyn=7xeUmwlEnwn8yEqxemh0no6u5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE462mcwfG12wOx61vw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewyw9G2SU4i5oe85nxS3W0GpovU11E5a3qazo3iwPwbS16xi4UdUcobUak0KU566E6C13G486S1iwGwRxW1owmU&__csr=guNcIjPEIDYy2kDltvqGyi5_FGV8KnyVucW_ypEVpWypGGip5F2oF2RGA6CEycAGlemuES4EyWRXBz8DmWzvm4FBAVFRyVprBBGFFWG9ACDxiXDyayonCyHKuczomzo0grg4G0kh02j80D-E5C0NE1Co0mGJ04pw49BjAjg0gsxS0zUx0JG0hO0s61yw2f81VU0hgo0T6ama603to0Bu04rOw2Kx2zEcA3gd3q4w0gxV40uFJzo0vto0mdg3fw4Qw1Rh02sE1xE18U1_3wxwDweV0238oxG0YC1Cwbq3qm05QEfk0cRwk8dooylp8kg4lwdt0sP02cUcohe3ytwqQE6W0EE9UcUcU6S0cxw23E2ty40Xh05-2iqa8AhrqhaF9cAmsGyBZiNu5MiNU1EU7Ry5wNToPwOOk2B0OCKag4y2ZO0wKi11xB11AwCxC2S1eAwtE8V86u0wV82vwyyE628AxdG6J1m5C6A7F8kc0GpU7S1eEMnx7yxw89411wwo7B0qU22od8syC6EdAFk44vy45U822ECy16fh8y1_OaEhwpzDyokojhk3hhkk6E3PwJyAHQ54b89wHwfS14wRwyokzSUZUco2CxjxF1y8Gfy-ng5y2W3-0a7wb1010q0JAEngqS1YxK1yoaA0pdw2rUlweO9l04Vwyw47w0Dkg6u0H-6d0xwnUmxQE1MgKEsxh0Q6No1lo2bg4S48Oiq0hu0uifwpo4K0xEaomyAi8wn8ao0j9wt84qdyk0icw7Saw2841tylo6y1pxucyUmG0ky0h23gg&__comet_req=15&__spin_r=1017027644&__spin_b=trunk&__spin_t=1727983783 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/morningstardbrsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/326278803_1648646732236112_413277666307504556_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=110&ccb=1-7&_nc_sid=cc71e4&_nc_ohc=5JLYevpjHfUQ7kNvgHE803x&_nc_ht=scontent-msp1-1.xx&_nc_gid=ATJnVGNtylQFqasg0Vk4WBd&oh=00_AYDj8XQZyWe9EWSD6E2o9tGw3jeU1TiVFRIyUbtSeq1H5A&oe=6704B1DF HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/326278803_1648646732236112_413277666307504556_n.jpg?_nc_cat=110&ccb=1-7&_nc_sid=cc71e4&_nc_ohc=5JLYevpjHfUQ7kNvgHE803x&_nc_ht=scontent-msp1-1.xx&_nc_gid=ATJnVGNtylQFqasg0Vk4WBd&oh=00_AYD8wbFPfmn2k_XzKJ6y4fUSlJ3D48sbybC5x7fpczREQg&oe=6704B1DF HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y-/r/C2nfdIck3tZ.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ikvm4/yB/l/en_GB/bE3GUXvOvSj.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TAa4UAAdTndGhAw&MD=XWggzKGg HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yL/r/Lytj7hSz5oF.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=1&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3isGH4/y_/l/en_GB/QglGZPQuawM.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=3&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i19e4/yG/l/en_GB/H0x5vUzY7O-.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=6&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3icWR4/yF/l/en_GB/QuRweJ09WhwcFM497l2EmPdNTQDzvldaWYT7n1sgH1lvgzWUsT3tt8dwbNi_gkVbIeDYvatkvPhoO2laiNSVLD9dTaCZfJkUUizCAMTEtK_gX60HD9f1e4NOJ05J9hlFW4JdGXm64pRSieN_JiGR1Rg9YzAh15ylU6MiaUNNplwE91K61Rdzuzi16ygUxs8hLIFx3Mau-LZbAjemuBYSMYpkKhgxhV_-BvmtDG8-aarB77Gpavf8-EC2dnkqolr9ui1CRf3qp55HfXW__mMzi95_wmB-512pEQn4HVER6bYupQ0yi8wH.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDQfFc5aorQ6EmFUJm0BgO1hvUzNbwfuw9GwvfFm0woHQ&oe=67264787&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCqL3tj1S1BrB6TI76UOZ_qxgHtl2I_OgC1zGKkBglnxw&oe=67264DC0&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYC3CpPOjTEK-Li8oNxNCHuXEnZC_-FA7FDKDaD9TcIWZQ&oe=67264DF0&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYC9_xARIsCtc4W1f-IUbaGfNVrclwOTzzmykCWlsq8emg&oe=67266AD7&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYAWdDXLoSHems8HfXuaI9UdKbwJuppPR46qeNwajxJdUQ&oe=67264A31&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYChr3oQQzOjoa0nTYsFEsBJSFMvYiGGzVqKi2SwkBciTA&oe=67264DA6&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYCZm-zbVkJYY_GxJqWVujTG2TGDbat_t685cERCEg5xxQ&oe=67265E58&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYB0W1S0M5_G06YsOB1PLNGY2FxPVfzuJnXQgexhwklYQQ&oe=6726520B&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bootloader-endpoint/?modules=KeyframesRenderer%2CFBKeyframesLoggedSession%2CKeyframesAssetDecoder&__aaid=0&__user=0&__a=1&__req=8&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__hsi=7421633837391497971&__dyn=7xeUmwlEnwn8yEqxemh0no6u5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE462mcwfG12wOx61vw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewyw9G2SU4i5oe85nxS3W0GpovU11E5a3qazo3iwPwbS16xi4UdUcobUak0KU566E6C13G486S1iwGwRxW1owmU&__csr=guNcIjPEIDYy2kDltvqGyi5_FGV8KnyVucW_ypEVpWypGGip5F2oF2RGA6CEycAGlemuES4EyWRXBz8DmWzvm4FBAVFRyVprBBGFFWG9ACDxiXDyayonCyHKuczomzo0grg4G0kh02j80D-E5C0NE1Co0mGJ04pw49BjAjg0gsxS0zUx0JG0hO0s61yw2f81VU0hgo0T6ama603to0Bu04rOw2Kx2zEcA3gd3q4w0gxV40uFJzo0vto0mdg3fw4Qw1Rh02sE1xE18U1_3wxwDweV0238oxG0YC1Cwbq3qm05QEfk0cRwk8dooylp8kg4lwdt0sP02cUcohe3ytwqQE6W0EE9UcUcU6S0cxw23E2ty40Xh05-2iqa8AhrqhaF9cAmsGyBZiNu5MiNU1EU7Ry5wNToPwOOk2B0OCKag4y2ZO0wKi11xB11AwCxC2S1eAwtE8V86u0wV82vwyyE628AxdG6J1m5C6A7F8kc0GpU7S1eEMnx7yxw89411wwo7B0qU22od8syC6EdAFk44vy45U822ECy16fh8y1_OaEhwpzDyokojhk3hhkk6E3PwJyAHQ54b89wHwfS14wRwyokzSUZUco2CxjxF1y8Gfy-ng5y2W3-0a7wb1010q0JAEngqS1YxK1yoaA0pdw2rUlweO9l04Vwyw47w0Dkg6u0H-6d0xwnUmxQE1MgKEsxh0Q6No1lo2bg4S48Oiq0hu0uifwpo4K0xEaomyAi8wn8ao0j9wt84qdyk0icw7Saw2841tylo6y1pxucyUmG0ky0h23gg&__comet_req=15&__spin_r=1017027644&__spin_b=trunk&__spin_t=1727983783 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iBAG4/yw/l/en_GB/fbI1vKnc9QM.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i0Wo4/yC/l/en_GB/nNL7PF1mRol.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDnsiMPrjHoFEe1eHFa1wq-KJiYXliKtJKPYoxJg6XCjw&oe=67266870&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iO7g4/yI/l/en_GB/T-w2A1SA5Ud.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ym/r/eR55woz94Gb.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/435716580_1292644204992501_7758285600960458346_n.jpg?stp=dst-jpg_s960x960&_nc_cat=108&ccb=1-7&_nc_sid=127cfc&_nc_ohc=E_R5GfhU5F4Q7kNvgGoBcfb&_nc_ht=scontent-msp1-1.xx&_nc_gid=AH74ogqrSPAl9hKhpfLpEB2&oh=00_AYAjAFRTxlpKNMoOzN-yeX4euKYkEb10N1hMrHWKJI8pPw&oe=6704BC17 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3islD4/yt/l/en_GB/6PBZlFgwCBpD-A4NwJxdV9DWgNJlhkVgFlhkmfuF2oJ3ifvbVJ53oEaTXQFZf9zdTXwsk8rqKGhsd6TgkAsYj0WDEOWZEH93_TYwgvY5Im7kg6w7XkRzTdJ-OcxaRcaaK6W_syPEDVVRyCvDBZate7zICWtZYbAlsBlNJ.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDQfFc5aorQ6EmFUJm0BgO1hvUzNbwfuw9GwvfFm0woHQ&oe=67264787&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYC3CpPOjTEK-Li8oNxNCHuXEnZC_-FA7FDKDaD9TcIWZQ&oe=67264DF0&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYC9_xARIsCtc4W1f-IUbaGfNVrclwOTzzmykCWlsq8emg&oe=67266AD7&_nc_sid=7da55a HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yd/r/_at8rCNG77_.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3icLI4/yA/l/en_GB/A6aUiKMNJgd.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i16O4/yW/l/en_GB/vBqJAb5a0V2.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=a&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; _js_datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/358356198_1132099187713671_280169182792921960_n.jpg?stp=cp0_dst-jpg_s40x40&_nc_cat=101&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=EnU4TCrg7KcQ7kNvgH3RbtA&_nc_ht=scontent-msp1-1.xx&_nc_gid=AH74ogqrSPAl9hKhpfLpEB2&oh=00_AYAdaPZNu7SE_o5KKRUbuO-RwummXNITB-fUih3NKQM_XQ&oe=6704C4A4 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/60968635_815007345559370_4237077948668051456_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=102&ccb=1-7&_nc_sid=5ed88f&_nc_ohc=AxU48Y4WgDUQ7kNvgHtiA4i&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYBNQG7oopNd7romcKxXKGDskwDO2BTxOXhLd03guu_RRA&oe=67264A48 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/46401499_1891826337591217_3532398171877539840_n.jpg?stp=dst-jpg_s160x160&_nc_cat=107&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=xjWFgjBu-H8Q7kNvgFb_tO_&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYAJ828vgEjLvSH-WA3R0etjrg7JA8G643VbAoer1xO3pw&oe=67265380 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/46416894_1891826417591209_9053329651631390720_n.jpg?stp=dst-jpg_s160x160&_nc_cat=110&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=E6JmjrXovdIQ7kNvgHoXKGm&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYCiZ3kizyD7MqSq7CFsSlOEp4zhYwubyyoPrKxD6PFn7A&oe=67266D93 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/170650873_3924055201019257_1963581669496579141_n.jpg?stp=c152.0.1217.1217a_dst-jpg_s160x160&_nc_cat=111&ccb=1-7&_nc_sid=612081&_nc_ohc=o0s76Rx-TxoQ7kNvgGoPSzd&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYAL_IlJA5eOPDAoJSRSWPfAqYvblwncQCfRMZijwya5xg&oe=67266616 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/290767328_4733265553440101_7501580574603940509_n.jpg?stp=dst-jpg_s160x160&_nc_cat=102&ccb=1-7&_nc_sid=09d16d&_nc_ohc=ixjUdMScYJQQ7kNvgEFQ5El&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYCdrAxMDIY0Vj2WtKNfYB86Tz81w_OGaNxhv8BwJ4Hi2w&oe=6704C76D HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iZJJ4/yb/l/en_GB/N7BJNurDwp0.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ifnp4/y4/l/en_GB/bCZUAji8TvjVIXCfJyJpeXc6A3QEMXwN14uojPjcFa2Xewwd3r2e6xpm2L2mkQAWDrBlj8CJEJioxcRvR8DSvpTkR8OS880pBZlqhmkZN8mD_BDRedCVB1jcche8tBESRxOF6G_0LeVZpiD.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y8/r/rwBKEuy7-hU.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iIdS4/y2/l/en_GB/nrztWMF1weE3yEHWL2OfixyYzNCS20pX2p4nMh4OS8IRJiucW2SavbSol1dA1B68PMfQyywdzwm6JAUzCfulZcjV2nUBekK0DyCjYKcpGXfS4ehaUJEsOKpEDGWQA3FFx8w89RMV0fymdJeZZVnk6hKaAGgjGuUw5DNdebYVSPEwPSwNMnOwfiBaqD5XFIJJ5uqTCESs82tgvNbwp.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yV/r/vUmfhJXfJ5R.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iMFF4/yt/l/en_GB/A8Lgl7A-fEI.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=c&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; _js_datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/2PIcyqpptfD.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/358356198_1132099187713671_280169182792921960_n.jpg?stp=cp0_dst-jpg_s40x40&_nc_cat=101&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=EnU4TCrg7KcQ7kNvgH3RbtA&_nc_ht=scontent-msp1-1.xx&_nc_gid=AH74ogqrSPAl9hKhpfLpEB2&oh=00_AYAdaPZNu7SE_o5KKRUbuO-RwummXNITB-fUih3NKQM_XQ&oe=6704C4A4 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/290767328_4733265553440101_7501580574603940509_n.jpg?stp=dst-jpg_s160x160&_nc_cat=102&ccb=1-7&_nc_sid=09d16d&_nc_ohc=ixjUdMScYJQQ7kNvgEFQ5El&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYCdrAxMDIY0Vj2WtKNfYB86Tz81w_OGaNxhv8BwJ4Hi2w&oe=6704C76D HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/60968635_815007345559370_4237077948668051456_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=102&ccb=1-7&_nc_sid=5ed88f&_nc_ohc=AxU48Y4WgDUQ7kNvgHtiA4i&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYBNQG7oopNd7romcKxXKGDskwDO2BTxOXhLd03guu_RRA&oe=67264A48 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/46401499_1891826337591217_3532398171877539840_n.jpg?stp=dst-jpg_s160x160&_nc_cat=107&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=xjWFgjBu-H8Q7kNvgFb_tO_&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYAJ828vgEjLvSH-WA3R0etjrg7JA8G643VbAoer1xO3pw&oe=67265380 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/195718952_4087779567980152_1527309155195301855_n.jpg?stp=c0.61.1200.1200a_dst-jpg_s160x160&_nc_cat=109&ccb=1-7&_nc_sid=612081&_nc_ohc=Gq0JCLKeqM4Q7kNvgHBlxRt&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYD92DELeDoxQUJIYZgrc5xfsRBSdTmAI4qIG8uXQFBlEw&oe=67266C3F HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/46315233_1891826374257880_7048247967907577856_n.jpg?stp=dst-jpg_s160x160&_nc_cat=107&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=qpIBGDuyvXQQ7kNvgFG3DSo&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYBYgEyRMxTfeZYU7RgpIbJryopR76QnNOb7WvY5n58cEw&oe=672650F7 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/46416894_1891826417591209_9053329651631390720_n.jpg?stp=dst-jpg_s160x160&_nc_cat=110&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=E6JmjrXovdIQ7kNvgHoXKGm&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYCiZ3kizyD7MqSq7CFsSlOEp4zhYwubyyoPrKxD6PFn7A&oe=67266D93 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/37307331_1683243288459011_5531254983405600768_n.jpg?stp=c94.0.453.453a_dst-jpg_s160x160&_nc_cat=101&ccb=1-7&_nc_sid=612081&_nc_ohc=kMxKDrdzMCgQ7kNvgGX4PAd&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYB-hUUTWiv9OUDRJZmCLYLQhQgwNkHISIR-IXvCWEXhMA&oe=67265C91 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/170650873_3924055201019257_1963581669496579141_n.jpg?stp=c152.0.1217.1217a_dst-jpg_s160x160&_nc_cat=111&ccb=1-7&_nc_sid=612081&_nc_ohc=o0s76Rx-TxoQ7kNvgGoPSzd&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYAL_IlJA5eOPDAoJSRSWPfAqYvblwncQCfRMZijwya5xg&oe=67266616 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/347399986_628558822263964_2944349486294716598_n.jpg?stp=dst-jpg_s160x160&_nc_cat=110&ccb=1-7&_nc_sid=e09983&_nc_ohc=1mFwVrEXLPMQ7kNvgH32ndx&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYAhtNptf1Qh8FBGXxKVn9KbNhIgeBtdJ_nh4cvWf_llmQ&oe=6704A80D HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/358356198_1132099187713671_280169182792921960_n.jpg?stp=dst-jpg_s200x200&_nc_cat=101&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=EnU4TCrg7KcQ7kNvgH3RbtA&_nc_ht=scontent-msp1-1.xx&_nc_gid=ATJnVGNtylQFqasg0Vk4WBd&oh=00_AYBc_Ap6X9LCHOxvm6Mf-UJs1k3uP2L9sjepVix11RvIPw&oe=6704C4A4 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yT/r/Dc7-7AgwkwS.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yX/r/cPgJ9SoTNMp.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=d&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; _js_datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/8k_Y-oVxbuU.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3isGz4/yA/l/en_GB/K_dPDLjwRPX.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ij9m4/yG/l/en_GB/8HvRXKI8vmj.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/195718952_4087779567980152_1527309155195301855_n.jpg?stp=c0.61.1200.1200a_dst-jpg_s160x160&_nc_cat=109&ccb=1-7&_nc_sid=612081&_nc_ohc=Gq0JCLKeqM4Q7kNvgHBlxRt&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYD92DELeDoxQUJIYZgrc5xfsRBSdTmAI4qIG8uXQFBlEw&oe=67266C3F HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/37307331_1683243288459011_5531254983405600768_n.jpg?stp=c94.0.453.453a_dst-jpg_s160x160&_nc_cat=101&ccb=1-7&_nc_sid=612081&_nc_ohc=kMxKDrdzMCgQ7kNvgGX4PAd&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYB-hUUTWiv9OUDRJZmCLYLQhQgwNkHISIR-IXvCWEXhMA&oe=67265C91 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/46315233_1891826374257880_7048247967907577856_n.jpg?stp=dst-jpg_s160x160&_nc_cat=107&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=qpIBGDuyvXQQ7kNvgFG3DSo&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYBYgEyRMxTfeZYU7RgpIbJryopR76QnNOb7WvY5n58cEw&oe=672650F7 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/358356198_1132099187713671_280169182792921960_n.jpg?stp=dst-jpg_s200x200&_nc_cat=101&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=EnU4TCrg7KcQ7kNvgH3RbtA&_nc_ht=scontent-msp1-1.xx&_nc_gid=ATJnVGNtylQFqasg0Vk4WBd&oh=00_AYBc_Ap6X9LCHOxvm6Mf-UJs1k3uP2L9sjepVix11RvIPw&oe=6704C4A4 HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/347399986_628558822263964_2944349486294716598_n.jpg?stp=dst-jpg_s160x160&_nc_cat=110&ccb=1-7&_nc_sid=e09983&_nc_ohc=1mFwVrEXLPMQ7kNvgH32ndx&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYAhtNptf1Qh8FBGXxKVn9KbNhIgeBtdJ_nh4cvWf_llmQ&oe=6704A80D HTTP/1.1Host: scontent-msp1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yF/r/sIUfioK8p73.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yc/r/cGxo7_n9cky.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iZFn4/yV/l/en_GB/tI3_Q-GwvRfopwoDiq4buW6MCauFdveEHERz6pNGhHp8vz5mf-dl_pi.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; _js_datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3io2S4/yt/l/en_GB/bsfApgAUpE7.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iO7g4/yI/l/en_GB/T-w2A1SA5Ud.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i0Wo4/yC/l/en_GB/nNL7PF1mRol.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.facebook.com/morningstardbrsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; _js_datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ym/r/eR55woz94Gb.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iBAG4/yw/l/en_GB/fbI1vKnc9QM.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; _js_datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=f&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=e&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yV/r/vUmfhJXfJ5R.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yX/r/cPgJ9SoTNMp.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?ts=1727989335368&r_id=AAYjl5SrP9d0559XWbA3GA%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=78f2de142063fef1393805fece04c540c524f718fcd23a10b77bc3192006e3ae HTTP/1.1Host: li.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=c6155b40-81ca-11ef-bf9b-f7b138d21952 HTTP/1.1Host: stk.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /litms/utag/seo-directory-frontend/utag.js?cb=1727989200000 HTTP/1.1Host: platform.linkedin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: li_sugr=3fbfcf74-7950-4f27-a5f0-b81d0698758f; bcookie="v=2&b94b2354-e8f5-42e1-8bdb-24572738166b"; lidc="b=VGST06:s=V:r=V:a=V:p=V:g=3105:u=1:x=1:i=1727983740:t=1728070140:v=2:sig=AQHDjdqLhxfZc4rA9zlel0xHl9-gPKxd"; UserMatchHistory=AQIHS7QN_CBlCwAAAZJT22ojYEmPb8Yy9Z1rBDoc_G_9C3TGUINkSXkWw6s_BcZUZS3NumJz_dikxg; AnalyticsSyncHistory=AQK0TZYXMYvTbQAAAZJT22ojGDqVR0Bbxb43Ozd0KE3iB7Yxc_Mgha5um4rh5RAhsXGRL3_AKFkO-9HZXXxpDQ; __cf_bm=zb1HYKR80vR5nQCGW9Zh67WIqjHyM_lB3dP.vtJkGSk-1727983742-1.0.1.1-Q85jsMpYDSCxLUloFjPsDQmD_gYlKXDA3Smm2SfXGzubej58KyldB5FTZpyMl1eNfzepSGUlcdNd7b24o2YuUQ; lang=v=2&lang=en-us
Source: global traffic	HTTP traffic detected: GET /index.html?ts=1727989338918&r_id=AAYjl5SrP9d0559XWbA3GA==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1Host: li.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pxcts=e7275815-81bd-11ef-8aa4-a6d4c7eafe9b; _pxvid=e7274cca-81bd-11ef-8aa3-c066813e21ea
Source: global traffic	HTTP traffic detected: GET /ns?c=c7417f30-81ca-11ef-bf35-656952fc5247 HTTP/1.1Host: stk.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/dlsxttngzb5nlbenn9hct35rq HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/user_preferences/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /ns?c=c6155b40-81ca-11ef-bf9b-f7b138d21952 HTTP/1.1Host: stk.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=c7417f30-81ca-11ef-bf35-656952fc5247 HTTP/1.1Host: stk.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/eh08muqvrde4h3hc6koyij5ti HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/726isvuswm3snq58kvs3vjxxb HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/45kkp4tfrx0qs4juyjxzjhoww HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5oas73nreunfgygkpe5iwmgrs HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /litms/utag/seo-directory-frontend/utag.js?cb=1727989200000 HTTP/1.1Host: platform.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: li_sugr=3fbfcf74-7950-4f27-a5f0-b81d0698758f; bcookie="v=2&b94b2354-e8f5-42e1-8bdb-24572738166b"; lidc="b=VGST06:s=V:r=V:a=V:p=V:g=3105:u=1:x=1:i=1727983740:t=1728070140:v=2:sig=AQHDjdqLhxfZc4rA9zlel0xHl9-gPKxd"; UserMatchHistory=AQIHS7QN_CBlCwAAAZJT22ojYEmPb8Yy9Z1rBDoc_G_9C3TGUINkSXkWw6s_BcZUZS3NumJz_dikxg; AnalyticsSyncHistory=AQK0TZYXMYvTbQAAAZJT22ojGDqVR0Bbxb43Ozd0KE3iB7Yxc_Mgha5um4rh5RAhsXGRL3_AKFkO-9HZXXxpDQ; __cf_bm=zb1HYKR80vR5nQCGW9Zh67WIqjHyM_lB3dP.vtJkGSk-1727983742-1.0.1.1-Q85jsMpYDSCxLUloFjPsDQmD_gYlKXDA3Smm2SfXGzubej58KyldB5FTZpyMl1eNfzepSGUlcdNd7b24o2YuUQ; lang=v=2&lang=en-us
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1988473458&timestamp=1727989350369 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/gs508lg3t2o81tq7pmcgn6m2 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/adzjokfylbe8pvjr9h8iv96mw HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/euqjj7tf5wvr33frd3x1jj9s HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/al2o9zrvru7aqj8e1x2rzsrca HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/6y2czwba46q3wsh2b0d0g6trj HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/cyolgscd0imw2ldqppkrb84vo HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/webstorage/process_keys/?state=1 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5qa1f22mxd8ig3o5g568vo59 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/80ndnja80f2uvg4l8sj2su82m HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=y5jEHD1rHZf2raV0UuP4irqQr3kSTGenpJtjQsx-pD1cQsjQ_aL-Jcfx_I2fzRTV5IWIUh0X5PLJpLmykdDgNME8D3A_RJkiygZxQVNwZm2by5OLD8Vkfk4Yfub7WeUIfKu7CXit6QMnudR-9lYbKiMxxcXCYzpgW1TEk_wDZNOKwBru-MY
Source: global traffic	HTTP traffic detected: GET /MorningstarDBRS HTTP/1.1Host: twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MorningstarDBRS HTTP/1.1Host: x.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/migrate?tok=7b2265223a222f4d6f726e696e677374617244425253222c2274223a313732373938333833347d58494a75133f44d208f98f095d3c0d29 HTTP/1.1Host: twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_MfRuIuDmyMnByMvAr2rZAw=="; guest_id=v1%3A172798383341755633
Source: global traffic	HTTP traffic detected: GET /MorningstarDBRS?mx=2 HTTP/1.1Host: x.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_rBJ8qxzIBWNFNBUB2drloA=="; guest_id_marketing=172798383341755633; guest_id_ads=172798383341755633; guest_id=v1%3A172798383341755633; night_mode=2
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/vendor.62d18e4a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/i18n/en.ba58ee8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/main.9775f98a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emoji/v2/svg/26a0.svg HTTP/1.1Host: abs-0.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.Dropdown.78a54eca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.s.4353193a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/modules.common.62ec115a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/modules.audio.2a5bb19a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc.68b9944a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD.f450457a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpace.5051e68a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode.9fabe07a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.333c30ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery.3123dafa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/hashflags.json HTTP/1.1Host: api.x.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-client-transaction-id: I+kTxTgpY67Mhl9zDhfzc1AxnFm1BA7I/Gtkj6ZmSIYpxlhJ0nNyuYtmbjoDapbTqSmAjCHoUrUVlXznOh6JTeG1jfL+IAx-guest-token: 1841923823945281741x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://x.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /.well-known/web-identity HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: application/jsonSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: webidentityUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.d10fe44a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.Ocf.906270ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~loader.LoggedOutNotifications.94c3e97a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.66aa7aaa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.378e315a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AppModules.d89da73a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.4fd68dca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.96367eea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.335f05da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.47c4804a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.SideNav.e8d0899a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.ReaderMode~bundle.A.4d0d834a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.AudioSp.3b86bcfa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.c2ff71da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.AccountAnalytics~bu.0bfa6c2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa.73fc8aaa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XNhk0ai11ON0epEcRkTSADzEUt4tmznFGhwpCuVqJ6zLwb4p4gCIfixv3ama1QYYN8CwB1YwEEjW1PfLI4lWEcFc-Egzr54TIZnr0P6J1il9SjoxfJxQfB6BMs-Hk5aQHhBeVZUfSYwhEAUbDbvdoMnn5hrhiRXeYi4p0kNXI3IL2TQCb3v9F3VCSEg
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio.3e84ca9a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.3b27748a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.df33716a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.d4c05fca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa.2ec1998a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XNhk0ai11ON0epEcRkTSADzEUt4tmznFGhwpCuVqJ6zLwb4p4gCIfixv3ama1QYYN8CwB1YwEEjW1PfLI4lWEcFc-Egzr54TIZnr0P6J1il9SjoxfJxQfB6BMs-Hk5aQHhBeVZUfSYwhEAUbDbvdoMnn5hrhiRXeYi4p0kNXI3IL2TQCb3v9F3VCSEg
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba.672b26aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.8d67843a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=k&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XNhk0ai11ON0epEcRkTSADzEUt4tmznFGhwpCuVqJ6zLwb4p4gCIfixv3ama1QYYN8CwB1YwEEjW1PfLI4lWEcFc-Egzr54TIZnr0P6J1il9SjoxfJxQfB6BMs-Hk5aQHhBeVZUfSYwhEAUbDbvdoMnn5hrhiRXeYi4p0kNXI3IL2TQCb3v9F3VCSEg
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~.4e71cb5a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.862ae2fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..1585834a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XNhk0ai11ON0epEcRkTSADzEUt4tmznFGhwpCuVqJ6zLwb4p4gCIfixv3ama1QYYN8CwB1YwEEjW1PfLI4lWEcFc-Egzr54TIZnr0P6J1il9SjoxfJxQfB6BMs-Hk5aQHhBeVZUfSYwhEAUbDbvdoMnn5hrhiRXeYi4p0kNXI3IL2TQCb3v9F3VCSEg
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu.fb384aea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=l&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6; wd=1280x907; datr=p_D-Zq0PAtyiwG9GhTBTIxUC
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.437b691a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.WorkHistory~bundle.D.9c79c25a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5455e27a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XNhk0ai11ON0epEcRkTSADzEUt4tmznFGhwpCuVqJ6zLwb4p4gCIfixv3ama1QYYN8CwB1YwEEjW1PfLI4lWEcFc-Egzr54TIZnr0P6J1il9SjoxfJxQfB6BMs-Hk5aQHhBeVZUfSYwhEAUbDbvdoMnn5hrhiRXeYi4p0kNXI3IL2TQCb3v9F3VCSEg
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b.1d970dba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.04f22a1a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home.749972aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /1.1/hashflags.json HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /emoji/v2/svg/26a0.svg HTTP/1.1Host: abs-0.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/i18n/en.ba58ee8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/vendor.62d18e4a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/main.9775f98a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.Dropdown.78a54eca.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD.f450457a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc.68b9944a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.Payments~bundle.Tw.cfad916a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XNhk0ai11ON0epEcRkTSADzEUt4tmznFGhwpCuVqJ6zLwb4p4gCIfixv3ama1QYYN8CwB1YwEEjW1PfLI4lWEcFc-Egzr54TIZnr0P6J1il9SjoxfJxQfB6BMs-Hk5aQHhBeVZUfSYwhEAUbDbvdoMnn5hrhiRXeYi4p0kNXI3IL2TQCb3v9F3VCSEg
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.Payments~bundle.SettingsProfessionalProfile.f7c0620a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Conferences~bundle.DirectMessages~bundle.DMRichTextCompose~bu.111304ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceAnalytics~bundle.Communities~bundle.ProfessionalHome~bundle.C.e75b2bca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi.5af7a95a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~ondemand.SettingsRevamp~ondemand.SettingsMonetization~bundle.ConversationWithR.4901f46a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/modules.common.62ec115a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.s.4353193a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpace.5051e68a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove.32c4a2ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight.ea80fe7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/modules.audio.2a5bb19a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.333c30ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.8137c55a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.20a474da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile.1e7923aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.ConversationWithRelay~bundle.UserProfile~ondemand.Verified.23dd2c6a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery.3123dafa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode.9fabe07a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile.9d78353a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.d10fe44a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.UserProfile~ondemand.Verified.2d6462ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.66aa7aaa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.b879451a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.378e315a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli.19418f5a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile~loader.IconLabelHandler.0538e89a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.4fd68dca.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.Ocf.906270ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~loader.LoggedOutNotifications.94c3e97a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.ef7a569a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.UserProfile.39a7701a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AppModules.d89da73a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile.53e8781a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.UserFollowLists~bundle.UserProfile.3e666f2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.96367eea.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.335f05da.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.7c0c4f4a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.SideNav.e8d0899a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.47c4804a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.c2ff71da.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/bundle.UserProfile.18580d8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.AccountAnalytics~bu.0bfa6c2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.ReaderMode~bundle.A.4d0d834a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AudioDock.af72bcba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/bundle.NetworkInstrument.1004095a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.richScribeAction.c717e89a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/i18n/emoji-en.3afd1e4a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa.73fc8aaa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.AudioSp.3b86bcfa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio.3e84ca9a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.3b27748a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.8d67843a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=147456-147456If-Range: "WccXJiLfUTUMdjTyQQDGDw=="
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.6162375a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.df33716a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~bundle.LiveEvent~ondemand.InlinePlayer~loaders.video.Player.2747f8ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.d4c05fca.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun.a10c715a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/ces/p2 HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba.672b26aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~.4e71cb5a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.862ae2fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer.02b22fca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa.2ec1998a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..1585834a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.8d67843a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=147456-165048If-Range: "WccXJiLfUTUMdjTyQQDGDw=="
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AudioOnlyVideoPlayer.f013ad8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker.4d3f7f7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Bold.ebb56aba.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu.fb384aea.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.NewTweetsPill.1180970a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.WorkHistory~bundle.D.9c79c25a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.437b691a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5455e27a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.2433e2ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.04f22a1a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home.749972aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b.1d970dba.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.JobSearch~bundle.UserJobs~loader.WideLayout.d264f1ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.WideLayout~bundle.Conversation.cd32a09a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.d0bbc1ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.Payments~bundle.Tw.cfad916a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Conferences~bundle.DirectMessages~bundle.DMRichTextCompose~bu.111304ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi.5af7a95a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.WideLayout.6d8a091a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/Yka-W8dz7RaEuQNkroPkYw/UserByScreenName?variables=%7B%22screen_name%22%3A%22morningstardbrs%22%2C%22withSafetyModeUserFields%22%3Afalse%7D&features=%7B%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22subscriptions_feature_can_gift_premium%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1Host: api.x.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-client-transaction-id: vXeNW6a3/TBSGMHtkIlt7c6vAscrmpBWYvX6ETj41hi3WMbXTO3sJxX48KSd9AhNN6YeEr/y3sxzIXs3PsHXUisOoaonvgx-guest-token: 1841923823945281741x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://x.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Regular.80fda27a.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profile_images/1676605454384865284/meYB_6Du_200x200.jpg HTTP/1.1Host: pbs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.Payments~bundle.SettingsProfessionalProfile.f7c0620a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~ondemand.SettingsRevamp~ondemand.SettingsMonetization~bundle.ConversationWithR.4901f46a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceAnalytics~bundle.Communities~bundle.ProfessionalHome~bundle.C.e75b2bca.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove.32c4a2ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.8137c55a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight.ea80fe7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/Yka-W8dz7RaEuQNkroPkYw/UserByScreenName?variables=%7B%22screen_name%22%3A%22morningstardbrs%22%2C%22withSafetyModeUserFields%22%3Afalse%7D&features=%7B%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22subscriptions_feature_can_gift_premium%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bun.d4d8494a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule.d6118eca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.TimelineRenderer.99423c3a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /profile_banners/1852136940/1672840936/600x200 HTTP/1.1Host: pbs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /profile_images/1676605454384865284/meYB_6Du_200x200.jpg HTTP/1.1Host: pbs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/Z2BA99jFw6TxaJM5v7Irmg/useFetchProfileBlocks_profileExistsQuery?variables=%7B%22screenName%22%3A%22MorningstarDBRS%22%7D HTTP/1.1Host: api.x.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-client-transaction-id: UJpgtktaEN2/9SwAfWSAACNC7yrGd327jxgX/NUVO/VatSs6oQAByvgVHUlwGeWg2k3z/1I7A1tzcCSXIv7fk1jGuTV2Uwx-guest-token: 1841923823945281741x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://x.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.20a474da.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/E3opETHurmVJflFsUBVuUQ/UserTweets?variables=%7B%22userId%22%3A%221852136940%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1Host: api.x.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-client-transaction-id: 1B7kMs/elFk7caiE+eAEhKfGa65C8/k/C5yTeFGRv3HeMa++JYSFTnyRmc30nWEkXsl3e9YupmJtySmmZCrYTs6hSWIB1wx-guest-token: 1841923823945281741x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://x.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.ConversationWithRelay~bundle.UserProfile~ondemand.Verified.23dd2c6a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile.9d78353a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile.1e7923aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.UserProfile~ondemand.Verified.2d6462ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.b879451a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.ComposeScheduling~ondemand.ProfileSidebar.5ff473aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.ProfileSidebar.2b5e5e2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profile_banners/1852136940/1672840936/600x200 HTTP/1.1Host: pbs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.DividerHandler.f6bab56a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.LiveEvent~loader..c594f98a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/E3opETHurmVJflFsUBVuUQ/UserTweets?variables=%7B%22userId%22%3A%221852136940%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1Host: api.x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id=v1%3A172798383341755633; night_mode=2; guest_id_marketing=v1%3A172798383341755633; guest_id_ads=v1%3A172798383341755633; personalization_id="v1_vu+XxsBkIRhFc9gktZxV/A=="; gt=1841923823945281741
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle..d309143a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli.19418f5a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile~loader.IconLabelHandler.0538e89a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.UserProfile.39a7701a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile.53e8781a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.ef7a569a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.UserFollowLists~bundle.UserProfile.3e666f2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Heavy.f44ae4ea.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Medium.f8e2739a.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://x.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://x.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.7c0c4f4a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AudioDock.af72bcba.js HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_735.2.dr	String found in binary or memory: </span> <!----></a></li><li size="xsmall" class="mmds-footer-link" data-v-103f75fa data-v-19c51d1e><a data-mds-version="@mmds/button-10.77.0" href="https://www.facebook.com/MorningstarInc/" target="_blank" class="mmds-button__mdc mmds-button--float__mdc mmds-button--xsmall__mdc mmds-button--darkMode__mdc mmds-button--no-animation__mdc" data-v-103f75fa><!----> <span> equals www.facebook.com (Facebook)
Source: chromecache_735.2.dr	String found in binary or memory: </span> <!----></a></li><li size="xsmall" class="mmds-footer-link" data-v-103f75fa data-v-19c51d1e><a data-mds-version="@mmds/button-10.77.0" href="https://www.linkedin.com/company/morningstar" target="_blank" class="mmds-button__mdc mmds-button--float__mdc mmds-button--xsmall__mdc mmds-button--darkMode__mdc mmds-button--no-animation__mdc" data-v-103f75fa><!----> <span> equals www.linkedin.com (Linkedin)
Source: chromecache_735.2.dr	String found in binary or memory: </span> <!----></a></li><li class="mmds-top-hat-drawer-section__item" data-v-83eb8998><a data-mds-version="@mmds/button-10.77.0" href="https://www.facebook.com/MorningstarInc/" target="_blank" class="mmds-top-hat-drawer-section__item-link mmds-button__mdc mmds-button--float__mdc mmds-button--medium__mdc mmds-button--darkMode__mdc mmds-button--no-animation__mdc" data-v-83eb8998><!----> <span> equals www.facebook.com (Facebook)
Source: chromecache_735.2.dr	String found in binary or memory: </span> <ul class="mmds-top-hat-drawer-section__list" data-v-83eb8998><li class="mmds-top-hat-drawer-section__item" data-v-83eb8998><a data-mds-version="@mmds/button-10.77.0" href="https://www.linkedin.com/company/morningstar" target="_blank" class="mmds-top-hat-drawer-section__item-link mmds-button__mdc mmds-button--float__mdc mmds-button--medium__mdc mmds-button--darkMode__mdc mmds-button--no-animation__mdc" data-v-83eb8998><!----> <span> equals www.linkedin.com (Linkedin)
Source: chromecache_900.2.dr, chromecache_924.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_900.2.dr, chromecache_924.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_464.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_625.2.dr, chromecache_513.2.dr, chromecache_929.2.dr	String found in binary or memory: </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click":"1","conversion":"1"}">Go to Feed</a><span role="presentation" aria-hidden="true"> equals www.facebook.com (Facebook)
Source: chromecache_929.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_+9"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_0k"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2951" autocomplete="off" /><input type="hidden" name="lsd" value="AVor69eHwx4" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_Z3" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_iY" /><input type="hidden" name="lgnrnd" value="122959_5ZVw" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI3OTgzNzk5LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4
Source: chromecache_625.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_4I"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_K4"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2928" autocomplete="off" /><input type="hidden" name="lsd" value="AVor69eHoLQ" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_j+" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_ls" /><input type="hidden" name="lgnrnd" value="123022_JPnp" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI3OTgzODIyLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4
Source: chromecache_513.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_RS"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_D+"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2886" autocomplete="off" /><input type="hidden" name="lsd" value="AVor69eHaM4" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_NG" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_hP" /><input type="hidden" name="lgnrnd" value="123213_u4za" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI3OTgzOTMzLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4
Source: chromecache_929.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fbulk-route-definitions%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_YbiIuPczOY_ sx_089752"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log in to Facebook">Log in</a></li><li><a href="https://messenger.com/" title="Take a look at Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Take a look at popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Discover Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT2cgdIa4wZODtURlnKc_0wjGbCy6TsCrM53AcJhxY7RY49MlmsjMgJDz9CqBtViR4Pr3mUBJBnlE24mR49_P3_C0uYzf-e6uzDdVj7ypqQHEXpyZMnb65BMc2zyLsxB66cioNTi-W2ezbWpUnX5yg" title="Take a look at Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Centre">Voting Information Centre</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Centre</a></li><li><a href="/groups/discover/" title="Explore our groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource centre and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&cam
Source: chromecache_513.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fwebstorage%2Fprocess_keys%2F%3Fstate%3D1&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_YbiIuPczOY_ sx_089752"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log in to Facebook">Log in</a></li><li><a href="https://messenger.com/" title="Take a look at Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Take a look at popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Discover Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT1aieZ_AiydL_nQJEWpTmk8_F4lYJvUPA8kGrQINDrhOOcTKct26BZsM9OrzJFymUtnVVRs9HM_4By5HG4AlbIrzMUE8PAqO_lXxvdTcqE69SGDkddcjsFW-yyaLSH6g7jq625HV83xE27Nlw-8cA" title="Take a look at Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Centre">Voting Information Centre</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Centre</a></li><li><a href="/groups/discover/" title="Explore our groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource centre and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placeme
Source: chromecache_625.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fshared%2Fuser_preferences%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_YbiIuPczOY_ sx_089752"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log in to Facebook">Log in</a></li><li><a href="https://messenger.com/" title="Take a look at Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Take a look at popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Discover Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT1YUglrbc1JQh9FFgocuhQSAx0Mm9cUJvC1ldCF6GDzmaRvxTSH-gF2y5vx6x90Ci8gv39bEhkQtzLpOBa5H2oR0k4Z7u6KnzTL2Ysj_I_aOrzptsSvb3B59hyZ2pOf3dJ4Far9u_RFVQMM2W_ppA" title="Take a look at Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Centre">Voting Information Centre</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Centre</a></li><li><a href="/groups/discover/" title="Explore our groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource centre and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaig
Source: ORA _ Morningstar DBRS.html	String found in binary or memory: </svg></mat-icon></a></li><li _ngcontent-sc167="" role=listitem class=list-bare__item><a _ngcontent-sc167="" href=https://linkedin.com/company/morningstardbrs aria-label="Go To Morningstar DBRS LinkedIn Page"><mat-icon _ngcontent-sc167="" role=img svgicon=linkedin class="mat-icon notranslate icon__social mat-icon-no-color" aria-hidden=true data-mat-icon-type=svg data-mat-icon-name=linkedin><svg id=linkedin_layer1 data-name=Linkedin xmlns=http://www.w3.org/2000/svg viewBox="0 0 512 512" fit="" height=100% width=100% preserveAspectRatio="xMidYMid meet" focusable=false> equals www.linkedin.com (Linkedin)
Source: ORA _ Morningstar DBRS.html	String found in binary or memory: </svg></mat-icon></a></li><li _ngcontent-sc167="" role=listitem class=list-bare__item><a _ngcontent-sc167="" href=https://twitter.com/MorningstarDBRS aria-label="Go To Morningstar DBRS Twitter Page"><mat-icon _ngcontent-sc167="" role=img svgicon=twitter class="mat-icon notranslate icon__social mat-icon-no-color" aria-hidden=true data-mat-icon-type=svg data-mat-icon-name=twitter><svg id=twitter_layer1 data-name=Twitter xmlns=http://www.w3.org/2000/svg viewBox="0 0 512 512" fit="" height=100% width=100% preserveAspectRatio="xMidYMid meet" focusable=false> equals www.twitter.com (Twitter)
Source: chromecache_625.2.dr	String found in binary or memory: <script nonce="2ts4FiCi">requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT0AngiAVGk9hx3PFg7pCxKCOiIzKTrcrCpR17XqNI6e9yu3M5sp6Sey_HekgcG6lnx_QCw77oRGZlu9u1_o2BOtz_hwgVBVMb9xWaNa7IyaTIIfv13ILAi_JKxSpY8jZHEyXaCvTiVGL7RQac0JSg","untrusted_link_default_hash":"AT25WreRltGqGKxIC0Owl9hdOx3N9M4lXWWQdV77KbO2Ep2ebxVNR7VG5ftKp-DTX9y7S-KhwNgbv5j-KopfRCa2QwZOyk_A008taMS7cOlmQt1MO_Z0kajlogIYv51BLnj2YStPXR0TmR7_vt-CaA","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_Jf","u_0_0_GA",1],["__elem_94c15385_0_0_Nt","u_0_1_4I",1],["__elem_a588f507_0_3_IZ","u_0_2_K4",1],["__elem_835c633a_0_0_ni","login_form",1],["__elem_efa9dffa_0_0_4O","email",1],["__elem_45d73b5d_0_0_iB","loginbutton",1],["__elem_f46f4946_0_0_ht","u_0_3_j+",1],["__elem_f46f4946_0_1_Lg","u_0_4_ls",1],["__elem_a588f507_0_1_3S","u_0_5_XR",1],["__elem_9f5fac15_0_0_Kh","pagelet_bluebar",1],["__elem_a588f507_0_0_SG","globalContainer",1],["__elem_a588f507_0_2_dF","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0MTDnwTHemVUh3hOO","ef_page":null,"uri":"https:\/\/www.facebook.com\/shared\/user_preferences\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_SG"],[{"__m":"__elem_a588f507_0_0_SG"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_Nt","__elem_072b8e64_0_0_Jf","__elem_a588f507_0_3_IZ"],[{"__m":"__elem_94c15385_0_0_Nt"},{"__m":"__elem_072b8e64_0_0_Jf"},{"__m":"__elem_a588f507_0_3_IZ"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_ht"],[{"__m":"__elem_f46f4946_0_0_ht"},1727983822]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_Lg"],[{"__m":"__elem_f46f4946_0_1_Lg"}]],["LoginFormController","init",["__elem_835c633a_0_0_n
Source: chromecache_929.2.dr	String found in binary or memory: <script nonce="7vD5xEC8">requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT3nuV-YtQMgZTtk_3znXUeHnyB5gW13zTrsPds4fWVIJZcwFabZwwCw1cN6cZKaKxGTfXUPXlelSPYDThEAesiU2QNK9bVB1q4m1Sm3KjeX4HT-miFweqEo2uB2gGWrj4nRk8FwVU9jc8HIVpwY3A","untrusted_link_default_hash":"AT1BNJ8JE5_wP_Ux_tEor46cxeRlbwT1_yL1lwr8EUasNnagkSmo6Fu5xcgMgHecb7sptR3jEW2_-0zGEsskPbDrHNaEzBBohdAWKLbTlZOdLr-0XBo55uH_-_6ozTy7f2PQHaQuzfgDw1P_oynFnw","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_eS","u_0_0_04",1],["__elem_94c15385_0_0_sm","u_0_1_+9",1],["__elem_a588f507_0_3_vj","u_0_2_0k",1],["__elem_835c633a_0_0_RY","login_form",1],["__elem_efa9dffa_0_0_Es","email",1],["__elem_45d73b5d_0_0_g3","loginbutton",1],["__elem_f46f4946_0_0_FM","u_0_3_Z3",1],["__elem_f46f4946_0_1_Fq","u_0_4_iY",1],["__elem_a588f507_0_1_Wq","u_0_5_yx",1],["__elem_9f5fac15_0_0_ov","pagelet_bluebar",1],["__elem_a588f507_0_0_xB","globalContainer",1],["__elem_a588f507_0_2_IF","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0QDdteiWP19yiQaTA","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/bulk-route-definitions\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_xB"],[{"__m":"__elem_a588f507_0_0_xB"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_sm","__elem_072b8e64_0_0_eS","__elem_a588f507_0_3_vj"],[{"__m":"__elem_94c15385_0_0_sm"},{"__m":"__elem_072b8e64_0_0_eS"},{"__m":"__elem_a588f507_0_3_vj"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_FM"],[{"__m":"__elem_f46f4946_0_0_FM"},1727983799]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_Fq"],[{"__m":"__elem_f46f4946_0_1_Fq"}]],["LoginFormController","init",["__elem_835c633a_0
Source: chromecache_513.2.dr	String found in binary or memory: <script nonce="rVINaPq9">requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT2PCvjx4-gQRjQInnn0aeROfd01z65MSdP21wlKKEBi0b-LTNokjF-mK7dtszsNTTBdj-BekXBzrTq2sy18MM3R4dcYoxRZ1zIoTGc6110hy-RotWfwa7Y8utgTPg49cgnRTl7q3f6URW3GSeaGWg","untrusted_link_default_hash":"AT0hzZUh37F_tnGfOvp-zWNfh6Qc77C8-L1r4xLU6-NtuPNgiPVdfxszemDMKnbNxNgPX8_n5HiHzoel-WefRYumPu9nM3hjYlcCt4cpkGS9ynaJKop2mzFDgPniX0puWLJ88E5d8LrkoEDfdPls3w","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_oE","u_0_0_2C",1],["__elem_94c15385_0_0_y5","u_0_1_RS",1],["__elem_a588f507_0_3_b6","u_0_2_D+",1],["__elem_835c633a_0_0_BX","login_form",1],["__elem_efa9dffa_0_0_zz","email",1],["__elem_45d73b5d_0_0_h8","loginbutton",1],["__elem_f46f4946_0_0_Os","u_0_3_NG",1],["__elem_f46f4946_0_1_WE","u_0_4_hP",1],["__elem_a588f507_0_1_KD","u_0_5_TX",1],["__elem_9f5fac15_0_0_8o","pagelet_bluebar",1],["__elem_a588f507_0_0_\/N","globalContainer",1],["__elem_a588f507_0_2_CF","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0f4WIkxTWYpoVKuuV","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/webstorage\/process_keys\/?state=1"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_\/N"],[{"__m":"__elem_a588f507_0_0_\/N"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_y5","__elem_072b8e64_0_0_oE","__elem_a588f507_0_3_b6"],[{"__m":"__elem_94c15385_0_0_y5"},{"__m":"__elem_072b8e64_0_0_oE"},{"__m":"__elem_a588f507_0_3_b6"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_Os"],[{"__m":"__elem_f46f4946_0_0_Os"},1727983933]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_WE"],[{"__m":"__elem_f46f4946_0_1_WE"}]],["LoginFormController","init",["__el
Source: chromecache_808.2.dr	String found in binary or memory: _.iq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.iq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.iq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.iq(_.rq(c))+"&hl="+_.iq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.iq(m)+"/chromebook/termsofservice.html?languageCode="+_.iq(d)+"&regionCode="+_.iq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_671.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy and paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_748.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","FDSLazyPopoverTrigger.react","FDSText.react","JSResourceForInteraction","ServerTime","TetraIcon.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie settings"),render:a},{href:"https://www.facebook.com/help/cancelcontracts?source=facebook.com",label:h._("Cancel contracts here"),open_in_new_tab:!0,render:c("gkx")("4387")}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color_DEPRECATED:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight_DEPRECATED:"normal",children:g==null?void 0:(a=g.rootView.props)==null
Source: chromecache_595.2.dr, chromecache_544.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_713.2.dr, chromecache_724.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+\|\w+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_480.2.dr, chromecache_936.2.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_590.2.dr	String found in binary or memory: thodologies exclusives","Advisor Insights","The Investor Success Project","Hamburger","Morningstar brands and products","Brands","Morningstar Data+Analytics","Morningstar Wealth","Morningstar Credit","Morningstar Retirement","Morningstar ESG","https:\u002F\u002Findexes.morningstar.com","Products","PitchBook","Sustainalytics","https:\u002F\u002Fwww.sustainalytics.com\u002F","Morningstar Office","DBRS Credit Ratings","Credit Analytics","Morningstar Investor","Segments","Advisors and Wealth Managers","Asset Managers","Institutional Investors","Business Home","Our story","Careers","Newsroom","https:\u002F\u002Fnewsroom.morningstar.com\u002Fnewsroom\u002Foverview\u002Fdefault.aspx","Investor Relations","Connect","LinkedIn","https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fmorningstar","https:\u002F\u002Ftwitter.com\u002FMorningstarInc","https:\u002F\u002Fwww.facebook.com\u002FMorningstarInc\u002F","https:\u002F\u002Fwww.instagram.com\u002Fmorningstarinc\u002F","NavNavItemsDrawerOpener","https:\u002F\u002Fwww.morningstar.com\u002Fevents\u002Fmic"));</script><script src="/content/assets/d3634a4.js" defer></script><script src="/content/assets/9a73c42.js" defer></script><script src="/content/assets/678c235.js" defer></script><script src="/content/assets/f61f631.js" defer></script><script src="/content/assets/9f5123e.js" defer></script><script src="/content/assets/115183e.js" defer></script><script src="/content/assets/1ea81e5.js" defer></script><script src="/content/assets/0c98785.js" defer></script><script src="/content/assets/13c6834.js" defer></script><script src="/content/assets/d1f5709.js" defer></script><script data-n-head="ssr" src="/content/assets/raw/js/chartbeat.js" data-body="true" defer></script><script data-n-head="ssr" src="/content/assets/raw/js/spam-protection-eloqua.js" data-body="true" defer></script><script data-n-head="ssr" src="https://static.chartbeat.com/js/chartbeat_mab.js" data-body="true" defer></script> equals www.facebook.com (Facebook)
Source: chromecache_590.2.dr	String found in binary or memory: thodologies exclusives","Advisor Insights","The Investor Success Project","Hamburger","Morningstar brands and products","Brands","Morningstar Data+Analytics","Morningstar Wealth","Morningstar Credit","Morningstar Retirement","Morningstar ESG","https:\u002F\u002Findexes.morningstar.com","Products","PitchBook","Sustainalytics","https:\u002F\u002Fwww.sustainalytics.com\u002F","Morningstar Office","DBRS Credit Ratings","Credit Analytics","Morningstar Investor","Segments","Advisors and Wealth Managers","Asset Managers","Institutional Investors","Business Home","Our story","Careers","Newsroom","https:\u002F\u002Fnewsroom.morningstar.com\u002Fnewsroom\u002Foverview\u002Fdefault.aspx","Investor Relations","Connect","LinkedIn","https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fmorningstar","https:\u002F\u002Ftwitter.com\u002FMorningstarInc","https:\u002F\u002Fwww.facebook.com\u002FMorningstarInc\u002F","https:\u002F\u002Fwww.instagram.com\u002Fmorningstarinc\u002F","NavNavItemsDrawerOpener","https:\u002F\u002Fwww.morningstar.com\u002Fevents\u002Fmic"));</script><script src="/content/assets/d3634a4.js" defer></script><script src="/content/assets/9a73c42.js" defer></script><script src="/content/assets/678c235.js" defer></script><script src="/content/assets/f61f631.js" defer></script><script src="/content/assets/9f5123e.js" defer></script><script src="/content/assets/115183e.js" defer></script><script src="/content/assets/1ea81e5.js" defer></script><script src="/content/assets/0c98785.js" defer></script><script src="/content/assets/13c6834.js" defer></script><script src="/content/assets/d1f5709.js" defer></script><script data-n-head="ssr" src="/content/assets/raw/js/chartbeat.js" data-body="true" defer></script><script data-n-head="ssr" src="/content/assets/raw/js/spam-protection-eloqua.js" data-body="true" defer></script><script data-n-head="ssr" src="https://static.chartbeat.com/js/chartbeat_mab.js" data-body="true" defer></script> equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: ssl.p.jwpcdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pardot.com
Source: global traffic	DNS traffic detected: DNS query: pi.pardot.com
Source: global traffic	DNS traffic detected: DNS query: www.morningstar.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: static.chartbeat.com
Source: global traffic	DNS traffic detected: DNS query: mab.chartbeat.com
Source: global traffic	DNS traffic detected: DNS query: mwc-cdn.morningstar.com
Source: global traffic	DNS traffic detected: DNS query: video.morningstar.com
Source: global traffic	DNS traffic detected: DNS query: cdn.contentstack.io
Source: global traffic	DNS traffic detected: DNS query: facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent-msp1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: linkedin.com
Source: global traffic	DNS traffic detected: DNS query: static.licdn.com
Source: global traffic	DNS traffic detected: DNS query: li.protechts.net
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: client.protechts.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxdojv695v.protechts.net
Source: global traffic	DNS traffic detected: DNS query: stk.protechts.net
Source: global traffic	DNS traffic detected: DNS query: platform.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: unknown

HTTP traffic detected: POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2854 HTTP/1.1Host: www.facebook.comConnection: keep-aliveContent-Length: 132sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedsec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.facebook.comSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/morningstardbrsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sb=p_D-Zh--GJHPl3ZPSpt6m5y6

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET, HEADAccess-Control-Max-Age: 3000Date: Thu, 03 Oct 2024 19:29:35 GMTServer: AmazonS3X-Cache: Error from cloudfrontVia: 1.1 6b25d4ce9efa3f2699980e1915129606.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P4X-Amz-Cf-Id: rPrWqxP84iILMAFzY06ygIdHnUsoFegQKt5TqiARE7gaTlqk-4NyOw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET, HEADAccess-Control-Max-Age: 3000Date: Thu, 03 Oct 2024 19:29:37 GMTServer: AmazonS3X-Cache: Error from cloudfrontVia: 1.1 6b25d4ce9efa3f2699980e1915129606.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P4X-Amz-Cf-Id: OZXe1BwI5Km0AKxOnYz3GUr0bG7MsqVV9VwGyy9YOa6-1Eh2xXrhNw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: WcRLKTActgL/Z6IUTIGfBw5IQLbOOKmZSfc+bzu4UyOcOsdbluoyM03Odcd67naBRQFD8ZtU92mKaW+/Ik3bGw==Date: Thu, 03 Oct 2024 19:29:53 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: MAHSwyHrXIzKnO5oDFATTs4UnXv9sk2Zn598akfd0qN5y9eFyLIRAIuQ0Q52tf2jafMp9+99Ec1ZbmboQdJM7g==Date: Thu, 03 Oct 2024 19:29:54 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 6tRhNqraqf3IROTRgjKZKBdOX3thNvfin3mTP7kFcaXmmMhBI2ABE57j+eJb6jVJBRZR9LqvvELYURH3viapFg==Date: Thu, 03 Oct 2024 19:29:55 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: YyHP6TzZiwe7WHdXBTrQZXR5iWiP3PZTWQ4XFLDEDnvmCeSl8f3E5+A//rWKeWuhG4eH7RTLhN44GmAnpZntow==Date: Thu, 03 Oct 2024 19:29:56 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1727983797; path=/; domain=.facebook.com; httponlySet-Cookie: datr=p_D-Zq0PAtyiwG9GhTBTIxUC; expires=Fri, 07-Nov-2025 19:29:58 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: P1ZIHB6aPXWg8z9vcOXF2nwTA+LSh+BR/Klk7eY2riz/JSLydphLszO6uC9w8GFo4AYpbaYm6KBjpF86K+zSJA==Date: Thu, 03 Oct 2024 19:29:58 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1727983798; path=/; domain=.facebook.com; httponlySet-Cookie: datr=p_D-Zq0PAtyiwG9GhTBTIxUC; expires=Fri, 07-Nov-2025 19:29:59 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: REn2BXS4WYVOH143Nl3aPbc0BUpx3pf/XyzPEXZXZ/4wOcU+wvjD2eLUhFj0fG0Ko+6md2t3yaxgItpgek+VBg==Date: Thu, 03 Oct 2024 19:29:59 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Dyz9lrwBw+pGz/xBj9rp80UQ6NiGA2pI8HMSZImFOw/E/vHh644WmzvIBBJ0gsFsNvxYKt/gE9WQ5805nyz9vQ==Date: Thu, 03 Oct 2024 19:30:22 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: l2+K1ka5gZldljW2OdZC2tGrJ2a12UkMrkUJ0hZjtFvsyDJj5aBAPUMLhP0J13YWbB6ehhyApD6t/7AsQhxO2A==Date: Thu, 03 Oct 2024 19:30:25 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 03 Oct 2024 19:30:25 GMTContent-Type: text/htmlContent-Length: 1261Connection: closex-fd-int-waf-rule-hits: Microsoft_BotManagerRuleSet-1.1-UnknownBots-Bot300600Cache-Control: no-storex-azure-ref: 20241003T193025Z-15767c5fc55w69c2zvnrz0gmgw0000000bt0000000002k0xX-Cache: CONFIG_NOCACHE
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 03 Oct 2024 19:30:26 GMTContent-Type: text/htmlContent-Length: 1261Connection: closex-fd-int-waf-rule-hits: Microsoft_BotManagerRuleSet-1.1-UnknownBots-Bot300600Cache-Control: no-storex-azure-ref: 20241003T193026Z-15767c5fc55qkvj6n60pxm9mbw00000000ng00000000a8z5X-Cache: CONFIG_NOCACHE
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 03 Oct 2024 19:30:30 GMTContent-Type: text/htmlContent-Length: 1261Connection: closex-fd-int-waf-rule-hits: Microsoft_BotManagerRuleSet-1.1-UnknownBots-Bot300600Cache-Control: no-storex-azure-ref: 20241003T193030Z-15767c5fc55jdxmppy6cmd24bn00000003tg00000000236aX-Cache: CONFIG_NOCACHE
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Thu, 03 Oct 2024 19:31:02 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: c2f37998b7e8e9d6x-rate-limit-limit: 500x-rate-limit-reset: 1727984762x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 8x-connection-hash: ef12fbef158e34f4d0b27fe47e50fb93405cb55a404c427b6402f24574c5755econnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenperf: 7402827104cache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 531889d76e2788f7access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 6x-connection-hash: 427d5a59c1fdf472b4b916c8646cf75341254fcdb74be3f9d35de358ab5963eddate: Thu, 03 Oct 2024 19:31:03 GMTserver: tsa_bconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Thu, 03 Oct 2024 19:31:04 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: d8020ba92b79d177x-rate-limit-limit: 500x-rate-limit-reset: 1727984764x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 14x-connection-hash: 5888a689742fa9811fa3d67c9f44f07d643ab86703ad074e62796d725f15cff6connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: zDiJBAvUujhISXwYvDYHzdQOYWD1U28dFcbsdynGMuwXPVC66SGjZNWDQZzy/8/Xv9rhcCwGKvVE4unrKzQ+Yg==Date: Thu, 03 Oct 2024 19:31:26 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 8R8ZDKgD/F/eSCw0BR9N4jcFPGI5PpAlntC3Xg6saiP06dq0K1Rnq2EkPdaGUzifCkz+gKsUZDfsBTpTQzNvvg==Date: Thu, 03 Oct 2024 19:32:13 GMTTransfer-Encoding: chunked

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\ORA _ Morningstar DBRS.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5484 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5484 --field-trial-handle=2236,i,10874392211096109541,17885969268813435074,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	6 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	4 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Source	Detection	Scanner	Label
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
perimeterx.map.fastly.net	151.101.130.133	true	false	unknown
dualstack.video.twitter.map.fastly.net	146.75.52.158	true	false	unknown
d11n75j4fn6pbc.cloudfront.net	18.239.36.66	true	false	unknown
d3f7zc5bbfci5.cloudfront.net	18.245.67.101	true	false	unknown
tpop-api.twitter.com	104.244.42.66	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
t.co	162.159.140.229	true	true	unknown
d3qtr2hzbikcyh.cloudfront.net	13.32.121.98	true	false	unknown
twimg.twitter.map.fastly.net	146.75.52.159	true	false	unknown
jwplayer-dualstack.map.fastly.net	151.101.130.114	true	false	unknown
facebook.com	157.240.253.35	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
dhms8q85tpugt.cloudfront.net	143.204.98.112	true	false	unknown
scontent-msp1-1.xx.fbcdn.net	157.240.26.27	true	false	unknown
pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com	3.215.172.219	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
twitter.com	104.244.42.1	true	false	unknown
stk.protechts.net	34.107.199.61	true	false	unknown
google.com	142.250.184.238	true	true	unknown
csp.withgoogle.com	142.250.184.209	true	false	unknown
d1wh3f1y53cz4i.cloudfront.net	18.66.147.77	true	false	unknown
video.xx.fbcdn.net	157.240.253.2	true	false	unknown
tpop-api.x.com	104.244.42.2	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
linkedin.com	13.107.42.14	true	false	unknown
cdn.optimizely.com	104.18.65.57	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
www3.l.google.com	142.250.185.110	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	146.75.52.159	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
cs767.wpc.epsiloncdn.net	152.199.22.144	true	false	unknown
cs1404.wpc.epsiloncdn.net	152.199.21.118	true	false	unknown
x.com	104.244.42.193	true	true	unknown
fp2c5c.wac.kappacdn.net	152.195.15.58	true	false	unknown
stun.l.google.com	74.125.250.129	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
static.licdn.com	unknown	unknown	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
static.chartbeat.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
client.protechts.net	unknown	unknown	false	unknown
video.morningstar.com	unknown	unknown	false	unknown
cdn.contentstack.io	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown
cdn.bizible.com	unknown	unknown	false	unknown
platform.linkedin.com	unknown	unknown	false	unknown
pi.pardot.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
www.morningstar.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
mab.chartbeat.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
ssl.p.jwpcdn.com	unknown	unknown	false	unknown
mwc-cdn.morningstar.com	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown
collector-pxdojv695v.protechts.net	unknown	unknown	false	unknown
cdn.pardot.com	unknown	unknown	true	unknown
accounts.youtube.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	true	unknown
li.protechts.net	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3/y-/r/C2nfdIck3tZ.js	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	false		unknown
https://www.morningstar.com/content/assets/raw/js/spam-protection-eloqua.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.2433e2ba.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.1180970a.js	false		unknown
https://static.licdn.com/aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3iO7g4/yI/l/en_GB/T-w2A1SA5Ud.js	false		unknown
https://x.com/MorningstarDBRS	false		unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.ProfileSidebar.2b5e5e2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.e5c7ed2a.js	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3i19e4/yG/l/en_GB/H0x5vUzY7O-.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.LiveEvent~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle..5b89ca6a.js	false		unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=c&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.d0bbc1ea.js	false		unknown
https://pbs.twimg.com/profile_images/1676605454384865284/meYB_6Du_200x200.jpg	false		unknown
https://www.morningstar.com/content/assets/fonts/3b5a7b6a-e026-4ee8-b80f-6aa5e44b2977.c576c22.woff	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5455e27a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.7c0c4f4a.js	false		unknown
https://www.morningstar.com/content/assets/fonts/21ca819a-38ec-4f58-92d9-107d0f271416.a92696e.woff	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.bbc1529a.js	false		unknown
https://www.morningstar.com/content/assets/fonts/632eeeb1-e81b-472c-87cc-6ec84f44c7b2.7ee1104.woff	false		unknown
https://cdn.cookielaw.org/scripttemplates/202409.1.0/otBannerSdk.js	false		unknown
https://www.morningstar.com/content/assets/css/aecbc47.css	false		unknown
https://static.licdn.com/aero-v1/sc/h/45kkp4tfrx0qs4juyjxzjhoww	false		unknown
https://x.com/x/migrate	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	false		unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=m&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.d4c05fca.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.8d67843a.js	false		unknown
https://static.licdn.com/aero-v1/sc/h/dlsxttngzb5nlbenn9hct35rq	false		unknown
https://linkedin.com/company/morningstardbrs	false		unknown
https://scontent-msp1-1.xx.fbcdn.net/v/t1.6435-9/46315233_1891826374257880_7048247967907577856_n.jpg?stp=dst-jpg_s160x160&_nc_cat=107&ccb=1-7&_nc_sid=e8b6d3&_nc_ohc=qpIBGDuyvXQQ7kNvgFG3DSo&_nc_ht=scontent-msp1-1.xx&_nc_gid=AtQZsqZ7oJly2TFcw8HB8yI&oh=00_AYBYgEyRMxTfeZYU7RgpIbJryopR76QnNOb7WvY5n58cEw&oe=672650F7	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3icLI4/yA/l/en_GB/A6aUiKMNJgd.js	false		unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=3&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3	false		unknown
https://static.licdn.com/aero-v1/sc/h/5qa1f22mxd8ig3o5g568vo59	false		unknown
https://www.google.com/favicon.ico	false		unknown
https://twitter.com/MorningstarDBRS	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.20a474da.js	false		unknown
https://static.licdn.com/aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.8137c55a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.1004095a.js	false		unknown
https://stk.protechts.net/ns?c=c6155b40-81ca-11ef-bf9b-f7b138d21952	false		unknown
https://pbs.twimg.com/profile_banners/1852136940/1672840936/600x200	false		unknown
https://www.morningstar.com/content/assets/img/mdc.05b2cf0.svg	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://www.morningstar.com/content/assets/raw/js/chartbeat.js	false		unknown
https://www.morningstar.com/content/assets/0be1a28.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3iBAG4/yw/l/en_GB/fbI1vKnc9QM.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.f013ad8a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.TimelineCardHandler.4010b5aa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.3b27748a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.Ocf.d7cc349a.js	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yd/r/_at8rCNG77_.js	false		unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19999.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7421633837391497971&__req=f&__rev=1017027644&__s=ybz0xo%3Aupbteh%3Aa6mkpo&__spin_b=trunk&__spin_r=1017027644&__spin_t=1727983783&__user=0&dpr=1&jazoest=2854&lsd=AVor69eHa-4&ph=C3	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://underscorejs.org	chromecache_721.2.dr, chromecache_457.2.dr	false	URL Reputation: safe	unknown
https://support.x.com/articles/14016	chromecache_733.2.dr, chromecache_725.2.dr	false		unknown
https://play.google.com/work/enroll?identifier=	chromecache_882.2.dr, chromecache_808.2.dr	false		unknown
https://images.contentstack.io/v3/assets/blt4eb669caa7dc65b2/blt785c6c4964056838/615dd18c2b3bb345f7e	chromecache_768.2.dr, chromecache_736.2.dr	false		unknown
https://dbrs.morningstar.com/research/368411	ORA _ Morningstar DBRS.html	false		unknown
https://www.morningstar.com/company/corporate-sustainability	chromecache_735.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.	chromecache_789.2.dr, chromecache_788.2.dr	false		unknown
https://px.ads.linkedin.com/collect?	chromecache_936.2.dr	false	URL Reputation: safe	unknown
https://dbrs-logo.s3.amazonaws.com/mstar-dbrs-logo-4x3-FFF.png	ORA _ Morningstar DBRS.html	false		unknown
https://www.dbrsmorningstar.com/research/359905.	ORA _ Morningstar DBRS.html	false		unknown
https://www.internalfb.com/intern/invariant/	chromecache_900.2.dr, chromecache_924.2.dr	false	URL Reputation: safe	unknown
https://youradchoices.ca/	chromecache_595.2.dr, chromecache_544.2.dr	false	URL Reputation: safe	unknown
https://www.morningstar.com/business/brands/esg	chromecache_735.2.dr	false		unknown
https://newsroom.morningstar.com/newsroom/overview/default.aspx	chromecache_735.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_919.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_919.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.da47f7da.js.m	chromecache_771.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_919.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.	chromecache_512.2.dr, chromecache_750.2.dr	false		unknown
https://www.morningstar.com/business/brands/credit	chromecache_735.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_662.2.dr, chromecache_846.2.dr	false	URL Reputation: safe	unknown
https://dbrs.morningstar.com/research/419592.	ORA _ Morningstar DBRS.html	false		unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_919.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_919.2.dr	false		unknown
https://www.morningstar.com/company/financial-advisor	chromecache_768.2.dr, chromecache_736.2.dr	false		unknown
https://www.morningstar.com/business/brands/retirement	chromecache_735.2.dr	false		unknown
https://fburl.com/wiki/xrzohrqb	chromecache_731.2.dr, chromecache_915.2.dr	false	URL Reputation: safe	unknown
https://www.morningstar.com/business/segments/asset-managers	chromecache_735.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_919.2.dr	false	URL Reputation: safe	unknown
https://www.morningstar.com/views/podcasts/for-enterprise-wealth-advisors	chromecache_735.2.dr	false		unknown
https://www.morningstar.com/business/brands/wealth/products/morningstar-office	chromecache_735.2.dr	false		unknown
https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t	chromecache_1008.2.dr, chromecache_523.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_919.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_428.2.dr, chromecache_558.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.f6	chromecache_873.2.dr, chromecache_758.2.dr	false		unknown
https://x.com/en/privacy	chromecache_798.2.dr, chromecache_582.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_826.2.dr, chromecache_807.2.dr, chromecache_946.2.dr, chromecache_689.2.dr, chromecache_867.2.dr, chromecache_472.2.dr, chromecache_581.2.dr, chromecache_889.2.dr, chromecache_559.2.dr, chromecache_996.2.dr	false	URL Reputation: safe	unknown
https://x.com/i/broadcasts/$	chromecache_553.2.dr, chromecache_420.2.dr	false		unknown
https://images.contentstack.io/v3/assets/blt4eb669caa7dc65b2/blt8222966181178867/615dd18c61167f5652f	chromecache_768.2.dr, chromecache_736.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.e8d0899a.	chromecache_772.2.dr, chromecache_577.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png	chromecache_919.2.dr	false		unknown
https://www.morningstar.com/products	chromecache_735.2.dr, chromecache_590.2.dr	false		unknown
https://meet.google.com	chromecache_626.2.dr, chromecache_888.2.dr	false	URL Reputation: safe	unknown
http://ogp.me/ns#%22%7D%7D	chromecache_735.2.dr, chromecache_590.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.67.101	d3f7zc5bbfci5.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.130.133	perimeterx.map.fastly.net	United States	54113	FASTLYUS	false
152.199.21.118	cs1404.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
146.75.52.159	twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
146.75.52.158	dualstack.video.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
151.101.194.114	unknown	United States	54113	FASTLYUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
18.66.147.77	d1wh3f1y53cz4i.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
157.240.26.27	scontent-msp1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	true
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.65.57	cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
52.222.169.19	unknown	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
142.250.185.113	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.35	facebook.com	United States	32934	FACEBOOKUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
18.208.125.13	unknown	United States	14618	AMAZON-AESUS	false
151.101.130.114	jwplayer-dualstack.map.fastly.net	United States	54113	FASTLYUS	false
104.18.66.57	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
152.195.15.58	fp2c5c.wac.kappacdn.net	United States	15133	EDGECASTUS	false
3.215.172.219	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
18.239.36.66	d11n75j4fn6pbc.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.184.209	csp.withgoogle.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
34.107.199.61	stk.protechts.net	United States	15169	GOOGLEUS	false
104.244.42.66	tpop-api.twitter.com	United States	13414	TWITTERUS	false
104.244.42.1	twitter.com	United States	13414	TWITTERUS	false
104.244.42.2	tpop-api.x.com	United States	13414	TWITTERUS	false
104.244.42.193	x.com	United States	13414	TWITTERUS	true
13.32.121.98	d3qtr2hzbikcyh.cloudfront.net	United States	16509	AMAZON-02US	false
152.199.22.144	cs767.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
143.204.98.7	unknown	United States	16509	AMAZON-02US	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
143.204.98.112	dhms8q85tpugt.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525209
Start date and time:	2024-10-03 21:28:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ORA _ Morningstar DBRS.html
Detection:	MAL
Classification:	mal56.phis.winHTML@42/937@177/51
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html Browse: https://www.morningstar.com/company/accessibility Browse: https://www.morningstar.com/fr-ca/company/accessibility Browse: https://facebook.com/morningstardbrs Browse: https://linkedin.com/company/morningstardbrs Browse: https://twitter.com/MorningstarDBRS

Input	Output
URL: file:///C:/Users/user/Desktop/ORA%20_%20Morningstar%20DBRS.html Model: jbxai	{ "brand":["Morningstar"], "contains_trigger_text":true, "trigger_text":"Search by Issuer, Research, CUSIP/ IS IN.", "prominent_button_name":"Search by Issuer, Research, CUSIP/ IS IN.", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.morningstar.com/company/accessibility Model: jbxai	{ "brand":["Morningstar"], "contains_trigger_text":true, "trigger_text":"Accessible Customer Service Plans:", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.morningstar.com/company/accessibility Model: jbxai	{ "brand":["Morningstar"], "contains_trigger_text":true, "trigger_text":"Click here to view document", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["Cookie Settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.morningstar.com/company/accessibility Model: jbxai	{ "brand":["Morningstar"], "contains_trigger_text":true, "trigger_text":"L'accessibilit chez Morningstar", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/morningstardbrs Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":true, "trigger_text":"See more on Facebook", "prominent_button_name":"Log in", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/morningstardbrs Model: jbxai	{ "phishing_score":1, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is a well-known brand.", "The URL 'www.facebook.com' matches the legitimate domain name for Facebook.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The input fields 'Email address or phone number' are typical for a login page on Facebook."], "brand_matches":[true], "url_match":true, "brand_input":"Facebook", "input_fields":"Email address or phone number"}

URL: https://www.morningstar.com/fr-ca/company/accessibility Model: jbxai	{ "brand":["Morningstar"], "contains_trigger_text":true, "trigger_text":"L'accessibilit chez Morningstar", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/morningstardbrs Model: jbxai	{ "brand":["facebook", "Morningstar DBS"], "contains_trigger_text":true, "trigger_text":"See more on Facebook", "prominent_button_name":"Log in", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS Model: jbxai	{ "brand":["Google", "Apple"], "contains_trigger_text":true, "trigger_text":"Sign in to X", "prominent_button_name":"Next", "text_input_field_labels":["Phone", "email", "username"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/morningstardbrs Model: jbxai	{ "phishing_score":1, "brands":"facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The URL 'www.facebook.com' matches the legitimate domain name for the brand 'Facebook'.", "Facebook is a well-known brand with a widely recognized domain.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email address or phone number' are typical for a login page on Facebook."], "brand_matches":[true], "url_match":true, "brand_input":"facebook", "input_fields":"Email address or phone number"}

URL: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS Model: jbxai	{ "phishing_score":9, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand 'Google' is well-known and its legitimate domain is 'google.com'.", "The provided URL 'x.com' does not match the legitimate domain for Google.", "The URL 'x.com' is very short and does not contain any reference to Google, which is suspicious.", "The presence of input fields requesting sensitive information like 'Phone' on a non-Google domain increases the risk of phishing."], "brand_matches":[false], "url_match":true, "brand_input":"Google", "input_fields":"Phone"}

URL: https://x.com/i/flow/login?redirect_after_login=%2FMorningstarDBRS Model: jbxai	{ "brand":["Google", "Apple"], "contains_trigger_text":true, "trigger_text":"Sign in with Google", "prominent_button_name":"Next", "text_input_field_labels":["Phone", "email", "username"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.245.67.101	https://www.google.com/url?rct=j&sa=t&url=https://www.wistv.com/2024/09/18/how-register-vote-sc/&ct=ga&cd=CAEYACoUMTE1ODk5MTgyNjc5Mjk4MDkxNDYyHGQ3YWE0YjIyZjk5ZTBkYTg6Y29tOmVuOlVTOlI&usg=AOvVaw2u71nyB5_za_kch4LRgAMu	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?rct=j&sa=t&url=https://www.wistv.com/2024/09/18/how-register-vote-sc/&ct=ga&cd=CAEYAyoTNDI3NTE2NDk3MjQxMjk2MDMxNTIaZjdkMjBhNTQwODRiMzY2OTpjb206ZW46VVM&usg=AOvVaw2u71nyB5_za_kch4LRgAMu	Get hash	malicious	Unknown	Browse
	https://webmail_280604415.bsd517.com/003060192cloudstore-309398439?data=cybersecurity@itv.com	Get hash	malicious	HTMLPhisher	Browse
	http://thenonphonewfhnetwork.com/.rice/	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=https://www.google.com/url?q%3DdCSMjVnvsqsqaP8pEWWm%26rct%3DSpPq9HncUaCXUtCZusX0%26sa%3Dt%26esrc%3DuZR6jk9A67Rj7RZhLuPE%26source%3D%26cd%3Deh0xIKCKpKh7i4kTt26p%26cad%3DVEVtMkQKVNr1KW4fxShi%26ved%3DNTDACygNXetEDbRT8YiY%26uact%3D%2520%26url%3Damp%252Fzarafetbayankuafor%252Ecom%252F.rr%252F&s	Get hash	malicious	Unknown	Browse
	D0F48A0632B6C451791F4257697E861961F06A6F.html	Get hash	malicious	Unknown	Browse
	http://xsdrt.hanslot88gacor.com/4fBcna16686hpgN1202wmiembuhsb14569WJUNFCAXDHLQZZY1707NPBU18900N17	Get hash	malicious	Unknown	Browse
	http://eedqt.foruskw.com/4lAabg16572cnef1382rzkeufeqnp14569ZZZRNPUIWFYUECM7379HVKJ18607i18	Get hash	malicious	Unknown	Browse
	https://www.amazon.verification.universalmotors.com.tn/	Get hash	malicious	Unknown	Browse
	http://pflwh.pomeryan.com/4HpNTt15553xtqa1382knsykfmuvm25912PUWUJAJOPLPWWDM2837EWZP17387i18	Get hash	malicious	Unknown	Browse
151.101.130.133	https://ebookkeepers.com.pk/	Get hash	malicious	Unknown	Browse
	https://demo.services.docusign.net/webforms-ux/v1.0/forms/10bc61c9dc8dd4ea79884f1c0703f644	Get hash	malicious	HTMLPhisher	Browse
	https://clickme.thryv.com/ls/click?upn=u001.qbfGuC-2BYjR7x2HD-2FSqsgG3wNT7iuCXOa8RsaW1sEZQ2Ai07k2sqLH8KlQaI9UJoveQXD2-2FZjz0PrqySGkZt29Yir1nLg4GD8U51m1QocK7o5YwVSY83PaBCPqiR8CYFKHsTQ_eHO4CCz1a1pkvjYpIWB4y7JicQi4pRhdkGSRW0JefwO3RgLXgR7CMsN4dpAeGpKoFjtBODGSiou2fASe9aGzhMaZWRW7YTOjWnCQTX7nM5g3lO-2BB3qUvsuyrcn-2FiE1CgRdy-2FuXOdfuFHI0kVFSM4cU2Vpan1AdMUx3LkE7bkGSUXcKl5NIJOjg4iamMyVM2Vhx7YXexWCOb9JbcOfyO2Sw-3D-3D	Get hash	malicious	Unknown	Browse
	https://www.beautiful.ai/player/-O7-cGs_osrOld7vo1WV	Get hash	malicious	HtmlDropper	Browse
	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse
	https://www.targobank-kontowechselservice.de/	Get hash	malicious	Unknown	Browse
	http://chiao1129.github.io/login	Get hash	malicious	HTMLPhisher	Browse
	http://vineethkinik.github.io/Netflix-wesite-frontend	Get hash	malicious	HTMLPhisher	Browse
	https://www.bettercaremarket.com.au/pill-bottle-opener-with-magnifier-aidapt.html?comet_source=google&comet_network=x&comet_campaign=20867905123&comet_ad_group=&comet_ad_id=&comet_keyword=&comet_type=smart&gad_source=1&gclid=EAIaIQobChMIqcj6sY-ZhwMV5tgWBR0YswpVEAQYASABEgJi9fD_BwE	Get hash	malicious	Unknown	Browse
	https://www.unitek-products.com/products/1-5m-hdmi-v2-1-cable	Get hash	malicious	Unknown	Browse
152.199.21.118	http://www.etissallatss.com/	Get hash	malicious	Unknown	Browse
	https://netflix-sigma-two.vercel.app/	Get hash	malicious	HTMLPhisher	Browse
	http://www.institutoitf.cl/nn/	Get hash	malicious	HTMLPhisher	Browse
	https://www.boutique-insights.com/	Get hash	malicious	Unknown	Browse
	https://facebooksecurity.blogspot.my/	Get hash	malicious	Unknown	Browse
	https://t.co/yuxfZm8KPg?amp=1	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0 - 2024-09-19T093336.425.eml	Get hash	malicious	HTMLPhisher	Browse
	http://moodys-local.com	Get hash	malicious	Unknown	Browse
	https://www.targobank-kontowechselservice.de/	Get hash	malicious	Unknown	Browse
	https://www.lsswis.org/	Get hash	malicious	Unknown	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	http://usaf.gov.ss	Get hash	malicious	Unknown	Browse	52.214.104.135
	https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108	Get hash	malicious	Phisher	Browse	34.215.34.228
	http://reviewnewdocuments.wordpress.com/	Get hash	malicious	Unknown	Browse	54.155.18.159
	75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb.7z	Get hash	malicious	Unknown	Browse	3.160.150.62
	https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845	Get hash	malicious	Unknown	Browse	54.72.136.225
	https://trello.com/c/HA4sCE32	Get hash	malicious	HTMLPhisher	Browse	13.224.103.48
	1.cmd	Get hash	malicious	Unknown	Browse	54.77.225.185
	2.cmd	Get hash	malicious	Unknown	Browse	18.203.170.139
	KpCJCaQswCshdLQFFKLtCbGdhL.ps1	Get hash	malicious	Unknown	Browse	18.245.46.25
	sostener.vbs	Get hash	malicious	Njrat	Browse	52.217.142.185
FASTLYUS	https://www.ccjm.org/highwire_log/share/mendeley?link=https://onpro.info	Get hash	malicious	Unknown	Browse	151.101.194.137
	3wtD2jXnxy.exe	Get hash	malicious	RedLine, STRRAT	Browse	199.232.196.209
	https://www.calameo.com/read/0077804248b46bb5a7c19	Get hash	malicious	HtmlDropper	Browse	151.101.66.137
	https://u9313450.ct.sendgrid.net/ls/click?upn=u001.ZfA-2BqTl2mXIVteOCc-2BANg-2BtYQAbYWaU-2BKDDWa611GxHig-2BgElXnUy1eAOeNoTI9ToS9WuAxRUdR21lAIsTPE0g-3D-3Dd8kL_bf4JG6rVotaFp8XsYJMcbHq5p6ju5xz6OkJFWJQMhev1YsQkFFV7zJr96yz5256BnjjwP-2FrVNKeomJDukUeXnM2-2FUbrpvrFpNFdN8Hxo-2B8NA1G5PPzQiWnVnq4RPrf4MxseS-2FjeJBGe3OOYXNXxDmns1gfYeFwrIC6tXtQ3KJv23PKABAyqpBB-2FnsXl7BropPMbry14s3UYpaAeg1aJih0NQeQpVSOm5MBDYOXEHCyJCtLrpoW6SuZeJlGeeWyYAhbotSAdFsjwH5JN5fjIYp-2BMzHm9VPykPI2oeKmW91mIcQqO5YJ1dVv925b7N0T1v	Get hash	malicious	Unknown	Browse	151.101.65.195
	http://reviewnewdocuments.wordpress.com/	Get hash	malicious	Unknown	Browse	151.101.129.140
	https://links.truthsocial.com/link/113203933939427541	Get hash	malicious	Unknown	Browse	151.101.194.137
	Notaire-document.html	Get hash	malicious	Unknown	Browse	151.101.66.137
	voicemaiVOIP_1002202474911222280000000082autoresponse.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://trello.com/c/HA4sCE32	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Phisher	Browse	151.101.194.137
EDGECASTUS	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	voicemaiVOIP_1002202474911222280000000082autoresponse.htm	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://technopro-bg.com/redirect.php?action=url&goto=mairie-espondeilhan.com&osCsid=m24rb0l158b8m36rktotvg5ti2	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Message_2484922.eml	Get hash	malicious	Unknown	Browse	93.184.221.240
	https://terryatchison-my.sharepoint.com/:f:/g/personal/terry_terryatchison_com_au/ElPLLTBYg_xBi3psE6F6HW0BDiAPLHOUdwoTRpPTGgsocg?e=hlVHMO	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.google.com.pe/url?q=Y7AzKRq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kI3xqbL8&sa=t&url=amp%2F%E2%80%8Bfc%C2%ADcid%E3%80%82io/www/%E2%80%8Brosan%C2%ADasidon%C2%ADiotri%C2%ADcologista%E2%80%8B.co%C2%ADm.%C2%ADbr/lo/lo//nJ5u8/Y21jX2FsbF9lbXBsb3llZXNfY29zdGFfcmljYUBjYXRhbGluYS5jb20=$	Get hash	malicious	HtmlDropper	Browse	152.199.21.175
	http://view.flodesk.com/emails/66fd2053af85c99dd55d1461	Get hash	malicious	Unknown	Browse	152.199.21.175
	TRABALHO----PROCESSO0014S55-S440000000S1.msi	Get hash	malicious	AteraAgent	Browse	192.229.221.95
	test.exe	Get hash	malicious	Babadeda	Browse	152.195.19.97
	https://tecvia.ladesk.com/412763-SICHERE-GESCH%C3%84FTSDOKUMENTE	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	carrier_ratecon.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27
	https://www.ccjm.org/highwire_log/share/mendeley?link=https://onpro.info	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	file.exe	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	https://auth-owlting.com/enterprise/core.js	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	https://www.salarytoolint.net/lam/c650d2e0-ca12-4bbd-8ff2-35011d35d0af/a717ea91-20df-42de-8c6b-2dc111827916/c05902dd-1112-4a4c-81f2-0bf48471902f/login?id=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	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 184.28.90.27
	https://www.calameo.com/read/0077804248b46bb5a7c19	Get hash	malicious	HtmlDropper	Browse	172.202.163.200 184.28.90.27
	http://usaf.gov.ss	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27
	file.exe	Get hash	malicious	Credential Flusher	Browse	172.202.163.200 184.28.90.27
	https://livelovelead.coach/wp-admin/readme.html	Get hash	malicious	Phisher	Browse	172.202.163.200 184.28.90.27

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6237)
Category:	dropped
Size (bytes):	97736
Entropy (8bit):	5.2677513907579305
Encrypted:	false
SSDEEP:	768:ZyYYZ3dnEzvtQMBB5J1pVeWNuz2U35x7pbXp6R91I9OArZ9WAdiX6aWelok7lokf:ZydZ2RQM9mqVTBWLkP
MD5:	1A1E7845F5CE1E5589C0D661D7D393AE
SHA1:	D7BC4556E7F4FBFB6966D2F1EAAC92AFEFCB4469
SHA-256:	CDB76062B2D312F85585A9FC8E365D45AC792D20697749FB2FC3E7A4306564EA
SHA-512:	479C8CED0CEC869CFAB7A5DC4421D5E8930190A37EFA9C1BEAC734C35E72A8BABF23A5D1341382BAF576379B9CEF03EA4D50E3EE03AA9196523BFE18E81F2DAE
Malicious:	false
Reputation:	low
Preview:	;/FB_PKG_DELIM/..__d("ArrowLeftOutline24.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 24 24",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-444 -204)",children:i.jsxs("g",{fillRule:"nonzero",children:[i.jsx("path",{d:"M99.78 56.78a.75.75 0 0 0-1.06-1.06l-6.25 6.25a.75.75 0 0 0 0 1.06l6.25 6.25a.75.75 0 0 0 1.06-1.06l-5.72-5.72 5.72-5.72z",transform:"translate(355 153.5)"}),i.jsx("path",{d:"M109 61.75H93.625a.75.75 0 1 0 0 1.5H109a.75.75 0 1 0 0-1.5z",transform:"translate(355 153.5)"})]})})]}))}a.displayName=a.name+" [from "+f.id+"]";a._isSVG=!0;b=a;g["default"]=b}),98);.__d("BaseMenuFocusGroup",["fbt","CometComponentWithKeyCommands.react","CometKeys","FocusGroup.react","focusScopeQueries","react"],(function(a,b,c,

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (30272), with CRLF line terminators
Entropy (8bit):	5.2139315871156535
TrID:	Scalable Vector Graphics (18501/1) 17.79% HyperText Markup Language (15015/1) 14.43% HyperText Markup Language with DOCTYPE (12503/2) 12.02% HyperText Markup Language (12001/1) 11.54% HyperText Markup Language (12001/1) 11.54%
File name:	ORA _ Morningstar DBRS.html
File size:	886'414 bytes
MD5:	34ac2b1689ae0d34c67544106a16e586
SHA1:	a9638e240c7b214b85eba38445c3224a7a54f5db
SHA256:	f7771ac212e5a21810ff6d73bcee4e753a56ebbeefa30bdd0eb332dd4ce295a4
SHA512:	8206e3aa40826720ba8069746b6c962c755637cd4f1ef0f23326d14c0d153688d57b5a82645f16b4490a2398ca833a959e08ef850fcc02fd2a72ec30f8963c5b
SSDEEP:	6144:s5fSu1GeLn2V3H1JbWFLwvuAsPQADgbbzcuOFL9mh/KFdMXRypxe8UM2FvjREFHP:Gba1JxsYjbz55VyMXRypxhU1jREeUP
TLSH:	851508773363363E2D42329A6147A68251EDC2C58329D4E8639CC01DA6CAD1DFEF2E5D
File Content Preview:	<!DOCTYPE html><html lang=en><head>..<meta charset=utf-8>..<title>ORA \| Morningstar DBRS</title>..<base href=/ >..<meta name=viewport content="width=device-width">..<meta name=image property=og:image content=https://dbrs-logo.s3.amazonaws.com/mstar-dbrs-l

Timestamp	Bytes transferred	Direction	Data
Oct 3, 2024 21:29:03.781646013 CEST	272	OUT	GET /pd.js HTTP/1.1 Host: cdn.pardot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 3, 2024 21:29:04.421246052 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1988 Connection: keep-alive Date: Thu, 18 Jul 2024 23:31:15 GMT Last-Modified: Thu, 18 Jul 2024 05:30:01 GMT ETag: "15f4-gzip" Accept-Ranges: bytes Cache-Control: max-age=63072000 Expires: Sat, 18 Jul 2026 23:31:15 GMT Content-Encoding: gzip X-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: fY3PZNYaWZC1oSGR7OkboEwuJXmU-W-HPnGByK6-CXDp80Wc45VRUw== Age: 6638269 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 58 6d 6f db 38 12 fe bc fd 15 0a 3f b8 d2 4a 71 e3 b6 c0 01 f6 f2 82 d4 2d f6 72 e8 b6 c1 36 d9 2f 41 60 30 d2 d8 66 2c 93 3a 8a 72 6a c4 fe ef 37 24 f5 6a 3b 76 01 03 96 c8 99 87 f3 ce 19 bd fb fd ec cd 6f 7f 31 b5 00 cd c5 cc 1b a7 b2 48 bc ab 38 96 85 d0 de 17 31 63 33 58 82 d0 6f f3 d6 8b 77 ab 58 bc 00 e5 fd 97 ad 58 1e 2b 9e 69 ef dc 7b 7f f1 fe c3 f9 c5 c7 f3 c1 07 6f 30 18 be ff 38 fc f8 af 37 bf 5d 4f bd b5 2c de 2a f0 98 f0 58 e2 3d a6 d2 70 46 ee c1 d3 73 f0 ee fe be f6 a4 48 d7 7d ef b3 14 6f 75 6b 27 91 4b c6 45 ff cd ef ef de 4c 0b 11 6b 2e 85 17 cf 21 5e 7c 63 4b c8 33 16 83 0f c1 cb 54 2a 7f c5 94 a7 29 f4 f3 2c e5 da 27 7d 12 44 8a 3e 73 91 c8 e7 88 d3 8b 11 ff 43 f7 53 10 33 3d 1f f1 30 0c 5e 0c 3d a3 fa 9e 3f 8c d4 3d 7b d8 6c 7c f3 47 5f b6 86 cf 3c 6e b7 f5 89 33 d0 37 4c 25 52 df a9 d4 77 ac 40 49 c6 fb 99 5d ed c7 72 49 46 0a 74 a1 04 c9 b5 42 2b 12 4a f5 3a 03 39 f5 32 fe 1f 99 6b 81 e2 f6 7a 3e d0 e6 35 88 7c 32 d7 3a cb 87 48 9c c8 b8 30 76 [TRUNCATED] Data Ascii: Xmo8?Jq-r6/A`0f,:rj7$j;vo1H81c3XowXX+i{o087]O,X=pFsH}ouk'KELk.!^\|cK3T),'}D>sCS3=0^=?={l\|G_<n37L%Rw@I]rIFtB+J:92kz>5\|2:H0v2eIGH\|yxTTKHur>+/\|yWOd'\|^LY9 6wqFmZRzqJF4v_##JC5FHizFeE@")u^X/A+mI2]4Af_bH.tpfiaRZ[.a1`PHRDF$5QUT-hc@
Oct 3, 2024 21:29:04.422379971 CEST	811	IN	Data Raw: 99 c9 ee 53 15 58 38 7e 1c 2e 56 80 a9 be 82 1a 8e 77 e1 aa 7d ca 1d 1c 3b 0e b7 64 3a 9e 1b 37 d6 78 ac 8b 57 13 50 e6 00 c5 71 c0 05 ac 9f a5 6a b4 15 5d b8 72 9b 0a 07 96 1d 07 13 a0 91 7a 51 83 65 5d b0 72 9b 66 0e 2c 3e 0e 96 c0 8a c7 8d 9e Data Ascii: SX8~.Vw};d:7xWPqj]rzQe]rf,>q8x%E\++9;w4?aL\|%<v\dNoy2Z}ymZc{v8\`{-pr;&nKHxA.d~2ji(h j
Oct 3, 2024 21:29:04.511846066 CEST	548	IN	Data Raw: d9 51 c6 f4 bc 61 25 58 38 82 ad ed f2 f8 3f a0 72 14 93 92 41 ff a2 ff be c9 0a 8c 4f 7a d1 0e 6d 2b ef 95 52 6c 3d 6a 26 d4 20 6a 05 77 ad 32 94 93 6b 2d ff ff 0a 50 eb 1f 90 42 8c 73 e4 55 9a 06 bb b1 b1 4b 60 06 fe 10 5c 9d d4 a7 8a 07 b3 df Data Ascii: Qa%X8?rAOzm+Rl=j& jw2k-PBsUK`\L>]i4c&qo6$hqJY-\NxAY~mSsT2yHW^ B857}]0fdO9qN$
Oct 3, 2024 21:29:49.551328897 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:30:34.734687090 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:31:19.836945057 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:32:04.893385887 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 3, 2024 21:29:05.099303961 CEST	501	OUT	GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=88017&account_id=406542&title=ORA%20%7C%20Morningstar%20DBRS&url=file%3A%2F%2F%2FC%3A%2FUsers%2Fuser%2FDesktop%2FORA%2520_%2520Morningstar%2520DBRS.html&referrer= HTTP/1.1 Host: pi.pardot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 3, 2024 21:29:05.607631922 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:29:05 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 555 Connection: keep-alive set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-pardot-rsp: 0/0/1 p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" set-cookie: visitor_id405542=1088104215; expires=Sun, 12-Jul-2026 19:29:05 GMT; Max-Age=55900800; path=/; domain=.pardot.com set-cookie: visitor_id405542-hash=ac323f8b2e0684d096c513d942a2b1ef3f861e9ad832764e0dd35d5b1d36315345d84c000fd389fee8b8501b32cd64914f1f7057; expires=Sun, 12-Jul-2026 19:29:05 GMT; Max-Age=55900800; path=/; domain=.pardot.com set-cookie: lpv405542=ZmlsZTovLy9DOi9Vc2Vycy9mcm9udGRlc2svRGVza3RvcC9PUkElMjBfJTIwTW9ybmluZ3N0YXIlMjBEQlJTLmh0bWw%3D; expires=Thu, 03-Oct-2024 19:59:05 GMT; Max-Age=1800; path=/ vary: Accept-Encoding,User-Agent content-encoding: gzip X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 54 4d 8f da 30 14 3c c3 af 70 73 80 20 ba c1 f9 24 14 45 95 4a 7b d8 cb 56 da 6d 4f 08 21 c7 7e 01 2f 89 1d d9 66 b5 a8 db ff Data Ascii: TM0<ps $EJ{VmO!~/f
Oct 3, 2024 21:29:05.607647896 CEST	502	IN	Data Raw: 5e 9b ef 56 2d c7 46 8e e2 c4 33 93 e7 99 27 77 ab ad a0 86 4b 81 5a fe 08 ba 95 42 83 3f 40 3f ba 9d 4e cb 9f c0 cc a4 dc 70 f0 fb 2f 5c 73 23 d5 92 b3 04 a7 69 12 f5 df a3 7e 88 f3 3c c4 49 14 a6 f6 2d 4b c6 83 a9 65 dd a6 dd ad 89 5e 3b 2e a1 Data Ascii: ^V-F3'wKZB?@?Np/\s#i~<I-Ke^;.qWyIF0f$"QBe&q4)KYq<<aGe$Lt\|UB>t0A-)q;Z%FiW^NbtCiscA#bQ
Oct 3, 2024 21:29:50.787441969 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:30:35.860683918 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:31:20.952833891 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:32:05.958476067 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 3, 2024 21:29:06.221821070 CEST	501	OUT	GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=88017&account_id=406542&title=ORA%20%7C%20Morningstar%20DBRS&url=file%3A%2F%2F%2FC%3A%2FUsers%2Fuser%2FDesktop%2FORA%2520_%2520Morningstar%2520DBRS.html&referrer= HTTP/1.1 Host: pi.pardot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 3, 2024 21:29:06.860785007 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:29:06 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 556 Connection: keep-alive set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-pardot-rsp: 0/0/1 p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" set-cookie: visitor_id405542=1088104221; expires=Sun, 12-Jul-2026 19:29:06 GMT; Max-Age=55900800; path=/; domain=.pardot.com set-cookie: visitor_id405542-hash=08b1fe8ca397224f12e0e2835b60efe0175781c3c7988f8a626b5c4892fe40f98e62754d0bbc70b408ae00e47a172654d1fc0b74; expires=Sun, 12-Jul-2026 19:29:06 GMT; Max-Age=55900800; path=/; domain=.pardot.com set-cookie: lpv405542=ZmlsZTovLy9DOi9Vc2Vycy9mcm9udGRlc2svRGVza3RvcC9PUkElMjBfJTIwTW9ybmluZ3N0YXIlMjBEQlJTLmh0bWw%3D; expires=Thu, 03-Oct-2024 19:59:06 GMT; Max-Age=1800; path=/ vary: Accept-Encoding,User-Agent content-encoding: gzip X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 54 4d 8f da 30 14 3c c3 af 70 73 80 20 ba c1 09 81 98 a2 a8 52 69 0f 7b d9 4a bb ed 09 21 e4 38 2f e0 25 b1 23 db a0 45 dd fe Data Ascii: TM0<ps Ri{J!8/%#E
Oct 3, 2024 21:29:06.860913992 CEST	503	IN	Data Raw: f7 da 7c 2c 69 d5 e6 d8 c8 51 9c 64 66 fc 3c f3 e4 6e b1 17 cc 70 29 50 cd 1f 41 d7 52 68 f0 07 e8 47 b7 d3 a9 f9 13 98 85 94 3b 0e 7e ff c0 35 37 52 ad 79 1e e3 c9 24 8e fa ef 51 3f c4 84 84 38 8e a2 d0 be 4d e3 64 30 b7 ac 76 da dd 96 ea ad e3 Data Ascii: \|,iQdf<np)PARhG;~57Ry$Q?8Md0vbF$"CDl&l!hMXLfQ1.fQ2se,Y!NhDS#,Q@~.aR2vJdSz}mhl*D-3.(7ywytPI%hCUd5z
Oct 3, 2024 21:29:51.973695040 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:30:37.058849096 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:31:22.151869059 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:32:07.163245916 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 3, 2024 21:29:06.226550102 CEST	272	OUT	GET /pd.js HTTP/1.1 Host: cdn.pardot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 3, 2024 21:29:06.880953074 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1988 Connection: keep-alive Date: Wed, 20 Mar 2024 22:39:09 GMT Last-Modified: Wed, 20 Mar 2024 18:02:01 GMT ETag: "15f4-gzip" Accept-Ranges: bytes Cache-Control: max-age=63072000 Expires: Fri, 20 Mar 2026 22:39:09 GMT Content-Encoding: gzip X-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 adb83a3a3628f104e6d1d9d74c07d92c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P2 X-Amz-Cf-Id: gm1krnFUpZHZYXRTk9PkjlFxsvwMNlpLWCJfIrEsgkkEQHJA0JmcKg== Age: 17009397 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 58 6d 6f db 38 12 fe bc fd 15 0a 3f b8 d2 4a 71 e3 b6 c0 01 f6 f2 82 d4 2d f6 72 e8 b6 c1 36 d9 2f 41 60 30 d2 d8 66 2c 93 3a 8a 72 6a c4 fe ef 37 24 f5 6a 3b 76 01 03 96 c8 99 87 f3 ce 19 bd fb fd ec cd 6f 7f 31 b5 00 cd c5 cc 1b a7 b2 48 bc ab 38 96 85 d0 de 17 31 63 33 58 82 d0 6f f3 d6 8b 77 ab 58 bc 00 e5 fd 97 ad 58 1e 2b 9e 69 ef dc 7b 7f f1 fe c3 f9 c5 c7 f3 c1 07 6f 30 18 be ff 38 fc f8 af 37 bf 5d 4f bd b5 2c de 2a f0 98 f0 58 e2 3d a6 d2 70 46 ee c1 d3 73 f0 ee fe be f6 a4 48 d7 7d ef b3 14 6f 75 6b 27 91 4b c6 45 ff cd ef ef de 4c 0b 11 6b 2e 85 17 cf 21 5e 7c 63 4b c8 33 16 83 0f c1 cb 54 2a 7f c5 94 a7 29 f4 f3 2c e5 da 27 7d 12 44 8a 3e 73 91 c8 e7 88 d3 8b 11 ff 43 f7 53 10 33 3d 1f f1 30 0c 5e 0c 3d a3 fa 9e 3f 8c d4 3d 7b d8 6c 7c f3 47 5f b6 86 cf 3c 6e b7 f5 89 33 d0 37 4c 25 52 df a9 d4 77 ac 40 49 c6 fb 99 5d ed c7 72 49 46 0a 74 a1 04 c9 b5 42 2b 12 4a f5 3a 03 39 f5 32 fe 1f 99 6b 81 e2 f6 7a 3e d0 e6 35 88 7c 32 d7 3a cb 87 48 9c c8 b8 30 76 [TRUNCATED] Data Ascii: Xmo8?Jq-r6/A`0f,:rj7$j;vo1H81c3XowXX+i{o087]O,X=pFsH}ouk'KELk.!^\|cK3T),'}D>sCS3=0^=?={l\|G_<n37L%Rw@I]rIFtB+J:92kz>5\|2:H0v2eIGH\|yxTTKHur>+/\|yWOd'\|^LY9 6wqFmZRzqJF4v_##JC5FHizFeE@")u^X/A+mI2]4Af_bH.tpfiaRZ[.a1`PHRDF$5QUT-hc@
Oct 3, 2024 21:29:06.881102085 CEST	812	IN	Data Raw: ed 99 c9 ee 53 15 58 38 7e 1c 2e 56 80 a9 be 82 1a 8e 77 e1 aa 7d ca 1d 1c 3b 0e b7 64 3a 9e 1b 37 d6 78 ac 8b 57 13 50 e6 00 c5 71 c0 05 ac 9f a5 6a b4 15 5d b8 72 9b 0a 07 96 1d 07 13 a0 91 7a 51 83 65 5d b0 72 9b 66 0e 2c 3e 0e 96 c0 8a c7 8d Data Ascii: SX8~.Vw};d:7xWPqj]rzQe]rf,>q8x%E\++9;w4?aL\|%<v\dNoy2Z}ymZc{v8\`{-pr;&nKHxA.d~2ji(h j
Oct 3, 2024 21:29:06.973442078 CEST	548	IN	Data Raw: d9 51 c6 f4 bc 61 25 58 38 82 ad ed f2 f8 3f a0 72 14 93 92 41 ff a2 ff be c9 0a 8c 4f 7a d1 0e 6d 2b ef 95 52 6c 3d 6a 26 d4 20 6a 05 77 ad 32 94 93 6b 2d ff ff 0a 50 eb 1f 90 42 8c 73 e4 55 9a 06 bb b1 b1 4b 60 06 fe 10 5c 9d d4 a7 8a 07 b3 df Data Ascii: Qa%X8?rAOzm+Rl=j& jw2k-PBsUK`\L>]i4c&qo6$hqJY-\NxAY~mSsT2yHW^ B857}]0fdO9qN$
Oct 3, 2024 21:29:52.042438984 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:30:37.233691931 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:31:22.342863083 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 3, 2024 21:32:07.359411955 CEST	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ORA _ Morningstar DBRS.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 407

Chrome Cache Entry: 408

Chrome Cache Entry: 409

Chrome Cache Entry: 410

Chrome Cache Entry: 411

Chrome Cache Entry: 412

Chrome Cache Entry: 413

Chrome Cache Entry: 414

Windows Analysis Report
ORA _ Morningstar DBRS.html

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:28:59 UTC	506	OUT	GET /player/v/8.7.3/jwplayer.js HTTP/1.1 Host: ssl.p.jwpcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:28:59 UTC	498	IN	HTTP/1.1 200 OK Connection: close Content-Length: 98124 Cache-Control: max-age=31536000, immutable Last-Modified: Tue, 08 Jan 2019 16:36:40 GMT ETag: "614f5ff9a29d3f3fcea688d74017687a" Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Thu, 03 Oct 2024 19:28:59 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740070-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727983739.251305,VS0,VE69 Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 20 4a 57 20 50 6c 61 79 65 72 20 76 65 72 73 69 6f 6e 20 38 2e 37 2e 33 0a 20 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 39 2c 20 4a 57 20 50 6c 61 79 65 72 2c 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 20 0a 20 20 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 61 6e 64 20 69 74 73 20 75 73 65 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 0a 20 20 20 61 6e 64 20 63 6f 6e 64 69 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 69 63 65 6e 73 65 20 61 67 72 65 65 6d 65 6e 74 2e 20 0a 20 20 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 77 70 6c 61 79 65 72 2e 63 6f 6d 2f 74 6f 73 2f 0a 20 20 20 54 68 69 Data Ascii: /*! JW Player version 8.7.3 Copyright (c) 2019, JW Player, All Rights Reserved This source code and its use and distribution is subject to the terms and conditions of the applicable license agreement. https://www.jwplayer.com/tos/ Thi
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 69 6c 6c 73 2e 77 65 62 76 74 74 22 2c 31 33 3a 22 6a 77 70 6c 61 79 65 72 2e 76 72 22 2c 31 34 3a 22 70 72 6f 76 69 64 65 72 2e 61 69 72 70 6c 61 79 22 2c 31 35 3a 22 70 72 6f 76 69 64 65 72 2e 63 61 73 74 22 2c 31 36 3a 22 76 74 74 70 61 72 73 65 72 22 7d 5b 74 5d 7c 7c 74 29 2b 22 2e 6a 73 22 3b 76 61 72 20 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 61 7d 29 7d 2c 35 35 65 33 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 63 29 3b 76 61 72 20 6e 3d 72 5b 74 5d 3b 69 66 28 30 21 3d 3d 6e 29 7b 69 66 28 6e 29 7b 76 61 72 20 69 3d 65 26 26 28 Data Ascii: ills.webvtt",13:"jwplayer.vr",14:"provider.airplay",15:"provider.cast",16:"vttparser"}[t]\|\|t)+".js";var c=setTimeout(function(){s({type:"timeout",target:a})},55e3);function s(e){a.onerror=a.onload=null,clearTimeout(c);var n=r[t];if(0!==n){if(n){var i=e&&(
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 7d 29 2c 6e 2e 64 28 65 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 29 2c 6e 2e 64 28 65 2c 22 4a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 2c 6e 2e 64 28 65 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 7d 29 2c 6e 2e 64 28 65 2c 22 68 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 29 2c 6e 2e 64 28 65 2c 22 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 29 2c 6e 2e 64 28 65 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 65 2c 22 43 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 74 7d 29 2c 6e 2e 64 28 65 2c 22 49 22 2c 66 Data Ascii: ction(){return X}),n.d(e,"e",function(){return W}),n.d(e,"J",function(){return U}),n.d(e,"m",function(){return Y}),n.d(e,"h",function(){return J}),n.d(e,"p",function(){return K}),n.d(e,"c",function(){return G}),n.d(e,"C",function(){return et}),n.d(e,"I",f
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 72 3a 64 26 26 74 2e 6d 61 70 3d 3d 3d 64 3f 74 2e 6d 61 70 28 65 2c 6e 29 3a 28 43 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6f 29 7b 72 2e 70 75 73 68 28 65 2e 63 61 6c 6c 28 6e 2c 74 2c 69 2c 6f 29 29 7d 29 2c 72 29 7d 2c 50 3d 78 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3b 69 66 28 6e 75 6c 6c 3d 3d 74 26 26 28 74 3d 5b 5d 29 2c 70 26 26 74 2e 72 65 64 75 63 65 3d 3d 3d 70 29 72 65 74 75 72 6e 20 72 26 26 28 65 3d 47 28 65 2c 72 29 29 2c 69 3f 74 2e 72 65 64 75 63 65 28 65 2c 6e 29 3a 74 2e 72 65 64 75 63 65 28 65 29 3b 69 66 28 Data Ascii: x=function(t,e,n){var r=[];return null==t?r:d&&t.map===d?t.map(e,n):(C(t,function(t,i,o){r.push(e.call(n,t,i,o))}),r)},P=x,S=function(t,e,n,r){var i=arguments.length>2;if(null==t&&(t=[]),p&&t.reduce===p)return r&&(e=G(e,r)),i?t.reduce(e,n):t.reduce(e);if(
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 76 61 72 20 69 3d 28 6e 3d 7a 28 6e 29 29 2e 63 61 6c 6c 28 72 2c 65 29 2c 6f 3d 30 2c 75 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 75 3b 29 7b 76 61 72 20 61 3d 6f 2b 75 3e 3e 3e 31 3b 6e 2e 63 61 6c 6c 28 72 2c 74 5b 61 5d 29 3c 69 3f 6f 3d 61 2b 31 3a 75 3d 61 7d 72 65 74 75 72 6e 20 6f 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 74 2e 6c 65 6e 67 74 68 21 3d 3d 2b 74 2e 6c 65 6e 67 74 68 26 26 28 74 3d 75 74 28 74 29 29 2c 4b 28 74 2c 65 29 3e 3d 30 29 7d 2c 48 3d 57 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 46 28 74 2c 53 74 28 65 29 29 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 28 74 2c 53 74 28 65 29 29 7d 2c 4a 3d 66 75 6e 63 74 Data Ascii: var i=(n=z(n)).call(r,e),o=0,u=t.length;o<u;){var a=o+u>>>1;n.call(r,t[a])<i?o=a+1:u=a}return o},W=function(t,e){return null!=t&&(t.length!==+t.length&&(t=ut(t)),K(t,e)>=0)},H=W,U=function(t,e){return F(t,St(e))},Y=function(t,e){return _(t,St(e))},J=funct
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 72 6e 20 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6e 29 7d 2c 65 29 7d 2c 72 74 3d 5a 28 6e 74 2c 7b 70 61 72 74 69 61 6c 3a 5a 7d 2c 31 29 2c 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 76 6f 69 64 20 30 2c 69 3d 76 6f 69 64 20 30 2c 6f 3d 76 6f 69 64 20 30 2c 75 3d 6e 75 6c 6c 2c 61 3d 30 3b 6e 7c 7c 28 6e 3d 7b 7d 29 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 21 31 3d 3d 3d 6e 2e 6c 65 61 64 69 6e 67 3f 30 3a 54 74 28 29 2c 75 3d 6e 75 6c 6c 2c 6f 3d 74 2e 61 70 70 6c 79 28 72 2c 69 29 2c 72 3d 69 3d 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 61 7c 7c 21 31 21 3d 3d 6e 2e 6c 65 61 64 69 6e 67 7c 7c 28 61 3d 54 74 29 3b 76 61 72 20 73 3d 65 2d 28 54 74 2d 61 29 3b 72 65 74 75 72 Data Ascii: rn t.apply(null,n)},e)},rt=Z(nt,{partial:Z},1),it=function(t,e,n){var r=void 0,i=void 0,o=void 0,u=null,a=0;n\|\|(n={});var c=function(){a=!1===n.leading?0:Tt(),u=null,o=t.apply(r,i),r=i=null};return function(){a\|\|!1!==n.leading\|\|(a=Tt);var s=e-(Tt-a);retur
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 28 74 29 26 26 21 6a 74 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 7d 2c 6a 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6d 74 28 74 29 26 26 74 21 3d 2b 74 7d 2c 77 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 7c 7c 21 31 3d 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3d 3d 6c 2e 63 61 6c 6c 28 74 29 7d 2c 4f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7d 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 78 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: (t)&&!jt(parseFloat(t))},jt=function(t){return mt(t)&&t!=+t},wt=function(t){return!0===t\|\|!1===t\|\|"[object Boolean]"==l.call(t)},Ot=function(t){return void 0===t},Ct=function(t,e){return f.call(t,e)},kt=function(t){return t},xt=function(t){return function
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 3e 69 26 26 28 72 3d 74 2c 69 3d 61 29 7d 29 2c 72 7d 2c 6d 65 6d 6f 69 7a 65 3a 65 74 2c 6e 6f 77 3a 54 74 2c 6f 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 2c 6e 3d 73 2e 61 70 70 6c 79 28 6f 2c 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 57 28 6e 2c 72 29 7c 7c 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6f 6e 63 65 3a 74 74 2c 70 61 72 74 69 61 6c 3a 5a 2c 70 69 63 6b 3a 6c 74 2c 70 6c 75 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 78 28 74 2c 50 74 28 65 29 29 7d 2c 70 72 6f 70 65 72 74 79 3a 50 74 2c 70 72 6f 70 65 72 74 79 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 Data Ascii: >i&&(r=t,i=a)}),r},memoize:et,now:Tt,omit:function(t){var e={},n=s.apply(o,c.call(arguments,1));for(var r in t)W(n,r)\|\|(e[r]=t[r]);return e},once:tt,partial:Z,pick:lt,pluck:function(t,e){return x(t,Pt(e))},property:Pt,propertyOf:function(t){return null==t
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 2c 6e 2e 64 28 65 2c 22 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 2c 6e 2e 64 28 65 2c 22 7a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 29 2c 6e 2e 64 28 65 2c 22 42 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 3b 76 61 72 20 72 3d 6e 28 30 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e Data Ascii: on(){return I}),n.d(e,"A",function(){return L}),n.d(e,"z",function(){return R}),n.d(e,"B",function(){return D});var r=n(0),i=function(){function t(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.
2024-10-03 19:28:59 UTC	1378	IN	Data Raw: 6e 2e 63 6f 64 65 3d 28 74 26 26 74 2e 63 6f 64 65 7c 7c 30 29 2b 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 29 7b 76 61 72 20 65 3d 74 2e 6e 61 6d 65 2c 6e 3d 74 2e 6d 65 73 73 61 67 65 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 41 62 6f 72 74 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 2f 70 61 75 73 65 2f 2e 74 65 73 74 28 6e 29 3f 4f 3a 2f 6c 6f 61 64 2f 2e 74 65 73 74 28 6e 29 3f 77 3a 6a 3b 63 61 73 65 22 4e 6f 74 41 6c 6c 6f 77 65 64 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 43 3b 63 61 73 65 22 4e 6f 74 53 75 70 70 6f 72 74 65 64 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 79 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 Data Ascii: n.code=(t&&t.code\|\|0)+e,n}function D(t){var e=t.name,n=t.message;switch(e){case"AbortError":return/pause/.test(n)?O:/load/.test(n)?w:j;case"NotAllowedError":return C;case"NotSupportedError":return k;default:return y}}},function(t,e,n){"use strict";n.d(e,"

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:00 UTC	366	OUT	GET /player/v/8.7.3/jwplayer.js HTTP/1.1 Host: ssl.p.jwpcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:29:00 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 98124 Cache-Control: max-age=31536000, immutable Last-Modified: Tue, 08 Jan 2019 16:36:40 GMT ETag: "614f5ff9a29d3f3fcea688d74017687a" Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Age: 272651 Date: Thu, 03 Oct 2024 19:29:00 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890057-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727983740.130537,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 20 4a 57 20 50 6c 61 79 65 72 20 76 65 72 73 69 6f 6e 20 38 2e 37 2e 33 0a 20 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 39 2c 20 4a 57 20 50 6c 61 79 65 72 2c 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 20 0a 20 20 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 61 6e 64 20 69 74 73 20 75 73 65 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 0a 20 20 20 61 6e 64 20 63 6f 6e 64 69 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 69 63 65 6e 73 65 20 61 67 72 65 65 6d 65 6e 74 2e 20 0a 20 20 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 77 70 6c 61 79 65 72 2e 63 6f 6d 2f 74 6f 73 2f 0a 20 20 20 54 68 69 Data Ascii: /*! JW Player version 8.7.3 Copyright (c) 2019, JW Player, All Rights Reserved This source code and its use and distribution is subject to the terms and conditions of the applicable license agreement. https://www.jwplayer.com/tos/ Thi
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 69 6c 6c 73 2e 77 65 62 76 74 74 22 2c 31 33 3a 22 6a 77 70 6c 61 79 65 72 2e 76 72 22 2c 31 34 3a 22 70 72 6f 76 69 64 65 72 2e 61 69 72 70 6c 61 79 22 2c 31 35 3a 22 70 72 6f 76 69 64 65 72 2e 63 61 73 74 22 2c 31 36 3a 22 76 74 74 70 61 72 73 65 72 22 7d 5b 74 5d 7c 7c 74 29 2b 22 2e 6a 73 22 3b 76 61 72 20 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 61 7d 29 7d 2c 35 35 65 33 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 63 29 3b 76 61 72 20 6e 3d 72 5b 74 5d 3b 69 66 28 30 21 3d 3d 6e 29 7b 69 66 28 6e 29 7b 76 61 72 20 69 3d 65 26 26 28 Data Ascii: ills.webvtt",13:"jwplayer.vr",14:"provider.airplay",15:"provider.cast",16:"vttparser"}[t]\|\|t)+".js";var c=setTimeout(function(){s({type:"timeout",target:a})},55e3);function s(e){a.onerror=a.onload=null,clearTimeout(c);var n=r[t];if(0!==n){if(n){var i=e&&(
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 7d 29 2c 6e 2e 64 28 65 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 29 2c 6e 2e 64 28 65 2c 22 4a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 2c 6e 2e 64 28 65 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 7d 29 2c 6e 2e 64 28 65 2c 22 68 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 29 2c 6e 2e 64 28 65 2c 22 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 29 2c 6e 2e 64 28 65 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 65 2c 22 43 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 74 7d 29 2c 6e 2e 64 28 65 2c 22 49 22 2c 66 Data Ascii: ction(){return X}),n.d(e,"e",function(){return W}),n.d(e,"J",function(){return U}),n.d(e,"m",function(){return Y}),n.d(e,"h",function(){return J}),n.d(e,"p",function(){return K}),n.d(e,"c",function(){return G}),n.d(e,"C",function(){return et}),n.d(e,"I",f
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 72 3a 64 26 26 74 2e 6d 61 70 3d 3d 3d 64 3f 74 2e 6d 61 70 28 65 2c 6e 29 3a 28 43 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6f 29 7b 72 2e 70 75 73 68 28 65 2e 63 61 6c 6c 28 6e 2c 74 2c 69 2c 6f 29 29 7d 29 2c 72 29 7d 2c 50 3d 78 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3b 69 66 28 6e 75 6c 6c 3d 3d 74 26 26 28 74 3d 5b 5d 29 2c 70 26 26 74 2e 72 65 64 75 63 65 3d 3d 3d 70 29 72 65 74 75 72 6e 20 72 26 26 28 65 3d 47 28 65 2c 72 29 29 2c 69 3f 74 2e 72 65 64 75 63 65 28 65 2c 6e 29 3a 74 2e 72 65 64 75 63 65 28 65 29 3b 69 66 28 Data Ascii: x=function(t,e,n){var r=[];return null==t?r:d&&t.map===d?t.map(e,n):(C(t,function(t,i,o){r.push(e.call(n,t,i,o))}),r)},P=x,S=function(t,e,n,r){var i=arguments.length>2;if(null==t&&(t=[]),p&&t.reduce===p)return r&&(e=G(e,r)),i?t.reduce(e,n):t.reduce(e);if(
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 76 61 72 20 69 3d 28 6e 3d 7a 28 6e 29 29 2e 63 61 6c 6c 28 72 2c 65 29 2c 6f 3d 30 2c 75 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 75 3b 29 7b 76 61 72 20 61 3d 6f 2b 75 3e 3e 3e 31 3b 6e 2e 63 61 6c 6c 28 72 2c 74 5b 61 5d 29 3c 69 3f 6f 3d 61 2b 31 3a 75 3d 61 7d 72 65 74 75 72 6e 20 6f 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 74 2e 6c 65 6e 67 74 68 21 3d 3d 2b 74 2e 6c 65 6e 67 74 68 26 26 28 74 3d 75 74 28 74 29 29 2c 4b 28 74 2c 65 29 3e 3d 30 29 7d 2c 48 3d 57 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 46 28 74 2c 53 74 28 65 29 29 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 28 74 2c 53 74 28 65 29 29 7d 2c 4a 3d 66 75 6e 63 74 Data Ascii: var i=(n=z(n)).call(r,e),o=0,u=t.length;o<u;){var a=o+u>>>1;n.call(r,t[a])<i?o=a+1:u=a}return o},W=function(t,e){return null!=t&&(t.length!==+t.length&&(t=ut(t)),K(t,e)>=0)},H=W,U=function(t,e){return F(t,St(e))},Y=function(t,e){return _(t,St(e))},J=funct
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 72 6e 20 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6e 29 7d 2c 65 29 7d 2c 72 74 3d 5a 28 6e 74 2c 7b 70 61 72 74 69 61 6c 3a 5a 7d 2c 31 29 2c 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 76 6f 69 64 20 30 2c 69 3d 76 6f 69 64 20 30 2c 6f 3d 76 6f 69 64 20 30 2c 75 3d 6e 75 6c 6c 2c 61 3d 30 3b 6e 7c 7c 28 6e 3d 7b 7d 29 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 21 31 3d 3d 3d 6e 2e 6c 65 61 64 69 6e 67 3f 30 3a 54 74 28 29 2c 75 3d 6e 75 6c 6c 2c 6f 3d 74 2e 61 70 70 6c 79 28 72 2c 69 29 2c 72 3d 69 3d 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 61 7c 7c 21 31 21 3d 3d 6e 2e 6c 65 61 64 69 6e 67 7c 7c 28 61 3d 54 74 29 3b 76 61 72 20 73 3d 65 2d 28 54 74 2d 61 29 3b 72 65 74 75 72 Data Ascii: rn t.apply(null,n)},e)},rt=Z(nt,{partial:Z},1),it=function(t,e,n){var r=void 0,i=void 0,o=void 0,u=null,a=0;n\|\|(n={});var c=function(){a=!1===n.leading?0:Tt(),u=null,o=t.apply(r,i),r=i=null};return function(){a\|\|!1!==n.leading\|\|(a=Tt);var s=e-(Tt-a);retur
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 28 74 29 26 26 21 6a 74 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 7d 2c 6a 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6d 74 28 74 29 26 26 74 21 3d 2b 74 7d 2c 77 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 7c 7c 21 31 3d 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3d 3d 6c 2e 63 61 6c 6c 28 74 29 7d 2c 4f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7d 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 78 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: (t)&&!jt(parseFloat(t))},jt=function(t){return mt(t)&&t!=+t},wt=function(t){return!0===t\|\|!1===t\|\|"[object Boolean]"==l.call(t)},Ot=function(t){return void 0===t},Ct=function(t,e){return f.call(t,e)},kt=function(t){return t},xt=function(t){return function
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 3e 69 26 26 28 72 3d 74 2c 69 3d 61 29 7d 29 2c 72 7d 2c 6d 65 6d 6f 69 7a 65 3a 65 74 2c 6e 6f 77 3a 54 74 2c 6f 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 2c 6e 3d 73 2e 61 70 70 6c 79 28 6f 2c 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 57 28 6e 2c 72 29 7c 7c 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6f 6e 63 65 3a 74 74 2c 70 61 72 74 69 61 6c 3a 5a 2c 70 69 63 6b 3a 6c 74 2c 70 6c 75 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 78 28 74 2c 50 74 28 65 29 29 7d 2c 70 72 6f 70 65 72 74 79 3a 50 74 2c 70 72 6f 70 65 72 74 79 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 Data Ascii: >i&&(r=t,i=a)}),r},memoize:et,now:Tt,omit:function(t){var e={},n=s.apply(o,c.call(arguments,1));for(var r in t)W(n,r)\|\|(e[r]=t[r]);return e},once:tt,partial:Z,pick:lt,pluck:function(t,e){return x(t,Pt(e))},property:Pt,propertyOf:function(t){return null==t
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 2c 6e 2e 64 28 65 2c 22 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 2c 6e 2e 64 28 65 2c 22 7a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 29 2c 6e 2e 64 28 65 2c 22 42 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 3b 76 61 72 20 72 3d 6e 28 30 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e Data Ascii: on(){return I}),n.d(e,"A",function(){return L}),n.d(e,"z",function(){return R}),n.d(e,"B",function(){return D});var r=n(0),i=function(){function t(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.
2024-10-03 19:29:00 UTC	1378	IN	Data Raw: 6e 2e 63 6f 64 65 3d 28 74 26 26 74 2e 63 6f 64 65 7c 7c 30 29 2b 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 29 7b 76 61 72 20 65 3d 74 2e 6e 61 6d 65 2c 6e 3d 74 2e 6d 65 73 73 61 67 65 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 41 62 6f 72 74 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 2f 70 61 75 73 65 2f 2e 74 65 73 74 28 6e 29 3f 4f 3a 2f 6c 6f 61 64 2f 2e 74 65 73 74 28 6e 29 3f 77 3a 6a 3b 63 61 73 65 22 4e 6f 74 41 6c 6c 6f 77 65 64 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 43 3b 63 61 73 65 22 4e 6f 74 53 75 70 70 6f 72 74 65 64 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 79 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 Data Ascii: n.code=(t&&t.code\|\|0)+e,n}function D(t){var e=t.name,n=t.message;switch(e){case"AbortError":return/pause/.test(n)?O:/load/.test(n)?w:j;case"NotAllowedError":return C;case"NotSupportedError":return k;default:return y}}},function(t,e,n){"use strict";n.d(e,"

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 19:29:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=249369 Date: Thu, 03 Oct 2024 19:29:04 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 19:29:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=249443 Date: Thu, 03 Oct 2024 19:29:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-03 19:29:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:13 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TAa4UAAdTndGhAw&MD=XWggzKGg HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 19:29:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 780d3caa-612e-4a84-9342-564538e98eb0 MS-RequestId: 0b97e10e-734a-48fc-9ee2-e8bcfea13186 MS-CV: e6kGk00ye0O2vGUS.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 19:29:13 GMT Connection: close Content-Length: 24490
2024-10-03 19:29:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-03 19:29:13 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:15 UTC	663	OUT	GET /company/accessibility HTTP/1.1 Host: www.morningstar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:29:16 UTC	1655	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 127177 Connection: close Date: Thu, 03 Oct 2024 19:29:16 GMT x-amzn-RequestId: 615a2e0d-7fd6-4838-a5d3-95b65b34a40e referrer-policy: no-referrer-when-downgrade x-xss-protection: 0 x-stack-name: corpmrkt x-frame-options: sameorigin x-amzn-Remapped-content-length: 127177 content-security-policy: frame-ancestors 'self' .optimizely.com .optimizelyedit.com .seismic.com;default-src blob:;base-uri ;img-src data: blob: https://cdn.optimizely.com;script-src * 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com strict-dynamic;script-src-attr 'unsafe-inline';frame-src https://a26989390140.cdn.optimizely.com;connect-src * https://logx.optimizely.com https://.optimizely.com;style-src 'unsafe-inline';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';object-src 'none';upgrade-insecure-requests x-render-time: 127.806ms x-amz-apigw-id: fFqF7GoPoAMEjTg= Cache-Control: max-age=0, s-maxage=300, stale-if-error=3600 x-content-type-options: nosniff ETag: "1f0c9-LnmbfL/9Uxujg6Y/jZ++zZc8pqw" x-powered-by: Express Accept-Ranges: none X-Amzn-Trace-Id: Root=1-66fef08c-3a8b6f9a1d3cd17177fa7bdf;Parent=756620e96b27230c;Sampled=0;Lineage=1:e9900bc1:0 Via: 1.1 da6955a1993e1118f32bcb48c6630c20.cloudfront.net (CloudFront), 1.1 24475cc722041223cf99f56b55432566.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: fssT1pj0CqTgGitbFXZmtM-mYS7fd8hrL3POf85mlXuutziG16B48Q==
2024-10-03 19:29:16 UTC	14729	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 6e 2d 68 65 61 64 2d 73 73 72 20 6c 61 6e 67 3d 22 65 6e 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 25 37 42 25 32 32 6c 61 6e 67 25 32 32 3a 25 37 42 25 32 32 73 73 72 25 32 32 3a 25 32 32 65 6e 25 32 32 25 37 44 2c 25 32 32 70 72 65 66 69 78 25 32 32 3a 25 37 42 25 32 32 73 73 72 25 32 32 3a 25 32 32 6f 67 3a 25 32 30 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 25 32 32 25 37 44 25 37 44 22 3e 0a 20 20 3c 68 65 61 64 20 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 62 73 69 74 65 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 4e 6f 74 69 63 65 20 7c 20 4d 6f 72 6e 69 6e 67 73 Data Ascii: <!doctype html><html data-n-head-ssr lang="en" prefix="og: http://ogp.me/ns#" data-n-head="%7B%22lang%22:%7B%22ssr%22:%22en%22%7D,%22prefix%22:%7B%22ssr%22:%22og:%20http://ogp.me/ns#%22%7D%7D"> <head > <title>Website Accessibility Notice \| Mornings
2024-10-03 19:29:16 UTC	326	IN	Data Raw: 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 76 65 73 74 6f 72 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 6d 6d 2f 6c 65 61 72 6e 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 6d 73 74 61 72 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 70 72 6f 64 75 63 74 73 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 73 65 67 6d 65 6e 74 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 6d 6d 64 73 2d 74 6f 70 2d 68 61 74 2d 64 72 61 77 65 72 2d 73 65 63 74 69 6f 6e 5f 5f 69 74 65 6d 2d 6c 69 6e 6b 20 6d 6d 64 73 2d 62 75 74 74 6f 6e 5f 5f 6d 64 63 20 6d 6d 64 73 2d 62 75 74 74 6f 6e 2d 2d 66 6c 6f 61 74 5f 5f 6d 64 63 20 6d 6d 64 73 2d 62 75 74 74 6f 6e 2d 2d 6d 65 64 69 75 6d 5f 5f 6d 64 63 20 6d 6d 64 73 2d 62 75 74 74 6f 6e 2d Data Ascii: href="https://investor.morningstar.com/mm/learn?utm_source=mstar&utm_medium=products&utm_campaign=segment" target="_blank" class="mmds-top-hat-drawer-section__item-link mmds-button__mdc mmds-button--float__mdc mmds-button--medium__mdc mmds-button-
2024-10-03 19:29:16 UTC	16367	IN	Data Raw: 3c 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 6f 72 6e 69 6e 67 73 74 61 72 20 49 6e 76 65 73 74 6f 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 20 3c 21 2d 2d 2d 2d 3e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 6d 64 73 2d 74 6f 70 2d 68 61 74 2d 64 72 61 77 65 72 2d 73 65 63 74 69 6f 6e 5f 5f 69 74 65 6d 22 20 64 61 74 61 2d 76 2d 38 33 65 62 38 39 39 38 3e 3c 61 20 64 61 74 61 2d 6d 64 73 2d 76 65 72 73 69 6f 6e 3d 22 40 6d 6d 64 73 2f 62 75 74 74 6f 6e 2d 31 30 2e 37 37 2e 30 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 62 75 73 69 6e 65 73 73 2f 62 72 61 6e 64 73 2f 77 65 61 6c 74 68 2f 70 72 6f 64 75 63 74 73 2f 62 79 61 6c Data Ascii: <span> Morningstar Investor </span> ...--></a></li><li class="mmds-top-hat-drawer-section__item" data-v-83eb8998><a data-mds-version="@mmds/button-10.77.0" href="https://www.morningstar.com/business/brands/wealth/products/byal
2024-10-03 19:29:16 UTC	16384	IN	Data Raw: 5f 69 74 65 6d 20 6d 64 73 2d 6c 69 73 74 2d 67 72 6f 75 70 5f 5f 69 74 65 6d 20 6d 61 72 6b 65 74 69 6e 67 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 67 72 6f 75 70 2d 6c 69 73 74 2d 69 74 65 6d 22 20 64 61 74 61 2d 76 2d 37 63 63 35 31 31 33 32 20 64 61 74 61 2d 76 2d 36 38 34 66 35 38 37 61 3e 3c 61 20 68 72 65 66 3d 22 2f 63 6f 6d 70 61 6e 79 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6c 69 6e 6b 20 6d 64 73 2d 6c 69 73 74 2d 67 72 6f 75 70 5f 5f 6c 69 6e 6b 22 20 64 61 74 61 2d 76 2d 33 34 64 61 38 37 34 62 20 64 61 74 61 2d 76 2d 37 63 63 35 31 31 33 32 3e 3c 21 2d 2d 2d 2d 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 64 73 2d 6c 69 73 74 2d 67 72 6f 75 70 5f 5f 69 74 65 6d 2d 74 65 78 74 22 20 64 61 74 61 2d 76 2d Data Ascii: _item mds-list-group__item marketing-navigation__group-list-item" data-v-7cc51132 data-v-684f587a><a href="/company" tabindex="0" class="mdc-link mds-list-group__link" data-v-34da874b data-v-7cc51132>...--> <span class="mds-list-group__item-text" data-v-
2024-10-03 19:29:16 UTC	16384	IN	Data Raw: 6c 5f 5f 6d 64 63 20 6d 6d 64 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 6f 6c 2d 2d 31 32 5f 5f 6d 64 63 20 6d 6d 64 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 6f 6c 2d 2d 33 2d 61 74 2d 31 30 32 35 5f 5f 6d 64 63 20 6d 6d 64 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 6f 6c 2d 2d 7a 65 72 6f 2d 70 61 64 64 69 6e 67 5f 5f 6d 64 63 22 20 64 61 74 61 2d 76 2d 33 37 32 62 66 64 35 37 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 6e 61 76 2d 63 6f 6c 22 20 64 61 74 61 2d 76 2d 31 39 63 35 31 64 31 65 20 64 61 74 61 2d 76 2d 33 37 32 62 66 64 35 37 3e 3c 68 36 20 63 6c 61 73 73 3d 22 74 69 74 6c 65 22 20 64 61 74 61 2d 76 2d 31 39 63 35 31 64 31 65 3e 3c 73 70 61 6e 20 64 61 74 61 2d 76 2d 31 39 63 35 31 64 31 65 3e 4f 75 72 20 42 Data Ascii: l__mdc mmds-layout-grid__col--12__mdc mmds-layout-grid__col--3-at-1025__mdc mmds-layout-grid__col--zero-padding__mdc" data-v-372bfd57><div class="footer-nav-col" data-v-19c51d1e data-v-372bfd57><h6 class="title" data-v-19c51d1e><span data-v-19c51d1e>Our B
2024-10-03 19:29:16 UTC	16350	IN	Data Raw: 6c 5f 5f 6d 64 63 20 6d 6d 64 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 6f 6c 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 2d 63 65 6e 74 65 72 5f 5f 6d 64 63 20 6d 6d 64 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 6f 6c 2d 2d 31 32 5f 5f 6d 64 63 20 6d 6d 64 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 6f 6c 2d 2d 38 2d 61 74 2d 31 30 32 35 5f 5f 6d 64 63 22 20 64 61 74 61 2d 76 2d 33 37 32 62 66 64 35 37 3e 3c 64 69 76 20 64 61 74 61 2d 76 2d 33 37 32 62 66 64 35 37 3e 3c 75 6c 20 64 61 74 61 2d 76 2d 33 37 32 62 66 64 35 37 3e 3c 6c 69 20 73 69 7a 65 3d 22 78 73 6d 61 6c 6c 22 20 63 6c 61 73 73 3d 22 6d 6d 64 73 2d 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 76 2d 31 30 33 66 37 35 66 61 20 64 61 74 61 2d 76 2d 33 37 32 62 66 64 35 37 3e Data Ascii: l__mdc mmds-layout-grid__col--align-self-center__mdc mmds-layout-grid__col--12__mdc mmds-layout-grid__col--8-at-1025__mdc" data-v-372bfd57><div data-v-372bfd57><ul data-v-372bfd57><li size="xsmall" class="mmds-footer-link" data-v-103f75fa data-v-372bfd57>
2024-10-03 19:29:16 UTC	16384	IN	Data Raw: 74 6c 65 3a 72 2c 68 72 65 66 3a 61 68 7d 2c 5f 6d 65 74 61 64 61 74 61 3a 7b 75 69 64 3a 22 63 73 35 38 39 33 64 36 38 35 31 35 39 65 33 37 63 38 22 7d 7d 2c 7b 6c 69 6e 6b 3a 7b 74 69 74 6c 65 3a 73 2c 68 72 65 66 3a 61 6b 7d 2c 5f 6d 65 74 61 64 61 74 61 3a 7b 75 69 64 3a 22 63 73 36 61 31 35 36 36 66 64 32 33 35 65 30 37 38 37 22 7d 7d 2c 7b 6c 69 6e 6b 3a 7b 74 69 74 6c 65 3a 62 4e 2c 68 72 65 66 3a 61 69 7d 2c 5f 6d 65 74 61 64 61 74 61 3a 7b 75 69 64 3a 22 63 73 38 65 35 38 65 38 33 33 38 35 36 38 31 36 36 36 22 7d 7d 2c 7b 6c 69 6e 6b 3a 7b 74 69 74 6c 65 3a 74 2c 68 72 65 66 3a 61 6a 7d 2c 5f 6d 65 74 61 64 61 74 61 3a 7b 75 69 64 3a 22 63 73 31 35 39 34 35 34 36 61 39 35 63 32 38 38 64 66 22 7d 7d 2c 7b 6c 69 6e 6b 3a 7b 74 69 74 6c 65 3a 75 2c Data Ascii: tle:r,href:ah},_metadata:{uid:"cs5893d685159e37c8"}},{link:{title:s,href:ak},_metadata:{uid:"cs6a1566fd235e0787"}},{link:{title:bN,href:ai},_metadata:{uid:"cs8e58e83385681666"}},{link:{title:t,href:aj},_metadata:{uid:"cs1594546a95c288df"}},{link:{title:u,
2024-10-03 19:29:16 UTC	16384	IN	Data Raw: 64 5f 61 74 3a 22 32 30 32 31 2d 30 39 2d 32 33 54 31 39 3a 32 35 3a 34 39 2e 35 31 30 5a 22 2c 63 72 65 61 74 65 64 5f 62 79 3a 69 2c 68 69 67 68 6c 69 67 68 74 3a 62 2c 6c 69 6e 6b 5f 75 72 6c 3a 7b 74 69 74 6c 65 3a 59 2c 68 72 65 66 3a 64 7a 7d 2c 74 61 67 73 3a 5b 5d 2c 74 69 74 6c 65 3a 59 2c 75 70 64 61 74 65 64 5f 61 74 3a 22 32 30 32 32 2d 30 37 2d 32 37 54 30 33 3a 30 39 3a 32 32 2e 30 37 33 5a 22 2c 75 70 64 61 74 65 64 5f 62 79 3a 65 2c 75 72 6c 3a 7b 74 69 74 6c 65 3a 59 2c 68 72 65 66 3a 64 7a 7d 2c 70 75 62 6c 69 73 68 5f 64 65 74 61 69 6c 73 3a 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 64 2c 6c 6f 63 61 6c 65 3a 63 2c 74 69 6d 65 3a 22 32 30 32 32 2d 30 37 2d 32 37 54 30 33 3a 30 39 3a 32 32 2e 37 35 30 5a 22 2c 75 73 65 72 3a 65 7d 7d 2c 7b Data Ascii: d_at:"2021-09-23T19:25:49.510Z",created_by:i,highlight:b,link_url:{title:Y,href:dz},tags:[],title:Y,updated_at:"2022-07-27T03:09:22.073Z",updated_by:e,url:{title:Y,href:dz},publish_details:{environment:d,locale:c,time:"2022-07-27T03:09:22.750Z",user:e}},{
2024-10-03 19:29:17 UTC	13869	IN	Data Raw: 74 73 5c 75 30 30 32 46 6d 6f 72 6e 69 6e 67 73 74 61 72 2d 6f 66 66 69 63 65 22 7d 2c 7b 6d 65 6e 75 49 74 65 6d 54 79 70 65 3a 6a 2c 6c 61 62 65 6c 3a 61 56 2c 75 72 69 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 64 62 72 73 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 5c 75 30 30 32 46 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 42 32 42 77 65 62 73 69 74 65 22 7d 2c 7b 6d 65 6e 75 49 74 65 6d 54 79 70 65 3a 6a 2c 6c 61 62 65 6c 3a 61 57 2c 75 72 69 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 63 72 65 64 69 74 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 5c 75 30 30 32 46 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 42 32 42 77 65 62 73 69 74 65 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 74 6f 70 68 61 74 6d 65 6e 75 26 75 74 6d 5f Data Ascii: ts\u002Fmorningstar-office"},{menuItemType:j,label:aV,uri:"https:\u002F\u002Fdbrs.morningstar.com\u002F?utm_source=B2Bwebsite"},{menuItemType:j,label:aW,uri:"https:\u002F\u002Fcredit.morningstar.com\u002F?utm_source=B2Bwebsite&utm_campaign=tophatmenu&utm_

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:16 UTC	569	OUT	GET /content/assets/d3634a4.js HTTP/1.1 Host: www.morningstar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.morningstar.com/company/accessibility Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:29:16 UTC	659	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 11021 Connection: close Date: Wed, 02 Oct 2024 06:08:30 GMT Last-Modified: Wed, 02 Oct 2024 00:35:59 GMT ETag: "160225840b776b7d624bc51ee13de74e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 fce673b0e9c8ffbca0678547d3b9c424.cloudfront.net (CloudFront), 1.1 a148356b14492df0e216c234ac2c2308.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: nsXtz5bl4KJ3ovfbUjgeM7-LzX4aLii-vhACIVg3ANBurwaZsuO-rQ== Age: 134447
2024-10-03 19:29:16 UTC	11021	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 64 61 74 61 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 64 3d 64 61 74 61 5b 30 5d 2c 6c 3d 64 61 74 61 5b 31 5d 2c 66 3d 64 61 74 61 5b 32 5d 2c 69 3d 30 2c 79 3d 5b 5d 3b 69 3c 64 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 3d 64 5b 69 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6e 29 26 26 6f 5b 6e 5d 26 26 79 2e 70 75 73 68 28 6f 5b 6e 5d 5b 30 5d 29 2c 6f 5b 6e 5d 3d 30 3b 66 6f 72 28 74 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 74 29 26 26 28 65 5b 74 5d 3d 6c 5b 74 5d 29 3b 66 6f 72 28 76 26 26 76 28 64 61 74 61 29 Data Ascii: !function(e){function t(data){for(var t,n,d=data[0],l=data[1],f=data[2],i=0,y=[];i<d.length;i++)n=d[i],Object.prototype.hasOwnProperty.call(o,n)&&o[n]&&y.push(o[n][0]),o[n]=0;for(t in l)Object.prototype.hasOwnProperty.call(l,t)&&(e[t]=l[t]);for(v&&v(data)

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:17 UTC	605	OUT	GET /consent/b44b7288-723c-44e2-ab4f-97f253fa98bd-test/OtAutoBlock.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.morningstar.com/company/accessibility Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:29:17 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:29:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8ccf57125d030f6b-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Wed, 02 Oct 2024 19:48:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: B53c9lfEaZVlbb2znzG2GA== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4972b6c0-001e-00c0-47ca-1519ce000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-03 19:29:17 UTC	452	IN	Data Raw: 33 64 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 7b 7d 2c 68 3d 30 3b 68 3c 75 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 64 3d 75 5b 68 5d 3b 69 66 28 64 2e 54 61 67 3d 3d 3d 66 29 7b 67 3d 64 3b 62 72 65 61 6b 7d 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6b 3d 64 2e 54 61 67 3b 76 61 72 20 43 3d 28 6b 3d 2d 31 21 3d 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 22 29 3f 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 22 2c 22 22 29 3a 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2c 22 22 29 2c 2d 31 21 3d 3d 28 6c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 3f 6b 2e 72 65 Data Ascii: 3deb!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.re
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 6e 28 66 29 7b 76 61 72 20 67 3d 5b 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0a 72 65 74 75 72 6e 20 6c 2e 68 72 65 66 3d 64 2c 2d 31 21 3d 3d 28 64 3d 6c 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 77 77 77 22 29 7c 7c 32 3c 64 2e 6c 65 6e 67 74 68 3f 64 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6c 2e 68 6f 73 74 6e 61 6d 65 7d 28 66 29 3b 76 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 3d 3d 3d 68 7d 29 26 26 28 67 3d 5b 22 43 30 30 30 34 22 5d 29 3b 72 65 74 75 72 6e 20 67 7d 28 61 29 29 2c 7b 63 61 74 65 67 6f 72 79 49 64 73 3a 63 2c 76 73 43 61 Data Ascii: n(f){var g=[],h=function(d){var l=document.createElement("a");return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCa
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 61 29 7b 76 61 72 20 63 2c 62 3d 71 28 61 2e 73 72 63 7c 7c 22 22 29 3b 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 29 26 26 28 78 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 61 2c 62 2e 76 73 43 61 74 49 64 73 29 2c 6d 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 62 2e 76 73 43 61 74 49 64 73 29 7c 7c 28 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 73 63 72 69 70 74 65 78 65 63 75 74 65 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 74 65 78 74 2f 70 6c 61 69 6e 22 3d 3d 3d 0a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 26 26 65 2e 70 72 65 76 65 6e 74 44 65 Data Ascii: a){var c,b=q(a.src\|\|"");(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.type="text/plain"),a.addEventListener("beforescriptexecute",c=function(e){"text/plain"===a.getAttribute("type")&&e.preventDe
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 72 73 2f 61 72 65 61 5c 78 33 64 64 69 73 63 6c 6f 73 75 72 65 73 2f 73 69 7a 65 5c 78 33 64 37 32 38 78 39 30 2f 70 6f 73 5c 78 33 64 54 6f 70 2f 72 61 6e 64 6f 6d 5c 78 33 64 33 33 33 33 2f 56 69 65 77 69 64 5c 78 33 64 38 37 36 35 33 33 33 33 33 2f 70 67 69 64 5c 78 33 64 4d 46 49 2c 4d 44 49 2c 4d 45 49 2c 4d 53 49 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 34 33 63 63 32 64 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: rs/area\x3ddisclosures/size\x3d728x90/pos\x3dTop/random\x3d3333/Viewid\x3d876533333/pgid\x3dMFI,MDI,MEI,MSI","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.morningstar.com/assets/f43cc2d.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https:/
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 6e 67 73 74 61 72 2e 63 6f 6d 2f 5f 6e 75 78 74 2f 31 36 2e 33 39 30 31 39 36 66 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 2c 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 38 34 36 37 35 32 38 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 69 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 76 69 6d 65 6f 2e 63 6f 6d 2f 39 32 36 33 31 30 39 33 37 2f 65 32 66 39 66 63 32 33 33 37 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 33 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c Data Ascii: ngstar.com/_nuxt/16.390196f.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://8467528.fls.doubleclick.net/activityi","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://vimeo.com/926310937/e2f9fc2337","CategoryId":["C0003"],"Vendor":null
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 61 73 73 65 74 73 2f 62 62 62 63 30 34 61 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 33 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 77 73 72 6f 6f 6d 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 6e 65 77 73 72 6f 6f 6d 2f 6e 65 77 73 2d 61 72 63 68 69 76 65 2f 70 72 65 73 73 2d 72 65 6c 65 61 73 65 2d 64 65 74 61 69 6c 73 2f 32 30 32 33 2f 4d 6f 72 6e 69 6e 67 73 74 61 72 2d 53 75 73 74 61 69 6e 61 6c 79 74 69 63 73 2d 4c 61 75 6e 63 Data Ascii: oryId":["C0004"],"Vendor":null},{"Tag":"https://www.morningstar.com/content/assets/bbbc04a.js","CategoryId":["C0003"],"Vendor":null},{"Tag":"https://newsroom.morningstar.com/newsroom/news-archive/press-release-details/2023/Morningstar-Sustainalytics-Launc
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 6d 2f 6e 65 77 73 72 6f 6f 6d 2f 6e 65 77 73 2d 61 72 63 68 69 76 65 2f 70 72 65 73 73 2d 72 65 6c 65 61 73 65 2d 64 65 74 61 69 6c 73 2f 32 30 32 34 2f 57 68 6f 2d 61 72 65 2d 79 6f 75 72 2d 6c 61 72 67 65 73 74 2d 70 61 79 69 6e 67 2d 63 75 73 74 6f 6d 65 72 73 2d 61 6e 64 2d 77 68 61 74 2d 70 65 72 63 65 6e 74 61 67 65 2d 64 6f 2d 74 68 65 79 2d 65 61 63 68 2d 63 6f 6e 74 72 69 62 75 74 65 2d 74 6f 2d 79 6f 75 72 2d 6f 76 65 72 61 6c 6c 2d 72 65 76 65 6e 75 65 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 67 74 6d 2f 6f Data Ascii: m/newsroom/news-archive/press-release-details/2024/Who-are-your-largest-paying-customers-and-what-percentage-do-they-each-contribute-to-your-overall-revenue/default.aspx","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.google-analytics.com/gtm/o
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 68 61 72 74 62 65 61 74 2e 63 6f 6d 2f 6a 73 2f 63 68 61 72 74 62 65 61 74 5f 76 69 64 65 6f 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 2c 22 43 30 30 30 33 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6d 61 74 68 74 61 67 2e 63 6f 6d 2f 73 79 6e 63 2f 69 6d 67 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: C0004"],"Vendor":null},{"Tag":"https://static.chartbeat.com/js/chartbeat_video.js","CategoryId":["C0002","C0003"],"Vendor":null},{"Tag":"https://pixel.mathtag.com/sync/img","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://googleads.g.doubleclick.net/
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 70 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6e 65 77 72 65 6c 69 63 2d 62 72 6f 77 73 65 72 2d 61 67 65 6e 74 2d 73 63 72 69 70 74 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 2c 22 43 30 30 30 33 22 2c 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 2f 62 61 74 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 2c 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 63 6f 6e 74 65 6e 74 73 71 75 61 72 65 2e 6e Data Ascii: r":null},{"Tag":"https://mp.morningstar.com/static/newrelic-browser-agent-script.js","CategoryId":["C0002","C0003","C0004"],"Vendor":null},{"Tag":"https://bat.bing.com/bat.js","CategoryId":["C0002","C0004"],"Vendor":null},{"Tag":"https://t.contentsquare.n
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 30 30 30 32 22 2c 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 73 6d 65 64 69 61 2e 6d 6f 72 6e 69 6e 67 73 74 61 72 2e 63 6f 6d 2f 6d 73 74 61 72 2f 68 73 65 72 76 65 72 2f 73 69 74 65 5c 78 33 64 4e 65 77 73 6c 65 74 74 65 72 73 2f 61 72 65 61 5c 78 33 64 68 6f 6d 65 70 61 67 65 2f 73 69 7a 65 5c 78 33 64 37 32 38 78 39 30 2f 70 6f 73 5c 78 33 64 54 6f 70 2f 72 61 6e 64 6f 6d 5c 78 33 64 33 33 33 33 2f 56 69 65 77 69 64 5c 78 33 64 38 37 36 35 33 33 33 33 33 2f 70 67 69 64 5c 78 33 64 4d 46 49 2c 4d 44 49 2c 4d 45 49 2c 4d 53 49 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 Data Ascii: 0002","C0004"],"Vendor":null},{"Tag":"https://msmedia.morningstar.com/mstar/hserver/site\x3dNewsletters/area\x3dhomepage/size\x3d728x90/pos\x3dTop/random\x3d3333/Viewid\x3d876533333/pgid\x3dMFI,MDI,MEI,MSI","CategoryId":["C0004"],"Vendor":null},{"Tag":"ht

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:17 UTC	569	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.morningstar.com/company/accessibility Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:29:17 UTC	895	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:29:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: uiXk8gw/ehyoMvZ3GeQiaQ== Last-Modified: Thu, 03 Oct 2024 13:13:01 GMT x-ms-request-id: 22c02fad-e01e-0102-4b99-15d725000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Expires: Fri, 04 Oct 2024 19:29:17 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ccf5712ad7b5e65-EWR
2024-10-03 19:29:17 UTC	474	IN	Data Raw: 35 37 62 66 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 57bfvar OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 43 59 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 48 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c Data Ascii: CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 72 69 6d 28 29 7d 29 2c 6e 3d 30 2c 61 3d 76 6f 69 64 20 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: nction(t){return t.trim()}),n=0,a=void 0;n<i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 28 73 2e 77 69 6e 2e 5f 5f 67 70 70 3d 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 Data Ascii: (s.win.__gpp=s.executeGppApi,window.addEventListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.remov
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 2e 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2c 6e 3d 42 6f 6f 6c 65 61 6e 28 73 2e 77 69 6e 2e 66 72 61 6d 65 73 5b 74 5d 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: .win.document,n=Boolean(s.win.frames[t]);return n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 64 6f 77 2e 4f 74 54 72 75 73 74 65 64 54 79 70 65 2e 54 72 75 73 74 65 64 54 79 70 65 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 6f 74 2d 74 72 75 73 74 65 64 2d 74 79 70 65 2d 70 6f 6c 69 63 79 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 Data Ascii: dow.OtTrustedType.TrustedTypePolicy=window.trustedTypes.createPolicy("ot-trusted-type-policy",{createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[d
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 65 6e 61 6e Data Ascii: lement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===l.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.Tenan
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 Data Ascii: .geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage.set
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f Data Ascii: t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSO
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 Data Ascii: a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[u];b

Timestamp	Bytes transferred	Direction	Data
2024-10-03 19:29:17 UTC	559	OUT	GET /js/26989390140.js HTTP/1.1 Host: cdn.optimizely.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.morningstar.com/company/accessibility Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 19:29:17 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 19:29:17 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: JvD8p4ohQdEA2aexr5kyXE6pCXbtSPXhI7vmCXGFeIOGo6sF8bnMOJ+zmRBuwBXfkxsd99G088P4hEWubevm8R8zs73v6Nh9 x-amz-request-id: 3V78GEJPB6JBZ7NN x-amz-replication-status: PENDING Last-Modified: Thu, 26 Sep 2024 21:05:12 GMT ETag: W/"e9817dc84cff08c7597b4a67b8019a7f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 x-amz-meta-revision: 262 x-amz-meta-pci_enabled: False x-amz-version-id: BH7_GvKvRD9odQGaWGoO9EtqySn5kkeS CF-Cache-Status: HIT Age: 405 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: * Access-Control-Expose-Headers: x-amz-meta-revision Access-Control-Allow-Credentials: false Access-Control-Max-Age: 86400 Server: cloudflare CF-RAY: 8ccf571298af8c77-EWR
2024-10-03 19:29:17 UTC	438	IN	Data Raw: 33 38 61 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6c 69 65 6e 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 38 36 35 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 69 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 73 3d 22 6f 62 6a 65 63 74 22 2c 63 3d 22 73 74 72 69 6e 67 22 2c 66 3d 22 6d 6f 64 65 6c 22 2c 6c 3d 22 6e 61 6d 65 22 2c 64 3d 22 74 79 70 65 22 2c 68 3d 22 76 65 6e 64 6f Data Ascii: 38a0/! For license information please see client.min.js.LICENSE.txt /(function(){var __webpack_modules__={8650:function(t,n,e){var i;!function(r,o){"use strict";var u="function",a="undefined",s="object",c="string",f="model",l="name",d="type",h="vendo
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 4f 3d 22 4c 47 22 2c 52 3d 22 4d 69 63 72 6f 73 6f 66 74 22 2c 43 3d 22 4d 6f 74 6f 72 6f 6c 61 22 2c 4e 3d 22 4f 70 65 72 61 22 2c 44 3d 22 53 61 6d 73 75 6e 67 22 2c 4d 3d 22 53 68 61 72 70 22 2c 50 3d 22 53 6f 6e 79 22 2c 6a 3d 22 58 69 61 6f 6d 69 22 2c 4c 3d 22 5a 65 62 72 61 22 2c 46 3d 22 46 61 63 65 62 6f 6f 6b 22 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 7b 7d 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6e 5b 74 5b 65 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 6e 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 3d 3d 3d 63 26 26 2d 31 21 3d 3d 56 28 6e 29 2e 69 6e 64 65 78 4f 66 28 56 28 74 29 29 7d 2c 56 Data Ascii: O="LG",R="Microsoft",C="Motorola",N="Opera",D="Samsung",M="Sharp",P="Sony",j="Xiaomi",L="Zebra",F="Facebook",B=function(t){for(var n={},e=0;e<t.length;e++)n[t[e].toUpperCase()]=t[e];return n},U=function(t,n){return typeof t===c&&-1!==V(n).indexOf(V(t))},V
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 62 5d 7b 33 2c 36 7d 29 5c 62 2e 2b 76 65 72 73 69 6f 6e 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6f 70 65 72 61 29 28 3f 3a 2e 2b 76 65 72 73 69 6f 6e 5c 2f 7c 5b 5c 2f 20 5d 2b 29 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 76 5d 2c 5b 2f 6f 70 69 6f 73 5b 5c 2f 20 5d 2b 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 76 2c 5b 6c 2c 22 4f 70 65 72 61 20 4d 69 6e 69 22 5d 5d 2c 5b 2f 5c 62 6f 70 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 76 2c 5b 6c 2c 4e 5d 5d 2c 5b 2f 28 6b 69 6e 64 6c 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 75 6e 61 73 63 61 70 65 7c 6d 61 78 74 68 6f 6e 7c 6e 65 74 66 72 6f 6e 74 7c 6a 61 73 6d 69 6e 65 7c 62 6c 61 7a 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 61 76 61 6e 74 Data Ascii: b]{3,6})\b.+version\/([-\w\.]+)/i,/(opera)(?:.+version\/\|[\/ ]+)([\w\.]+)/i],[l,v],[/opios[\/ ]+([\w\.]+)/i],[v,[l,"Opera Mini"]],[/\bopr\/([\w\.]+)/i],[v,[l,N]],[/(kindle)\/([\w\.]+)/i,/(lunascape\|maxthon\|netfront\|jasmine\|blazer)[\/ ]?([\w\.]*)/i,/(avant
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 30 20 42 72 6f 77 73 65 72 22 5d 5d 2c 5b 2f 28 6f 63 75 6c 75 73 7c 73 61 6d 73 75 6e 67 7c 73 61 69 6c 66 69 73 68 7c 68 75 61 77 65 69 29 62 72 6f 77 73 65 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 28 2e 2b 29 2f 2c 22 24 31 20 42 72 6f 77 73 65 72 22 5d 2c 76 5d 2c 5b 2f 28 63 6f 6d 6f 64 6f 5f 64 72 61 67 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 76 5d 2c 5b 2f 28 65 6c 65 63 74 72 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 73 61 66 61 72 69 2f 69 2c 2f 28 74 65 73 6c 61 29 28 3f 3a 20 71 74 63 61 72 62 72 6f 77 73 65 72 7c 5c 2f 28 32 30 5c 64 5c 64 5c 2e 5b 2d 5c 77 5c 2e 5d 2b 29 29 2f 69 2c 2f 6d 3f 28 71 71 62 72 6f 77 73 65 72 7c 62 61 69 64 75 62 6f 78 61 70 70 7c 32 Data Ascii: 0 Browser"]],[/(oculus\|samsung\|sailfish\|huawei)browser\/([\w\.]+)/i],[[l,/(.+)/,"$1 Browser"],v],[/(comodo_dragon)\/([\w\.]+)/i],[[l,/_/g," "],v],[/(electron)\/([\w\.]+) safari/i,/(tesla)(?: qtcarbrowser\|\/(20\d\d\.[-\w\.]+))/i,/m?(qqbrowser\|baiduboxapp\|2
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 69 72 65 66 6f 78 20 52 65 61 6c 69 74 79 22 5d 5d 2c 5b 2f 65 6b 69 6f 68 66 2e 2b 28 66 6c 6f 77 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 73 77 69 66 74 66 6f 78 29 2f 69 2c 2f 28 69 63 65 64 72 61 67 6f 6e 7c 69 63 65 77 65 61 73 65 6c 7c 63 61 6d 69 6e 6f 7c 63 68 69 6d 65 72 61 7c 66 65 6e 6e 65 63 7c 6d 61 65 6d 6f 20 62 72 6f 77 73 65 72 7c 6d 69 6e 69 6d 6f 7c 63 6f 6e 6b 65 72 6f 72 7c 6b 6c 61 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5c 2b 5d 2b 29 2f 69 2c 2f 28 73 65 61 6d 6f 6e 6b 65 79 7c 6b 2d 6d 65 6c 65 6f 6e 7c 69 63 65 63 61 74 7c 69 63 65 61 70 65 7c 66 69 72 65 62 69 72 64 7c 70 68 6f 65 6e 69 78 7c 70 61 6c 65 6d 6f 6f 6e 7c 62 61 73 69 6c 69 73 6b 7c 77 61 74 65 72 66 6f 78 29 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 24 2f 69 Data Ascii: irefox Reality"]],[/ekiohf.+(flow)\/([\w\.]+)/i,/(swiftfox)/i,/(icedragon\|iceweasel\|camino\|chimera\|fennec\|maemo browser\|minimo\|conkeror\|klar)[\/ ]?([\w\.\+]+)/i,/(seamonkey\|k-meleon\|icecat\|iceape\|firebird\|phoenix\|palemoon\|basilisk\|waterfox)\/([-\w\.]+)$/i
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 5c 2e 5d 2b 20 5c 28 28 69 70 61 64 29 2f 69 2c 2f 5c 62 28 69 70 61 64 29 5c 64 5c 64 3f 2c 5c 64 5c 64 3f 5b 3b 5c 5d 5d 2e 2b 69 6f 73 2f 69 5d 2c 5b 66 2c 5b 68 2c 49 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 28 6d 61 63 69 6e 74 6f 73 68 29 3b 2f 69 5d 2c 5b 66 2c 5b 68 2c 49 5d 5d 2c 5b 2f 5c 62 28 73 68 2d 3f 5b 61 6c 74 76 7a 5d 3f 5c 64 5c 64 5b 61 2d 65 6b 6d 5d 3f 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 4d 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 5c 62 28 28 3f 3a 61 67 5b 72 73 5d 5b 32 33 5d 3f 7c 62 61 68 32 3f 7c 73 68 74 3f 7c 62 74 76 29 2d 61 3f 5b 6c 77 5d 5c 64 7b 32 7d 29 5c 62 28 3f 21 2e 2b 64 5c 2f 73 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 6b 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 28 3f 3a 68 75 61 77 65 69 7c 68 6f 6e 6f 72 29 28 5b 2d 5c 77 20 5d 2b 29 5b 3b 5c 29 Data Ascii: \.]+ \((ipad)/i,/\b(ipad)\d\d?,\d\d?[;\]].+ios/i],[f,[h,I],[d,b]],[/(macintosh);/i],[f,[h,I]],[/\b(sh-?[altvz]?\d\d[a-ekm]?)/i],[f,[h,M],[d,g]],[/\b((?:ag[rs][23]?\|bah2?\|sht?\|btv)-a?[lw]\d{2})\b(?!.+d\/s)/i],[f,[h,k],[d,b]],[/(?:huawei\|honor)([-\w ]+)[;\)
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 2f 5c 62 6c 67 2d 3f 28 5b 5c 64 5c 77 5d 2b 29 20 62 75 69 2f 69 5d 2c 5b 66 2c 5b 68 2c 4f 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 69 64 65 61 74 61 62 5b 2d 5c 77 20 5d 2b 29 2f 69 2c 2f 6c 65 6e 6f 76 6f 20 3f 28 73 5b 35 36 5d 30 30 30 5b 2d 5c 77 5d 2b 7c 74 61 62 28 3f 3a 5b 5c 77 20 5d 2b 29 7c 79 74 5b 2d 5c 64 5c 77 5d 7b 36 7d 7c 74 62 5b 2d 5c 64 5c 77 5d 7b 36 7d 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 22 4c 65 6e 6f 76 6f 22 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 28 3f 3a 6d 61 65 6d 6f 7c 6e 6f 6b 69 61 29 2e 2a 28 6e 39 30 30 7c 6c 75 6d 69 61 20 5c 64 2b 29 2f 69 2c 2f 6e 6f 6b 69 61 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5c 2e 5d 2a 29 2f 69 5d 2c 5b 5b 66 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 5b 68 2c 22 4e 6f 6b 69 61 22 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 70 69 Data Ascii: /\blg-?([\d\w]+) bui/i],[f,[h,O],[d,g]],[/(ideatab[-\w ]+)/i,/lenovo ?(s[56]000[-\w]+\|tab(?:[\w ]+)\|yt[-\d\w]{6}\|tb[-\d\w]{6})/i],[f,[h,"Lenovo"],[d,b]],[/(?:maemo\|nokia).(n900\|lumia \d+)/i,/nokia[-_ ]?([-\w\.])/i],[[f,/_/g," "],[h,"Nokia"],[d,g]],[/(pi
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 37 38 61 5d 5c 64 5c 64 3f 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 22 41 63 65 72 22 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 6d 5b 31 2d 35 5d 20 6e 6f 74 65 29 20 62 75 69 2f 69 2c 2f 5c 62 6d 7a 2d 28 5b 2d 5c 77 5d 7b 32 2c 7d 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 22 4d 65 69 7a 75 22 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 62 6c 61 63 6b 62 65 72 72 79 7c 62 65 6e 71 7c 70 61 6c 6d 28 3f 3d 5c 2d 29 7c 73 6f 6e 79 65 72 69 63 73 73 6f 6e 7c 61 63 65 72 7c 61 73 75 73 7c 64 65 6c 6c 7c 6d 65 69 7a 75 7c 6d 6f 74 6f 72 6f 6c 61 7c 70 6f 6c 79 74 72 6f 6e 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2a 29 2f 69 2c 2f 28 68 70 29 20 28 5b 5c 77 20 5d 2b 5c 77 29 2f 69 2c 2f 28 61 73 75 73 29 2d 3f 28 5c 77 2b 29 2f 69 2c 2f 28 6d 69 63 72 6f 73 6f 66 74 Data Ascii: 78a]\d\d?)/i],[f,[h,"Acer"],[d,b]],[/droid.+; (m[1-5] note) bui/i,/\bmz-([-\w]{2,})/i],[f,[h,"Meizu"],[d,g]],[/(blackberry\|benq\|palm(?=\-)\|sonyericsson\|acer\|asus\|dell\|meizu\|motorola\|polytron)[-_ ]?([-\w]*)/i,/(hp) ([\w ]+\w)/i,/(asus)-?(\w+)/i,/(microsoft
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 2c 5b 5b 68 2c 22 44 72 61 67 6f 6e 20 54 6f 75 63 68 22 5d 2c 66 2c 5b 64 2c 62 5d 5d 2c 5b 2f 5c 62 28 6e 73 2d 3f 5c 77 7b 30 2c 39 7d 29 20 62 2f 69 5d 2c 5b 66 2c 5b 68 2c 22 49 6e 73 69 67 6e 69 61 22 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 5c 62 28 28 6e 78 61 7c 6e 65 78 74 29 2d 3f 5c 77 7b 30 2c 39 7d 29 20 62 2f 69 5d 2c 5b 66 2c 5b 68 2c 22 4e 65 78 74 42 6f 6f 6b 22 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 5c 62 28 78 74 72 65 6d 65 5c 5f 29 3f 28 76 28 31 5b 30 34 35 5d 7c 32 5b 30 31 35 5d 7c 5b 33 34 36 39 5d 30 7c 37 5b 30 35 5d 29 29 20 62 2f 69 5d 2c 5b 5b 68 2c 22 56 6f 69 63 65 22 5d 2c 66 2c 5b 64 2c 67 5d 5d 2c 5b 2f 5c 62 28 6c 76 74 65 6c 5c 2d 29 3f 28 76 31 5b 31 32 5d 29 20 62 2f 69 5d 2c 5b 5b 68 2c 22 4c 76 54 65 6c 22 5d 2c 66 2c 5b 64 2c Data Ascii: ,[[h,"Dragon Touch"],f,[d,b]],[/\b(ns-?\w{0,9}) b/i],[f,[h,"Insignia"],[d,b]],[/\b((nxa\|next)-?\w{0,9}) b/i],[f,[h,"NextBook"],[d,b]],[/\b(xtreme\_)?(v(1[045]\|2[015]\|[3469]0\|7[05])) b/i],[[h,"Voice"],f,[d,g]],[/\b(lvtel\-)?(v1[12]) b/i],[[h,"LvTel"],f,[d,
2024-10-03 19:29:17 UTC	1369	IN	Data Raw: 3a 29 5c 62 2f 69 5d 2c 5b 5b 64 2c 77 5d 5d 2c 5b 2f 28 6f 75 79 61 29 2f 69 2c 2f 28 6e 69 6e 74 65 6e 64 6f 29 20 28 5b 77 69 64 73 33 75 74 63 68 5d 2b 29 2f 69 5d 2c 5b 68 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 73 68 69 65 6c 64 29 20 62 75 69 2f 69 5d 2c 5b 66 2c 5b 68 2c 22 4e 76 69 64 69 61 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 70 6c 61 79 73 74 61 74 69 6f 6e 20 5b 33 34 35 70 6f 72 74 61 62 6c 65 76 69 5d 2b 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 50 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 78 62 6f 78 28 3f 3a 20 6f 6e 65 29 3f 28 3f 21 3b 20 78 62 6f 78 29 29 5b 5c 29 3b 20 5d 2f 69 5d 2c 5b 66 2c 5b 68 2c 52 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 28 70 65 62 62 6c 65 29 29 61 70 70 2f 69 5d 2c 5b 68 2c 66 2c 5b 64 2c 79 5d Data Ascii: :)\b/i],[[d,w]],[/(ouya)/i,/(nintendo) ([wids3utch]+)/i],[h,f,[d,m]],[/droid.+; (shield) bui/i],[f,[h,"Nvidia"],[d,m]],[/(playstation [345portablevi]+)/i],[f,[h,P],[d,m]],[/\b(xbox(?: one)?(?!; xbox))[\); ]/i],[f,[h,R],[d,m]],[/((pebble))app/i],[h,f,[d,y]